last executing test programs:

17m31.09698756s ago: executing program 1 (id=2):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882)
socket$inet(0x2b, 0x801, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x100000000000000)

17m30.043360825s ago: executing program 1 (id=5):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1)
syz_emit_ethernet(0x7a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}]}]}}}}}}}, 0x0)
linkat(r1, &(0x7f00000000c0)='./gadget/dummy_udc\x00', r1, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x1000)
write(r0, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d15c3", 0x48)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"ec47b1b0b95a9b05dd3bbbbd19b3fd4b4ac1f6472818378bbff59d569fbe", 0xf745, 0x0, 0x0, 0xffff8001, 0x1, 0x6b7, 0x5, 0x0, [0x3, 0x6, 0x2, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x5, 0x3, 0xff, 0x4, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xd, 0x5]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fffff", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x80, 0xaf07, 0x10001}}}}}}, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000b80))
r6 = timerfd_create(0x9, 0x80800)
close(r6)
mmap$xdp(&(0x7f0000264000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, r1, 0x80000000)

17m14.419138726s ago: executing program 32 (id=5):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x1)
syz_emit_ethernet(0x7a, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}]}]}}}}}}}, 0x0)
linkat(r1, &(0x7f00000000c0)='./gadget/dummy_udc\x00', r1, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x1000)
write(r0, &(0x7f0000000380)="08000000091703000101d4d63b1b04000001ff0000002a3d6fcee7c39b42058102400000cee8ea1200000000005fc841900037b6c507fcba1d6fb6afd1d9cee6162e79305c7d15c3", 0x48)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000100)={"ec47b1b0b95a9b05dd3bbbbd19b3fd4b4ac1f6472818378bbff59d569fbe", 0xf745, 0x0, 0x0, 0xffff8001, 0x1, 0x6b7, 0x5, 0x0, [0x3, 0x6, 0x2, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x5, 0x3, 0xff, 0x4, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xd, 0x5]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x47, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fffff", 0x10, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x80, 0xaf07, 0x10001}}}}}}, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x45, 0x0, &(0x7f0000000b80))
r6 = timerfd_create(0x9, 0x80800)
close(r6)
mmap$xdp(&(0x7f0000264000/0x3000)=nil, 0x3000, 0x3000008, 0x100010, r1, 0x80000000)

7m44.369833862s ago: executing program 2 (id=946):
signalfd(0xffffffffffffffff, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x1d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000140)='dir0\x00', 0xa0)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000080)='dir0/per_cpu/cpu0/trace\x00', 0x103201, 0x0)

7m43.975104821s ago: executing program 2 (id=948):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1\n', 0x2)
close(r1)
write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./dev\x00', 0x2, 0x0)

7m40.831054724s ago: executing program 2 (id=952):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

7m40.047147612s ago: executing program 2 (id=954):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = socket(0x10, 0x802, 0x0)
write(r2, &(0x7f0000000000)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6", 0xf5)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x110000)
close(r6)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r9, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102)

7m38.123992406s ago: executing program 2 (id=955):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00081f25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
close(0xffffffffffffffff)

7m31.053201159s ago: executing program 2 (id=963):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x13, 0xe6, 0xaf, 0x10, 0x1608, 0x21c, 0x642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x80, 0x41, "", [{{0x9, 0x4, 0xea, 0x1, 0x0, 0xff, 0xff, 0x0, 0xa}}]}}]}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = epoll_create1(0x0)
dup3(r2, r3, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x0, 0x3, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = dup3(r3, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000300)={0x200f})

7m14.692282106s ago: executing program 33 (id=963):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
close(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x13, 0xe6, 0xaf, 0x10, 0x1608, 0x21c, 0x642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x80, 0x41, "", [{{0x9, 0x4, 0xea, 0x1, 0x0, 0xff, 0xff, 0x0, 0xa}}]}}]}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = epoll_create1(0x0)
dup3(r2, r3, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x0, 0x3, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
r5 = epoll_create1(0x0)
r6 = dup3(r3, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000300)={0x200f})

19.116141389s ago: executing program 0 (id=1669):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
syz_open_dev$evdev(0x0, 0x1, 0x942)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
link(0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket(0xa, 0x1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r3})

18.830272746s ago: executing program 0 (id=1671):
ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@'])
userfaultfd(0x80001)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c0000000e0a01080000000000000000000000040900010073797a31000000000900020073797a3200000000080004400000000180fe020073797a32000000000900020073797a3200000000140000001402010000000000000000000300000a0388"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c000280040001"], 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000)
syz_io_uring_setup(0xfff, &(0x7f0000000000)={0x0, 0x9a81, 0x400, 0x2, 0x14d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000003c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x1000002, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffbf, 0x3, 0xffffffff]], '\x00', [{0x6, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0x6, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x7, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xc00, 0xffd, 0x0, 0x0, 0x1}, {0x6, 0x4000, 0x0, 0x0, 0x1}, {0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0xc0844123, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
timer_settime(0x0, 0x1, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="141032fa954da1e3bdbd7002fadbdf250500000084c0a257fba4be1705aa1dbaf75e88d3f6b3a3eb10b5b21a811c7af4e0ff17c299575ded3228d06e7ce5bd8eed7a533c861de749fc3430cbb5913f2556990d5b41e3216e2e630667808be883"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc048)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x650, 0x0, 0x428, 0x428, 0xd0, 0x2e0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'pim6reg0\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@ipv6header={{0x28}, {0x2, 0x8, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0)

17.973572135s ago: executing program 0 (id=1672):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x50}}, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
tkill(r1, 0x3c)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0)
lseek(0xffffffffffffffff, 0x2000000000010002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
capset(0x0, 0x0)

15.785315026s ago: executing program 3 (id=1677):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x40004002})
epoll_pwait2(r2, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3})
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003)
fanotify_init(0x200, 0x2)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

13.721915474s ago: executing program 0 (id=1681):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000180)={{0x8, 0xc}, 0x1, 0x6, 0x8, {0x3b, 0x3}, 0x3, 0x6})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r5)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0)

12.286554697s ago: executing program 3 (id=1684):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0001}]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

12.199680239s ago: executing program 4 (id=1685):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10)

11.979009014s ago: executing program 4 (id=1686):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff000)

10.757074582s ago: executing program 0 (id=1687):
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4140010, r0, 0x6444b000)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
brk(0x5)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)

10.592892876s ago: executing program 4 (id=1688):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000300)='p:test/event1 ./file0:0x0 ar', 0x1c)

9.582200309s ago: executing program 4 (id=1690):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
userfaultfd(0x801)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

8.619042851s ago: executing program 5 (id=1691):
socket$packet(0x11, 0xa, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x12000000)
bind$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, 0xffffffffffffffff, 0x8000000)

7.020708368s ago: executing program 5 (id=1692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

6.570335989s ago: executing program 5 (id=1693):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x2}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4)

6.363016914s ago: executing program 3 (id=1694):
syz_open_dev$video4linux(&(0x7f0000000000), 0x80000000000ffff, 0x20002)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r4, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7cb, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x10}, 0x94)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpgrp(0x0)

6.349855523s ago: executing program 5 (id=1695):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
write(r1, &(0x7f0000000140)='off', 0x3)

6.06865522s ago: executing program 4 (id=1696):
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xcc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000200c41be1f00ddf82990f2712dafdf5023021020debcb4cf01eea10efdd111d50261d3c397c8cc213910b48be83e5586f36f0713c44cba5c5c477639fc4f66e385a01d84cb7f5d8207c8d079cff7a0e174c84408d0e24abf7aed67beab044da0d62061e0b309cfb50c330e460e09f320dc171ad37d6259543cfd548fec3a3ed54586ad983ac7d23e96c248081504ccc93dfd543601e70753b293db47cdeb7b5f1e5"])

4.666919002s ago: executing program 0 (id=1697):
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010af6"], 0x24, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x10000007, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b5, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x80003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x0, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x9, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0x7, 0xfffffffe, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0x7, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b397, 0x8001, 0x200001, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x1, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x2, 0x43ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x8000491, 0x9, 0x4, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x234, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x200, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x7, 0x7f, 0x9d27, 0x8, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x1000, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xdcce, 0x80000000, 0x101009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x8000000e, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x9, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000100)='syz1\x00', 0x4000, 0x0, 0x6, 0x0, &(0x7f00000002c0)=0x3}, {[0x6, 0x200, 0x8abb, 0x2ab3]}, 0x9, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r4, 0x2, 0x1f, &(0x7f0000000080)=""/31)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.553511755s ago: executing program 5 (id=1698):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000300)='p:test/event1 ./file0:0x0 ar', 0x1c)

4.501214137s ago: executing program 3 (id=1699):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mknod$loop(0x0, 0xc000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800004, 0x11, r1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
inotify_init()
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0)
r4 = fanotify_init(0x20, 0x2)
fanotify_mark(r4, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00')
unlink(&(0x7f0000000000)='./file0\x00')

3.626241106s ago: executing program 5 (id=1700):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, 0x0, 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a", 0x8d}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee7", 0xa0}, {&(0x7f0000000140)="de21cf0a7caa580c2ee9f858f448439a91d577dc48e04d539e17cf5357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc77b41daf55a31", 0x36}, {&(0x7f0000000540)="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", 0xddf}], 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

2.011475604s ago: executing program 3 (id=1701):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

1.824348798s ago: executing program 3 (id=1702):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00')
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0xffffffffffffffff)

0s ago: executing program 4 (id=1703):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

71028][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.084434][ T1191] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  133.114196][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.369896][ T6153] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  133.380558][ T6153] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  134.105718][ T6153] syz.4.31 (6153) used greatest stack depth: 20808 bytes left
[  134.888127][ T1191] usb 3-1: Using ep0 maxpacket: 16
[  136.927132][ T1191] usb 3-1: device descriptor read/all, error -71
[  137.861348][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'.
[  137.873997][ T6165] macsec0: entered promiscuous mode
[  140.620004][ T6183] syzkaller1: entered promiscuous mode
[  140.748292][ T6183] syzkaller1: entered allmulticast mode
[  141.415613][ T5757] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  141.644969][ T5757] usb 3-1: Using ep0 maxpacket: 16
[  141.651571][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.699624][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.778580][ T5757] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  141.815300][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.864489][ T5757] usb 3-1: config 0 descriptor??
[  143.444888][ T5757] usbhid 3-1:0.0: can't add hid device: -71
[  143.495192][ T5757] usbhid: probe of 3-1:0.0 failed with error -71
[  143.577695][ T5757] usb 3-1: USB disconnect, device number 6
[  149.804926][    T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  150.014886][    T8] usb 3-1: Using ep0 maxpacket: 16
[  151.256198][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.315951][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.391248][    T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  151.457997][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.523081][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[  152.757871][    T8] usb 3-1: config 0 descriptor??
[  152.986157][    T8] usb 3-1: can't set config #0, error -71
[  154.375580][    T8] usb 3-1: USB disconnect, device number 7
[  158.334868][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  159.666618][    T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  160.953092][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.986445][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'.
[  161.094931][    T9] usb 1-1: string descriptor 0 read error: -71
[  161.101142][    T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  161.229075][    T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  162.151589][    T9] usb 1-1: config 0 descriptor??
[  162.188807][    T9] usb 1-1: can't set config #0, error -71
[  162.239654][    T9] usb 1-1: USB disconnect, device number 2
[  164.002396][ T6356] =======================================================
[  164.002396][ T6356] WARNING: The mand mount option has been deprecated and
[  164.002396][ T6356]          and is ignored by this kernel. Remove the mand
[  164.002396][ T6356]          option from the mount to silence this warning.
[  164.002396][ T6356] =======================================================
[  167.750343][ T5757] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  168.780112][ T5757] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  168.819796][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.876201][ T5757] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  169.778115][ T5757] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  169.824942][ T5757] usb 5-1: Manufacturer: syz
[  169.849462][ T5757] usb 5-1: config 0 descriptor??
[  170.034922][ T5757] rc_core: IR keymap rc-hauppauge not found
[  170.061371][ T5757] Registered IR keymap rc-empty
[  170.089705][ T5757] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  170.150711][ T5757] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[  170.505163][    C0] igorplugusb 5-1:0.0: Error: urb status = -32
[  170.512176][    T9] usb 5-1: USB disconnect, device number 2
[  171.126075][ T6410] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[  171.126075][ T6410]    program syz.2.135 not setting count and/or reply_len properly
[  174.226214][ T6445] configfs-gadget.g1 gadget.0: HOST MAC 66:83:3d:18:6d:25
[  174.233525][ T6445] configfs-gadget.g1 gadget.0: MAC 12:24:ac:d5:98:df
[  175.699786][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'.
[  175.711834][ T6451] macsec0: entered promiscuous mode
[  176.141965][ T6463] syz.4.148 uses obsolete (PF_INET,SOCK_PACKET)
[  176.875339][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  177.188036][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.235482][    T8] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  177.936450][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.962761][    T8] usb 5-1: Product: syz
[  178.835295][    T8] usb 5-1: Manufacturer: syz
[  178.839942][    T8] usb 5-1: SerialNumber: syz
[  179.161857][    T8] usb 5-1: Cannot retrieve CPort count: -71
[  179.192347][    T8] usb 5-1: Cannot retrieve CPort count: -71
[  179.247069][    T8] es2_ap_driver: probe of 5-1:1.0 failed with error -71
[  179.267665][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[  179.298079][    T8] usb 5-1: USB disconnect, device number 3
[  181.698282][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[  185.174891][ T5757] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  185.394923][ T5757] usb 3-1: Using ep0 maxpacket: 32
[  185.416438][ T5757] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  186.517490][ T5757] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  186.789977][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'.
[  186.861457][ T6574] FAULT_INJECTION: forcing a failure.
[  186.861457][ T6574] name failslab, interval 1, probability 0, space 0, times 0
[  186.885675][ T5757] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  186.922080][ T6574] CPU: 0 PID: 6574 Comm: syz.0.168 Not tainted syzkaller #0
[  186.929392][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  186.939445][ T6574] Call Trace:
[  186.942713][ T6574]  <TASK>
[  186.945644][ T6574]  dump_stack_lvl+0x18c/0x250
[  186.950323][ T6574]  ? show_regs_print_info+0x20/0x20
[  186.955507][ T6574]  ? load_image+0x420/0x420
[  186.959994][ T6574]  ? __might_sleep+0xe0/0xe0
[  186.964570][ T6574]  ? __lock_acquire+0x7d80/0x7d80
[  186.969578][ T6574]  should_fail_ex+0x394/0x4c0
[  186.974244][ T6574]  should_failslab+0x9/0x20
[  186.978731][ T6574]  slab_pre_alloc_hook+0x59/0x300
[  186.983744][ T6574]  ? group_cpus_evenly+0xcb/0x5a0
[  186.988754][ T6574]  ? group_cpus_evenly+0xcb/0x5a0
[  186.993763][ T6574]  __kmem_cache_alloc_node+0x53/0x250
[  186.999122][ T6574]  ? group_cpus_evenly+0xcb/0x5a0
[  187.004128][ T6574]  __kmalloc+0xa7/0x240
[  187.008285][ T6574]  group_cpus_evenly+0xcb/0x5a0
[  187.013122][ T6574]  ? sbitmap_find_bit+0x490/0x490
[  187.018146][ T6574]  blk_mq_map_queues+0x4d/0x420
[  187.023005][ T6574]  ? __kmalloc_node+0xe4/0x240
[  187.027756][ T6574]  ? mutex_unlock+0x10/0x10
[  187.032248][ T6574]  blk_mq_alloc_tag_set+0x860/0x1020
[  187.037520][ T6574]  loop_add+0x2eb/0x990
[  187.041663][ T6574]  loop_control_ioctl+0x128/0x590
[  187.046690][ T6574]  ? loop_set_hw_queue_depth+0x110/0x110
[  187.052311][ T6574]  ? bpf_lsm_file_ioctl+0x9/0x10
[  187.057230][ T6574]  ? security_file_ioctl+0x80/0xa0
[  187.062352][ T6574]  ? loop_set_hw_queue_depth+0x110/0x110
[  187.067993][ T6574]  __se_sys_ioctl+0xfd/0x170
[  187.072570][ T6574]  do_syscall_64+0x55/0xb0
[  187.076973][ T6574]  ? clear_bhb_loop+0x40/0x90
[  187.081658][ T6574]  ? clear_bhb_loop+0x40/0x90
[  187.086335][ T6574]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.092226][ T6574] RIP: 0033:0x7f842e79e159
[  187.096631][ T6574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.116221][ T6574] RSP: 002b:00007f842f64a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  187.124621][ T6574] RAX: ffffffffffffffda RBX: 00007f842ea25fa0 RCX: 00007f842e79e159
[  187.132575][ T6574] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004
[  187.140545][ T6574] RBP: 00007f842e835024 R08: 0000000000000000 R09: 0000000000000000
[  187.148503][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.156454][ T6574] R13: 00007f842ea26038 R14: 00007f842ea25fa0 R15: 00007ffcd0abc798
[  187.164428][ T6574]  </TASK>
[  187.173678][ T5757] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  187.187283][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  187.285855][ T5757] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  187.324968][ T5757] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  187.333429][ T5757] usb 3-1: Product: syz
[  187.383632][ T5757] usb 3-1: Manufacturer: syz
[  187.403091][ T5757] usb 3-1: SerialNumber: syz
[  188.270877][ T5757] usb 3-1: config 0 descriptor??
[  188.351457][ T5757] usb 3-1: can't set config #0, error -71
[  188.384070][ T5757] usb 3-1: USB disconnect, device number 8
[  188.436197][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  188.908171][    T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  188.939306][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.991374][    T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  189.023532][    T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  189.058741][    T8] usb 4-1: Manufacturer: syz
[  189.085363][    T8] usb 4-1: config 0 descriptor??
[  189.254937][    T8] rc_core: IR keymap rc-hauppauge not found
[  189.319252][ T5757] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  189.380001][    T8] Registered IR keymap rc-empty
[  189.407861][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  189.460037][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7
[  189.525056][ T5757] usb 1-1: Using ep0 maxpacket: 32
[  189.542730][ T5757] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  189.571851][ T5757] usb 1-1: config 0 has no interface number 0
[  189.603338][ T5757] usb 1-1: config 0 interface 184 has no altsetting 0
[  189.631733][ T5757] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  189.658378][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.690073][ T5757] usb 1-1: Product: syz
[  189.709467][ T5757] usb 1-1: Manufacturer: syz
[  189.727657][ T5757] usb 1-1: SerialNumber: syz
[  189.746923][ T5757] usb 1-1: config 0 descriptor??
[  189.762393][ T5757] smsc75xx v1.0.0
[  189.913276][ T5808] usb 4-1: USB disconnect, device number 2
[  190.584961][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  190.675727][ T6628] netlink: 120 bytes leftover after parsing attributes in process `syz.3.179'.
[  190.773409][ T5757] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  190.793705][    T8] usb 5-1: Using ep0 maxpacket: 8
[  190.824455][    T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  190.855832][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.918855][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.969373][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.980455][ T5757] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  191.031794][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.048064][ T5757] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  191.091349][ T5757] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  191.105614][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  191.145965][ T5757] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  191.164866][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.203601][ T5757] smsc75xx: probe of 1-1:0.184 failed with error -71
[  192.035205][ T5083] Bluetooth: hci0: command 0x0406 tx timeout
[  192.041288][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  192.056868][    T8] usb 5-1: usb_control_msg returned -32
[  192.107906][    T8] usbtmc 5-1:16.0: can't read capabilities
[  192.116499][ T5757] usb 1-1: USB disconnect, device number 4
[  192.426490][ T6645] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90
[  194.368980][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.596983][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.887649][    T8] usb 5-1: USB disconnect, device number 4
[  196.995534][    T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  197.196299][    T8] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  197.229525][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.274970][    T8] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  198.064257][    T8] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  198.123857][    T8] usb 5-1: Manufacturer: syz
[  198.153491][    T8] usb 5-1: config 0 descriptor??
[  198.344836][    T8] rc_core: IR keymap rc-hauppauge not found
[  198.375000][    T8] Registered IR keymap rc-empty
[  198.404954][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  198.485108][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8
[  199.562886][ T5757] usb 5-1: USB disconnect, device number 5
[  201.587062][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[  209.274774][    C0] sched: RT throttling activated
[  209.635417][ T5808] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  209.876973][ T5808] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  209.915861][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.004914][ T5808] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  210.065711][ T5808] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  210.073708][ T5808] usb 1-1: Manufacturer: syz
[  210.151421][ T5808] usb 1-1: config 0 descriptor??
[  210.394891][ T5808] rc_core: IR keymap rc-hauppauge not found
[  210.411754][ T5808] Registered IR keymap rc-empty
[  210.437377][ T5808] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  210.503025][ T5808] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  210.959388][ T5808] usb 1-1: USB disconnect, device number 5
[  211.406565][ T6870] syzkaller0: entered promiscuous mode
[  211.412048][ T6870] syzkaller0: entered allmulticast mode
[  215.709554][ T6912] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  215.868301][    T8] IPVS: starting estimator thread 0...
[  215.875988][ T6912] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  215.985867][ T6922] IPVS: using max 34 ests per chain, 81600 per kthread
[  216.004340][ T6912] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  216.095338][ T5808] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  216.329222][ T5808] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  216.357098][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.430606][ T5808] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  216.470115][ T5808] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  216.517393][ T5808] usb 3-1: Manufacturer: syz
[  216.545483][ T5808] usb 3-1: config 0 descriptor??
[  216.774958][ T5808] rc_core: IR keymap rc-hauppauge not found
[  216.808887][ T5808] Registered IR keymap rc-empty
[  216.836746][ T5808] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  216.869907][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  216.921212][ T5808] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  217.351206][ T5808] usb 3-1: USB disconnect, device number 9
[  224.434882][ T5808] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  224.510171][ T7014] netlink: 120 bytes leftover after parsing attributes in process `syz.3.240'.
[  224.637758][ T5808] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  224.671682][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.729147][ T5808] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  224.768183][ T5808] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  224.811373][ T5808] usb 1-1: Manufacturer: syz
[  224.840558][ T5808] usb 1-1: config 0 descriptor??
[  225.026791][ T5808] rc_core: IR keymap rc-hauppauge not found
[  225.060638][ T5808] Registered IR keymap rc-empty
[  225.081697][ T5808] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  225.164226][ T5808] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11
[  226.809586][ T5808] usb 1-1: USB disconnect, device number 6
[  227.534865][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  229.317865][ T5808] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 118, changing to 10
[  229.384270][ T5808] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25391, setting to 1024
[  230.932509][ T5808] usb 4-1: unable to read config index 1 descriptor/start: -71
[  230.994882][ T5808] usb 4-1: can't read configurations, error -71
[  234.305142][ T7051] netlink: 120 bytes leftover after parsing attributes in process `syz.4.249'.
[  235.004884][ T5757] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  235.244034][ T5757] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  235.286737][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.385067][ T5757] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  235.434833][ T5757] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  235.442831][ T5757] usb 4-1: Manufacturer: syz
[  236.873896][ T5757] usb 4-1: config 0 descriptor??
[  237.094824][ T5757] rc_core: IR keymap rc-hauppauge not found
[  237.137851][ T5757] Registered IR keymap rc-empty
[  237.157300][ T5757] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  237.227604][ T5757] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  238.650514][    T8] usb 4-1: USB disconnect, device number 5
[  240.953791][ T7099] netlink: 120 bytes leftover after parsing attributes in process `syz.4.264'.
[  246.624932][ T5757] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  248.055656][ T5757] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  248.064024][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.138284][ T5757] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  248.174865][ T5757] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  248.214824][ T5757] usb 4-1: Manufacturer: syz
[  248.230896][ T5757] usb 4-1: config 0 descriptor??
[  248.364899][ T5757] rc_core: IR keymap rc-hauppauge not found
[  248.387064][ T5757] Registered IR keymap rc-empty
[  248.408512][ T5757] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  248.467393][ T5757] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  248.955255][ T5757] usb 4-1: USB disconnect, device number 6
[  248.998550][ T7130] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  249.025509][ T7130] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  249.071097][ T7130] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  249.087673][    T9] IPVS: starting estimator thread 0...
[  249.195034][ T7133] IPVS: using max 35 ests per chain, 84000 per kthread
[  254.513067][ T5757] libceph: connect (1)[c::]:6789 error -101
[  254.522166][ T7154] FAULT_INJECTION: forcing a failure.
[  254.522166][ T7154] name failslab, interval 1, probability 0, space 0, times 0
[  254.549261][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  254.556135][ T7151] ceph: No mds server is up or the cluster is laggy
[  254.675800][ T7154] CPU: 0 PID: 7154 Comm: syz.4.283 Not tainted syzkaller #0
[  254.683116][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.693193][ T7154] Call Trace:
[  254.696459][ T7154]  <TASK>
[  254.699376][ T7154]  dump_stack_lvl+0x18c/0x250
[  254.704044][ T7154]  ? show_regs_print_info+0x20/0x20
[  254.709232][ T7154]  ? load_image+0x420/0x420
[  254.713741][ T7154]  ? __might_sleep+0xe0/0xe0
[  254.718323][ T7154]  ? __lock_acquire+0x7d80/0x7d80
[  254.723353][ T7154]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  254.729254][ T7154]  should_fail_ex+0x394/0x4c0
[  254.733924][ T7154]  should_failslab+0x9/0x20
[  254.738416][ T7154]  slab_pre_alloc_hook+0x59/0x300
[  254.743428][ T7154]  ? pcpu_alloc+0x11e7/0x1880
[  254.748091][ T7154]  ? percpu_ref_init+0xc3/0x340
[  254.752926][ T7154]  __kmem_cache_alloc_node+0x53/0x250
[  254.758285][ T7154]  ? percpu_ref_init+0xc3/0x340
[  254.763119][ T7154]  ? free_ioctx_users+0x1c0/0x1c0
[  254.768145][ T7154]  kmalloc_trace+0x2a/0xe0
[  254.772562][ T7154]  percpu_ref_init+0xc3/0x340
[  254.777252][ T7154]  ? percpu_ref_put+0x230/0x230
[  254.782110][ T7154]  ioctx_alloc+0x24e/0x770
[  254.786521][ T7154]  __se_sys_io_setup+0x7b/0x190
[  254.791380][ T7154]  do_syscall_64+0x55/0xb0
[  254.795792][ T7154]  ? clear_bhb_loop+0x40/0x90
[  254.800459][ T7154]  ? clear_bhb_loop+0x40/0x90
[  254.805124][ T7154]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.811002][ T7154] RIP: 0033:0x7fb37959e159
[  254.815405][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.835015][ T7154] RSP: 002b:00007fb37a3b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  254.843414][ T7154] RAX: ffffffffffffffda RBX: 00007fb379825fa0 RCX: 00007fb37959e159
[  254.851373][ T7154] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001
[  254.859328][ T7154] RBP: 00007fb379635024 R08: 0000000000000000 R09: 0000000000000000
[  254.867283][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.875240][ T7154] R13: 00007fb379826038 R14: 00007fb379825fa0 R15: 00007ffeb6f654d8
[  254.883220][ T7154]  </TASK>
[  256.342589][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.816989][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  257.283937][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  259.726960][ T7174] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  259.805237][ T7179] syz.2.288: attempt to access beyond end of device
[  259.805237][ T7179] loop2: rw=0, sector=2, nr_sectors = 2 limit=0
[  259.818228][ T7179] MINIX-fs: unable to read superblock
[  259.875180][ T7174] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  259.916133][ T7174] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  264.497773][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'.
[  264.798788][ T7212] bond1 (unregistering): Released all slaves
[  264.861833][ T7215] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  264.888451][ T7215] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  264.927525][ T7215] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  266.555172][ T5757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  266.610426][ T5757] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  267.119758][ T7231] netlink: 120 bytes leftover after parsing attributes in process `syz.4.304'.
[  268.345111][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  268.575128][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.599862][    T9] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  268.621266][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.792865][    T9] usb 5-1: Product: syz
[  268.807848][    T9] usb 5-1: Manufacturer: syz
[  268.812450][    T9] usb 5-1: SerialNumber: syz
[  268.861958][    T9] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  270.322831][    T9] gspca_mr97310a: reg write [19] error -110
[  270.347505][    T9] mr97310a: probe of 5-1:1.0 failed with error -110
[  271.053894][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.094057][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.210673][    T9] usb 5-1: USB disconnect, device number 6
[  276.137203][ T7261] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  276.145652][ T7261] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  276.154056][ T7261] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  280.467023][ T7293] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  280.524268][ T7293] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  280.582193][ T7293] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  280.590310][    T8] IPVS: starting estimator thread 0...
[  280.688005][ T5772] Bluetooth: hci0: Malformed Event: 0x02
[  280.697516][ T7298] IPVS: using max 35 ests per chain, 84000 per kthread
[  280.891792][ T7300] netlink: 'syz.2.323': attribute type 5 has an invalid length.
[  285.016135][ T7335] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  285.024396][ T7335] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  285.078792][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.338'.
[  285.140818][ T7335] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  286.721388][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  286.885472][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  287.059698][ T7350] fido_id[7350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  288.012535][ T7358] netlink: 'syz.0.340': attribute type 13 has an invalid length.
[  288.558702][ T7360] Bluetooth: MGMT ver 1.22
[  292.030452][ T7380] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  292.038756][ T7380] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  292.047261][ T7380] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  294.915497][ T7393] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  295.920631][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.351'.
[  297.617668][ T5808] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  298.347940][ T5808] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  299.230652][ T7406] fido_id[7406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  299.349781][ T7411] netlink: 120 bytes leftover after parsing attributes in process `syz.3.357'.
[  306.728264][ T7454] syz.4.368[7454]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  317.197602][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.203902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.216589][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  318.445036][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.480441][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  318.531700][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  318.590074][    T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  318.626316][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.844822][ T5807] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  320.083479][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.154320][ T5807] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  320.175482][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.202881][ T5807] usb 5-1: config 0 descriptor??
[  320.432639][ T5807] usbhid 5-1:0.0: can't add hid device: -71
[  320.467940][ T5807] usbhid: probe of 5-1:0.0 failed with error -71
[  320.498501][ T5807] usb 5-1: USB disconnect, device number 7
[  320.897391][    T9] cxacru 4-1:1.0: send of cm 0x91 failed (-71)
[  320.903928][    T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  321.604870][ T5807] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  322.041488][    T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  322.103210][    T9] cxacru: probe of 4-1:1.0 failed with error -71
[  322.130642][    T9] usb 4-1: USB disconnect, device number 7
[  322.211365][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.254955][ T5807] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  322.314158][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.359135][ T5807] usb 5-1: config 0 descriptor??
[  322.389150][ T5807] usb 5-1: can't set config #0, error -71
[  322.426239][ T5807] usb 5-1: USB disconnect, device number 8
[  322.604866][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  323.484846][ T5808] usb 3-1: Using ep0 maxpacket: 32
[  323.508345][ T5808] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  323.537628][ T5808] usb 3-1: config 0 has no interface number 0
[  323.569014][ T5808] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  323.605912][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.644446][ T5808] usb 3-1: Product: syz
[  323.654682][ T5808] usb 3-1: Manufacturer: syz
[  323.674868][ T5808] usb 3-1: SerialNumber: syz
[  323.711185][ T5808] usb 3-1: config 0 descriptor??
[  323.729077][ T5808] smsc95xx v2.0.0
[  324.141697][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  324.194754][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  324.447572][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  324.497175][ T5808] smsc95xx: probe of 3-1:0.67 failed with error -71
[  324.538406][ T5808] usb 3-1: USB disconnect, device number 10
[  330.397770][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  330.602771][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.643407][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  330.697574][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  330.872415][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  331.890353][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.353854][    T9] cxacru 3-1:1.0: send of cm 0x91 failed (-71)
[  332.375614][    T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  332.405505][    T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  332.435426][    T9] cxacru: probe of 3-1:1.0 failed with error -71
[  332.458163][    T9] usb 3-1: USB disconnect, device number 11
[  333.356159][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  333.605549][    T8] usb 1-1: Using ep0 maxpacket: 32
[  333.629316][    T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  333.657303][    T8] usb 1-1: config 0 has no interface number 0
[  333.688933][    T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  333.722260][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.763343][    T8] usb 1-1: Product: syz
[  333.778072][    T8] usb 1-1: Manufacturer: syz
[  333.795724][    T8] usb 1-1: SerialNumber: syz
[  333.818539][    T8] usb 1-1: config 0 descriptor??
[  333.840637][    T8] smsc95xx v2.0.0
[  334.244006][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  334.283801][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  334.515323][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  334.570283][    T8] smsc95xx: probe of 1-1:0.67 failed with error -71
[  334.608814][    T8] usb 1-1: USB disconnect, device number 7
[  337.324938][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  337.908015][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  338.903423][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  338.947247][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  339.768069][    T8] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  339.826333][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.925490][    T8] usb 5-1: can't set config #1, error -71
[  340.825660][    T8] usb 5-1: USB disconnect, device number 9
[  341.264836][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  341.475041][    T9] usb 3-1: Using ep0 maxpacket: 32
[  341.506897][    T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  341.534796][    T9] usb 3-1: config 0 has no interface number 0
[  341.547944][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  341.579278][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.617935][    T9] usb 3-1: Product: syz
[  341.622100][    T9] usb 3-1: Manufacturer: syz
[  341.644287][    T9] usb 3-1: SerialNumber: syz
[  341.669952][    T9] usb 3-1: config 0 descriptor??
[  341.701072][    T9] smsc95xx v2.0.0
[  342.104463][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  342.138040][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  342.370006][    T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  342.418719][    T9] smsc95xx: probe of 3-1:0.67 failed with error -71
[  343.846970][    T9] usb 3-1: USB disconnect, device number 12
[  344.116023][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'.
[  345.316812][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  345.606562][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.638825][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  345.677972][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  345.722056][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  345.759750][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.860188][    T9] cxacru 3-1:1.0: send of cm 0x91 failed (-71)
[  346.944316][    T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  346.974296][    T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  347.006907][    T9] cxacru: probe of 3-1:1.0 failed with error -71
[  347.056611][    T9] usb 3-1: USB disconnect, device number 13
[  350.469307][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  351.569434][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'.
[  351.659180][    T9] usb 5-1: Using ep0 maxpacket: 32
[  351.693897][    T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  351.719476][    T9] usb 5-1: config 0 has no interface number 0
[  351.871684][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  352.610318][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.674899][    T9] usb 5-1: Product: syz
[  352.679080][    T9] usb 5-1: Manufacturer: syz
[  352.683673][    T9] usb 5-1: SerialNumber: syz
[  352.759346][    T9] usb 5-1: config 0 descriptor??
[  352.790345][    T9] usb 5-1: can't set config #0, error -71
[  352.833145][    T9] usb 5-1: USB disconnect, device number 10
[  357.394986][    T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  358.337020][    T8] usb 3-1: Using ep0 maxpacket: 32
[  358.417544][    T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  358.448492][    T8] usb 3-1: config 0 has no interface number 0
[  358.486638][    T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  358.518138][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.554820][    T8] usb 3-1: Product: syz
[  358.571457][    T8] usb 3-1: Manufacturer: syz
[  358.590414][    T8] usb 3-1: SerialNumber: syz
[  358.615270][    T8] usb 3-1: config 0 descriptor??
[  358.636560][    T8] smsc95xx v2.0.0
[  358.767348][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[  359.062160][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  359.075851][ T7721] Illegal XDP return value 4294967294 on prog  (id 15) dev N/A, expect packet loss!
[  360.096594][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  360.133667][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  360.171680][    T8] smsc95xx: probe of 3-1:0.67 failed with error -71
[  360.286127][    T8] usb 3-1: USB disconnect, device number 14
[  368.201952][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  369.394906][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.426997][    T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  369.456342][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.497562][    T9] usb 3-1: config 0 descriptor??
[  369.721348][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  369.739293][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[  369.773031][    T9] usb 3-1: USB disconnect, device number 15
[  371.034895][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  378.631865][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.645594][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  380.735003][ T5807] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  380.865156][ T1191] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  381.125968][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.164786][ T1191] usb 4-1: device descriptor read/64, error -71
[  382.630628][ T5807] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  382.673990][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.184858][ T1191] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  384.134248][ T5807] usb 3-1: config 0 descriptor??
[  384.189871][ T5807] usb 3-1: can't set config #0, error -71
[  384.253176][ T5807] usb 3-1: USB disconnect, device number 17
[  388.044830][ T5807] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  388.247083][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.285014][ T5807] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  388.324470][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.435848][ T5807] usb 1-1: config 0 descriptor??
[  388.444890][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  388.681857][ T5807] usbhid 1-1:0.0: can't add hid device: -71
[  388.715134][ T5807] usbhid: probe of 1-1:0.0 failed with error -71
[  389.788227][ T5807] usb 1-1: USB disconnect, device number 8
[  390.505234][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  390.554811][ T5807] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  391.494911][    T8] usb 5-1: device descriptor read/64, error -71
[  391.714725][ T5807] usb 1-1: device not accepting address 9, error -71
[  391.934755][    T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  399.124872][ T1191] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  399.326052][ T1191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.352977][ T7961] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.515'.
[  399.365601][ T1191] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  399.388966][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.430388][ T1191] usb 4-1: config 0 descriptor??
[  400.125558][ T1191] usbhid 4-1:0.0: can't add hid device: -71
[  400.131542][ T1191] usbhid: probe of 4-1:0.0 failed with error -71
[  400.989948][ T1191] usb 4-1: USB disconnect, device number 10
[  401.414767][ T1191] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  408.734770][    T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  410.667834][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.437661][    T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  411.480311][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.519982][    T8] usb 3-1: config 0 descriptor??
[  412.924918][    T8] usb 3-1: can't set config #0, error -71
[  413.934450][    T8] usb 3-1: USB disconnect, device number 18
[  415.244953][ T8016] overlayfs: missing 'lowerdir'
[  415.450037][ T8020] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.539'.
[  415.473033][ T8013] overlayfs: unescaped trailing colons in lowerdir mount option.
[  418.208177][    T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  419.045958][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.347996][    T8] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  420.399280][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.460424][    T8] usb 5-1: config 0 descriptor??
[  420.486534][    T8] usb 5-1: can't set config #0, error -71
[  421.276374][ T8042] overlayfs: missing 'lowerdir'
[  421.377104][ T8044] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.549'.
[  421.394861][    T8] usb 5-1: USB disconnect, device number 13
[  427.934900][ T5808] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  428.168173][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.190209][ T5808] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  428.226814][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.262966][ T5808] usb 1-1: config 0 descriptor??
[  428.542143][ T5808] usbhid 1-1:0.0: can't add hid device: -71
[  428.565947][ T5808] usbhid: probe of 1-1:0.0 failed with error -71
[  428.613455][ T5808] usb 1-1: USB disconnect, device number 11
[  433.680996][ T8099] ceph: No mds server is up or the cluster is laggy
[  433.692182][ T5757] libceph: connect (1)[c::]:6789 error -101
[  434.134590][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  434.198443][ T8080] syz.3.560 (8080): drop_caches: 2
[  435.314826][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  435.548635][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.567507][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  436.894847][    T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  436.987908][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.230209][    T9] usb 1-1: USB disconnect, device number 12
[  437.299813][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'.
[  437.317154][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.327915][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.343001][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.359298][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.067720][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.074058][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  441.117715][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'.
[  452.574828][ T5757] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  452.786215][ T5757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  454.085163][ T5757] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  454.118588][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'.
[  454.158799][ T5757] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  454.202034][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.278247][ T5757] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19!
[  454.794883][ T5757] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  454.998416][ T5757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  455.047102][ T5757] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  455.083827][ T5757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  455.116090][ T5757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  455.268083][ T5757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  455.297196][ T5757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  455.514893][ T8248] sg_write: data in/out 548864/136 bytes for SCSI command 0x0-- guessing data in;
[  455.514893][ T8248]    program syz.2.609 not setting count and/or reply_len properly
[  455.547043][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  455.557693][ T5757] usb 4-1: Product: syz
[  455.561946][ T5757] usb 4-1: Manufacturer: syz
[  455.573449][ T5757] cdc_wdm 4-1:1.0: skipping garbage
[  455.581922][ T5757] cdc_wdm 4-1:1.0: skipping garbage
[  455.590675][ T5757] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  455.599753][ T5757] cdc_wdm 4-1:1.0: Unknown control protocol
[  455.783338][ T5757] usb 4-1: USB disconnect, device number 12
[  455.870846][ T5808] usb 5-1: USB disconnect, device number 14
[  457.985642][ T5808] libceph: connect (1)[c::]:6789 error -101
[  457.991658][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  458.040129][ T8269] ceph: No mds server is up or the cluster is laggy
[  458.884760][ T5808] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  458.939773][ T8292] UDC core: g1: couldn't find an available UDC or it's busy
[  459.076796][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.097023][ T5808] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  459.120288][ T5808] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  459.210660][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.118531][ T8298] process 'syz.2.623' launched './file1' with NULL argv: empty string added
[  460.195841][ T5808] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19!
[  460.534905][ T5808] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  460.704972][ T5808] usb 4-1: device descriptor read/64, error -71
[  460.985010][ T5808] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  461.224785][ T5808] usb 4-1: device descriptor read/64, error -71
[  462.444268][ T5757] libceph: connect (1)[c::]:6789 error -101
[  462.486876][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  462.492973][ T8311] ceph: No mds server is up or the cluster is laggy
[  462.521310][ T5757] usb 1-1: USB disconnect, device number 13
[  462.545551][ T5808] usb usb4-port1: attempt power cycle
[  462.985084][ T8326] netlink: 'syz.0.632': attribute type 11 has an invalid length.
[  463.454908][ T5757] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  463.614890][ T5757] usb 3-1: device descriptor read/64, error -71
[  463.894817][ T5757] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  465.309724][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[  465.444800][ T5757] usb 3-1: device descriptor read/64, error -71
[  465.451215][ T5808] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  466.956051][ T5757] usb usb3-port1: attempt power cycle
[  467.060573][ T8348] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  472.455817][ T5808] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  474.607591][ T8405] trusted_key: encrypted_key: insufficient parameters specified
[  477.716116][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  477.994689][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  479.189348][    T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  479.221851][    T9] usb 5-1: config 0 has no interface number 0
[  479.291939][    T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  479.361021][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  479.383172][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.498801][    T9] usb 5-1: Product: syz
[  480.503002][    T9] usb 5-1: Manufacturer: syz
[  480.849105][    T9] usb 5-1: SerialNumber: syz
[  480.877053][    T9] usb 5-1: config 0 descriptor??
[  480.910591][    T9] usb 5-1: can't set config #0, error -71
[  481.674924][    T9] usb 5-1: USB disconnect, device number 15
[  482.422885][ T8440] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  482.539451][ T8443] serio: Serial port ttynull
[  484.106568][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'.
[  487.508383][ T8461] ip_tables: iptables: counters copy to user failed while replacing table
[  489.990115][ T8474] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  490.440131][ T8488] netlink: 'syz.0.679': attribute type 12 has an invalid length.
[  494.515668][ T8510] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  497.440737][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[  500.613316][ T8556] mmap: syz.3.697 (8556) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  500.717279][ T8564] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  500.935496][ T8569] netlink: 68 bytes leftover after parsing attributes in process `syz.4.701'.
[  501.219920][ T8575] kvm: emulating exchange as write
[  502.241399][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  502.248668][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.507087][ T8583] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  502.513627][ T8583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  505.225315][ T5757] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  505.232987][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  505.504581][ T8583] vhci_hcd vhci_hcd.0: Device attached
[  505.524763][    T8] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  505.593724][ T8584] vhci_hcd: connection reset by peer
[  505.625849][ T6751] vhci_hcd: stop threads
[  505.630161][ T6751] vhci_hcd: release socket
[  505.690970][ T6751] vhci_hcd: disconnect device
[  505.715494][ T8595] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  505.768220][ T8579] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  507.347516][ T8615] UDC core: g1: couldn't find an available UDC or it's busy
[  507.574925][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  507.764781][ T5757] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  507.776508][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.788883][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  507.799976][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.818753][    T9] usb 5-1: config 0 descriptor??
[  507.946269][ T5757] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  507.956416][ T5757] usb 1-1: config 0 has no interface number 0
[  507.962595][ T5757] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  507.978251][ T5757] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  507.987538][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.006856][ T5757] usb 1-1: Product: syz
[  508.012197][ T5757] usb 1-1: Manufacturer: syz
[  508.020144][ T5757] usb 1-1: SerialNumber: syz
[  508.039014][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  508.055733][ T5757] usb 1-1: config 0 descriptor??
[  508.063617][    T9] usbhid: probe of 5-1:0.0 failed with error -71
[  508.076306][ T5757] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  508.094469][    T9] usb 5-1: USB disconnect, device number 16
[  509.223108][ T5807] usb 1-1: USB disconnect, device number 16
[  509.244111][ T5807] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  509.714884][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  509.907079][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.926388][    T8] vhci_hcd: vhci_device speed not set
[  511.393862][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  511.457150][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.475433][ T8633] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  511.504069][    T9] usb 5-1: config 0 descriptor??
[  511.658823][    T9] usb 5-1: can't set config #0, error -71
[  511.697788][    T9] usb 5-1: USB disconnect, device number 17
[  521.847410][ T8686] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  527.840035][ T8723] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.749'.
[  532.264691][ T5757] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  533.635356][ T8750] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  533.746100][ T5757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.134798][ T5757] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  535.194821][ T5757] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  535.252745][ T5757] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  536.182911][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.250917][ T5757] usb 5-1: can't set config #1, error -71
[  536.282613][ T5757] usb 5-1: USB disconnect, device number 18
[  536.618709][ T8767] warning: `syz.2.756' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  538.106541][ T8773] netlink: 68 bytes leftover after parsing attributes in process `syz.4.760'.
[  539.056372][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'.
[  539.083883][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.592435][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.646330][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.672672][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.702960][ T5757] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  542.687829][ T5757] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.712724][ T5757] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  542.827321][ T5757] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  542.874821][ T5757] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  542.883870][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.024384][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'.
[  543.335573][ T5757] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  544.585915][ T5757] cxacru: probe of 1-1:1.0 failed with error -22
[  544.634920][ T5757] usb 1-1: USB disconnect, device number 17
[  544.780114][    T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  544.837790][    T8] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  544.974421][ T8802] fido_id[8802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  550.676396][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'.
[  552.293454][ T5807] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  552.571378][ T5807] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  553.023014][ T8850] fido_id[8850]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  554.633517][ T5757] libceph: connect (1)[c::]:6789 error -101
[  554.649923][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  554.667822][ T8858] ceph: No mds server is up or the cluster is laggy
[  555.772978][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  558.804852][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'.
[  562.269568][ T1191] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  562.948200][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  562.954508][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.186104][ T8902] ceph: No mds server is up or the cluster is laggy
[  563.193024][ T5807] libceph: connect (1)[c::]:6789 error -101
[  563.201351][ T1191] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  563.222449][ T5807] libceph: mon0 (1)[c::]:6789 connect error
[  563.391815][ T8905] fido_id[8905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  567.374795][ T1191] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  567.599868][ T1191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  567.655052][ T1191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  567.689530][ T1191] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  567.759713][ T1191] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  567.807928][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.432373][ T1191] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  569.457150][ T1191] cxacru: probe of 4-1:1.0 failed with error -22
[  569.469636][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'.
[  570.451525][ T5757] usb 4-1: USB disconnect, device number 17
[  571.158698][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  571.199140][    T9] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  571.336387][ T8946] fido_id[8946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  571.462686][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'.
[  573.736080][ T8970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  576.191538][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.816'.
[  578.264493][    T8] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  578.338165][    T8] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  578.543022][ T8995] fido_id[8995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  578.684845][ T1191] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  579.666371][ T1191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  579.717328][ T1191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  579.758338][ T1191] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  579.815755][ T1191] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  579.848734][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.093066][ T1191] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  580.129882][ T1191] cxacru: probe of 5-1:1.0 failed with error -22
[  580.308839][ T1191] usb 5-1: USB disconnect, device number 19
[  586.945072][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  587.238514][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  587.342346][ T9059] UDC core: g1: couldn't find an available UDC or it's busy
[  587.718922][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  587.776864][    T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  587.836631][    T8] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  588.691392][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.951044][    T8] cxacru 1-1:1.0: invalid response length to cm 0x90: 0
[  589.015341][ T9067] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  589.066372][ T9067] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  589.150366][    T8] usb 1-1: USB disconnect, device number 19
[  592.396580][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  596.204733][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  596.436164][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.473299][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  596.521316][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  596.562374][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  596.604250][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.634124][ T9104] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.849'.
[  596.813536][ T9106] comedi comedi1: Minor 4 specified more than once!
[  596.833883][    T9] cxacru 3-1:1.0: invalid response length to cm 0x90: 0
[  597.773204][ T5757] usb 3-1: USB disconnect, device number 22
[  602.085927][ T9124] netlink: 'syz.3.858': attribute type 72 has an invalid length.
[  606.779318][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  607.124800][    T9] usb 5-1: Using ep0 maxpacket: 8
[  607.140200][    T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  608.117467][    T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  608.658335][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.701544][    T9] usb 5-1: Product: syz
[  608.708195][ T9163] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  608.729658][    T9] usb 5-1: Manufacturer: syz
[  609.599483][    T9] usb 5-1: SerialNumber: syz
[  609.632423][    T9] usb 5-1: config 0 descriptor??
[  609.659675][    T9] usb 5-1: can't set config #0, error -71
[  609.693961][    T9] usb 5-1: USB disconnect, device number 20
[  613.998535][ T9183] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  617.087234][ T9200] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  618.588476][ T9161] libceph: connect (1)[c::]:6789 error -101
[  619.457458][ T9204] ceph: No mds server is up or the cluster is laggy
[  619.464483][ T9161] libceph: mon0 (1)[c::]:6789 connect error
[  622.783298][ T9222] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  624.388180][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.394540][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  630.569685][ T9260] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  630.636290][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  638.864652][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  640.444209][ T9161] libceph: connect (1)[c::]:6789 error -101
[  640.464903][ T9161] libceph: mon0 (1)[c::]:6789 connect error
[  640.532872][ T9313] ceph: No mds server is up or the cluster is laggy
[  644.865502][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  645.794635][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  648.000706][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  648.045439][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  648.074706][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  648.104737][    T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  648.127541][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.924632][    T9] cxacru 4-1:1.0: send of cm 0x90 failed (-71)
[  649.950629][ T9395] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  650.010468][ T9398] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  650.019585][ T9107] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  650.036527][    T9] usb 4-1: USB disconnect, device number 18
[  650.044102][ T9067] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  652.921851][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'.
[  653.344613][ T9351] Bluetooth: hci4: command 0x0406 tx timeout
[  658.225839][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  659.639664][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  664.005716][ T9471] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  664.103805][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'.
[  667.104862][ T9351] Bluetooth: hci4: command 0x0406 tx timeout
[  668.173187][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[  673.423712][ T9505] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  675.848083][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  678.345164][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'.
[  681.321211][    T8] libceph: connect (1)[c::]:6789 error -101
[  681.337573][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  682.207789][    T9] libceph: connect (1)[c::]:6789 error -101
[  682.213806][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  682.234987][ T9534] ceph: No mds server is up or the cluster is laggy
[  682.834621][    T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  683.487957][    T8] usb 3-1: Using ep0 maxpacket: 16
[  683.498982][    T8] usb 3-1: config 8 has an invalid interface number: 234 but max is 0
[  683.526033][    T8] usb 3-1: config 8 has no interface number 0
[  683.552392][    T8] usb 3-1: config 8 interface 234 has no altsetting 0
[  683.600300][    T8] usb 3-1: New USB device found, idVendor=1608, idProduct=021c, bcdDevice= 6.42
[  683.623762][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.657309][    T8] usb 3-1: Product: syz
[  683.661496][    T8] usb 3-1: Manufacturer: syz
[  683.688864][    T8] usb 3-1: SerialNumber: syz
[  684.544662][ T9351] Bluetooth: hci4: command 0x0406 tx timeout
[  685.905388][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  685.912099][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  687.323698][    T8] io_ti 3-1:8.234: required endpoints missing
[  687.342743][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'.
[  687.414769][    T8] usb 3-1: USB disconnect, device number 23
[  690.325303][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  690.334379][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  690.343832][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  690.351741][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  690.361161][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  690.368676][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  692.217518][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.466638][   T51] Bluetooth: hci0: command tx timeout
[  692.608541][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.013171][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.549681][   T51] Bluetooth: hci0: command tx timeout
[  695.089597][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.291673][ T9581] chnl_net:caif_netlink_parms(): no params data found
[  696.630420][   T51] Bluetooth: hci0: command tx timeout
[  696.759994][ T9615] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  697.746187][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.753285][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.173092][ T9581] bridge_slave_0: entered allmulticast mode
[  698.216129][ T9581] bridge_slave_0: entered promiscuous mode
[  699.284838][ T9638] overlayfs: missing 'lowerdir'
[  699.627051][   T51] Bluetooth: hci0: command tx timeout
[  699.953501][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.025815][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.033076][ T9581] bridge_slave_1: entered allmulticast mode
[  701.486651][ T9581] bridge_slave_1: entered promiscuous mode
[  701.858244][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  703.300218][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.288764][ T9581] team0: Port device team_slave_0 added
[  705.361755][ T9581] team0: Port device team_slave_1 added
[  705.482347][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.495844][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.538724][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.583345][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.602294][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.751272][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.829050][ T9681] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  706.861769][ T9681] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  706.910798][ T9581] hsr_slave_0: entered promiscuous mode
[  706.947428][ T9681] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  706.958828][ T9581] hsr_slave_1: entered promiscuous mode
[  706.978952][ T9581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  707.006485][ T9681] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  707.014287][ T9581] Cannot create hsr debugfs directory
[  707.032139][ T9681] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  707.083415][ T9681] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  707.114386][   T59] hsr_slave_0: left promiscuous mode
[  707.135537][ T9681] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  707.145980][   T59] hsr_slave_1: left promiscuous mode
[  707.173348][ T9681] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  707.183967][   T59] bridge_slave_1: left allmulticast mode
[  707.206495][   T59] bridge_slave_1: left promiscuous mode
[  707.231761][ T9681] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  707.247111][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.267602][   T59] bridge_slave_0: left allmulticast mode
[  707.305166][   T59] bridge_slave_0: left promiscuous mode
[  707.326086][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.488924][   T59] veth1_macvtap: left promiscuous mode
[  707.494460][   T59] veth0_macvtap: left promiscuous mode
[  707.744905][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  708.903088][   T59] veth1_vlan: left promiscuous mode
[  708.924999][   T59] veth0_vlan: left promiscuous mode
[  709.033963][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  709.104639][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  709.185467][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  709.824833][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  711.110515][ T9351] Bluetooth: hci3: command 0x0406 tx timeout
[  711.185818][ T9351] Bluetooth: hci4: command 0x0406 tx timeout
[  712.082190][ T9351] Bluetooth: hci0: command 0x0c1a tx timeout
[  712.843924][   T59] team0 (unregistering): Port device team_slave_1 removed
[  712.959109][   T59] team0 (unregistering): Port device team_slave_0 removed
[  713.088118][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.213918][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.944127][   T59] bond0 (unregistering): Released all slaves
[  714.145005][ T9351] Bluetooth: hci0: command 0x0c1a tx timeout
[  716.534826][ T9351] Bluetooth: hci0: command 0x0c1a tx timeout
[  716.586038][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'.
[  716.629938][   T59] IPVS: stop unused estimator thread 0...
[  718.234470][ T9581] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  718.285899][ T9581] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  718.426538][ T9581] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  718.476423][ T9581] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  718.706738][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  718.781557][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.861526][ T9581] 8021q: adding VLAN 0 to HW filter on device team0
[  718.909816][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.916986][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.003564][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.010710][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.113739][ T9581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  719.194894][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  719.416495][    T8] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  719.452533][    T8] usb 1-1: config 0 has no interface number 0
[  720.466114][    T8] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  720.986801][    T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  721.020372][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.067795][    T8] usb 1-1: Product: syz
[  721.083462][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.108368][    T8] usb 1-1: Manufacturer: syz
[  722.173986][    T8] usb 1-1: SerialNumber: syz
[  722.536858][    T8] usb 1-1: config 0 descriptor??
[  722.579836][    T8] usb 1-1: can't set config #0, error -71
[  722.739849][    T8] usb 1-1: USB disconnect, device number 20
[  727.020474][ T9581] veth0_vlan: entered promiscuous mode
[  727.269227][ T9581] veth1_vlan: entered promiscuous mode
[  727.438770][ T9581] veth0_macvtap: entered promiscuous mode
[  727.481651][ T9581] veth1_macvtap: entered promiscuous mode
[  727.531148][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  727.614626][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.624448][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  727.717799][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.767169][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  727.821255][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.892842][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.946290][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.990788][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.037278][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.085757][ T9581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.094471][ T9581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.177498][ T9581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.214618][ T9581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.522382][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.571417][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.667845][ T8353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.712480][ T8353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.295733][   T28] audit: type=1800 audit(1788814936.300:2): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1040" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  732.275232][ T9846] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  735.483963][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'.
[  736.347288][ T5808] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  737.506473][ T5808] usb 6-1: Using ep0 maxpacket: 16
[  737.635730][ T5808] usb 6-1: config 222 has an invalid interface number: 31 but max is 0
[  737.660744][ T5808] usb 6-1: config 222 has no interface number 0
[  737.695081][ T5808] usb 6-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11
[  737.744485][ T5808] usb 6-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024
[  737.794399][ T5808] usb 6-1: config 222 interface 31 has no altsetting 0
[  737.835314][ T5808] usb 6-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[  737.887163][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.922674][ T5808] usb 6-1: Product: syz
[  737.944109][ T5808] usb 6-1: Manufacturer: syz
[  737.965893][ T5808] usb 6-1: SerialNumber: syz
[  737.999568][ T9880] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  738.261624][ T5808] ldusb 6-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[  738.343119][ T5808] usb 6-1: USB disconnect, device number 2
[  738.395594][ T5808] ldusb 6-1:222.31: LD USB Device #0 now disconnected
[  742.528966][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'.
[  747.278600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.287098][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  752.954481][T10012] xt_TCPMSS: Only works on TCP SYN packets
[  754.590937][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'.
[  755.744666][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  757.184933][    T9] usb 1-1: Using ep0 maxpacket: 32
[  758.211071][    T9] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  758.617144][    T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  758.651671][T10050] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  758.701263][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  758.775413][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  758.863465][    T9] usb 1-1: config 1 has no interface number 0
[  758.896470][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  758.968341][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.065516][    T9] usb 1-1: can't set config #1, error -71
[  759.114686][    T9] usb 1-1: USB disconnect, device number 21
[  760.635644][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'.
[  760.647631][T10062] macsec0: entered promiscuous mode
[  764.477029][   T28] audit: type=1800 audit(1788814971.500:3): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1090" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  769.050134][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'.
[  772.379482][T10147] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  776.922635][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'.
[  783.344615][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  784.636104][    T9] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  784.756551][    T9] usb 4-1: config 0 has no interface number 0
[  784.762675][    T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  784.844643][    T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  784.927131][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  784.974688][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.016007][    T9] usb 4-1: Product: syz
[  785.031061][    T9] usb 4-1: Manufacturer: syz
[  785.055424][    T9] usb 4-1: SerialNumber: syz
[  785.107873][    T9] usb 4-1: config 0 descriptor??
[  785.163917][    T9] usb 4-1: can't set config #0, error -71
[  785.221658][    T9] usb 4-1: USB disconnect, device number 19
[  787.382124][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'.
[  790.553170][T10262] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  791.014645][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  791.239282][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  791.255725][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  791.306925][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  791.372967][    T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  791.419899][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.670631][    T9] cxacru 6-1:1.0: invalid response length to cm 0x90: 63
[  792.925187][T10297] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  792.958199][    T9] usb 6-1: USB disconnect, device number 3
[  793.004031][T10297] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  793.013361][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'.
[  796.345211][T10329] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  798.347433][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'.
[  798.524718][ T5757] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  798.740851][ T5757] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  798.771683][ T5757] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  798.825110][ T5757] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  798.895621][ T5757] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  798.945774][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.225741][ T5757] cxacru 1-1:1.0: invalid response length to cm 0x90: 63
[  799.441885][ T5757] usb 1-1: USB disconnect, device number 22
[  802.992097][T10377] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  804.600876][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'.
[  804.967435][    T8] libceph: connect (1)[c::]:6789 error -101
[  804.983770][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  806.050595][ T5808] libceph: connect (1)[c::]:6789 error -101
[  806.058743][T10395] ceph: No mds server is up or the cluster is laggy
[  806.104770][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  808.707090][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.713385][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  808.966354][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'.
[  811.776751][T10439] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  815.695091][T10474] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  815.785329][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  817.244553][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  818.559072][T10487] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  818.681779][    T8] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  818.713696][    T8] usb 4-1: config 0 has no interface number 0
[  818.747860][    T8] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  818.824841][    T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  818.858025][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.886493][    T8] usb 4-1: Product: syz
[  818.906285][    T8] usb 4-1: Manufacturer: syz
[  818.937044][    T8] usb 4-1: SerialNumber: syz
[  818.978547][    T8] usb 4-1: config 0 descriptor??
[  819.014105][    T8] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  819.247634][ T1191] usb 4-1: USB disconnect, device number 20
[  819.289174][ T1191] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  822.576215][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'.
[  823.996651][T10513] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  826.709094][T10522] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  830.574371][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'.
[  832.152508][T10555] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  833.675588][T10560] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  835.989022][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'.
[  837.606179][T10595] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  839.741630][T10604] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  841.685776][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'.
[  843.106442][ T5808] libceph: connect (1)[c::]:6789 error -101
[  843.112474][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  843.502941][ T1191] libceph: connect (1)[c::]:6789 error -101
[  843.553093][T10627] ceph: No mds server is up or the cluster is laggy
[  844.575141][ T1191] libceph: mon0 (1)[c::]:6789 connect error
[  844.661892][T10638] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  848.070858][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'.
[  849.607117][ T1191] libceph: connect (1)[c::]:6789 error -22
[  849.628651][ T1191] libceph: mon0 (1)[c::]:6789 connect error
[  849.725760][T10674] ceph: No mds server is up or the cluster is laggy
[  853.993539][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'.
[  855.403429][T10297] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  855.413196][T10353] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  858.224581][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  859.472257][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'.
[  859.585889][    T9] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  859.622086][    T9] usb 6-1: config 0 has no interface number 0
[  859.646073][    T9] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  859.709552][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  859.729664][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.608085][    T9] usb 6-1: Product: syz
[  860.612441][    T9] usb 6-1: Manufacturer: syz
[  860.656454][    T9] usb 6-1: SerialNumber: syz
[  860.685187][    T9] usb 6-1: config 0 descriptor??
[  860.708520][    T9] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  860.936446][    T9] usb 6-1: USB disconnect, device number 4
[  860.970654][    T9] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  861.650649][    T9] libceph: connect (1)[c::]:6789 error -101
[  862.349970][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  862.477831][T10757] ceph: No mds server is up or the cluster is laggy
[  862.513939][T10766] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  866.017811][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'.
[  870.147407][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.153700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  870.617805][ T5808] libceph: connect (1)[c::]:6789 error -101
[  870.654686][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  871.549819][ T5808] libceph: connect (1)[c::]:6789 error -101
[  871.556958][T10797] ceph: No mds server is up or the cluster is laggy
[  871.616696][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  876.247738][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'.
[  876.779058][T10834] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  878.050499][ T5757] libceph: connect (1)[c::]:6789 error -22
[  878.076748][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  878.544884][ T5757] libceph: connect (1)[c::]:6789 error -22
[  878.566570][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  878.720111][T10842] ceph: No mds server is up or the cluster is laggy
[  881.196573][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'.
[  884.379347][T10877] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  886.109514][ T5757] libceph: connect (1)[c::]:6789 error -101
[  886.130394][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  886.221051][T10882] ceph: No mds server is up or the cluster is laggy
[  887.040220][T10887] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  887.059771][T10887] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  887.080612][T10887] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  887.102391][T10887] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  888.224515][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  888.806029][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'.
[  889.114650][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  889.120685][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  889.127132][ T9351] Bluetooth: hci3: command 0x0406 tx timeout
[  891.859148][T10920] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  893.309408][ T5757] libceph: connect (1)[c::]:6789 error -22
[  893.336875][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[  893.437241][T10925] ceph: No mds server is up or the cluster is laggy
[  894.597985][T10931] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  894.638366][T10931] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  894.652798][T10931] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  894.674220][T10931] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  894.988749][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'.
[  895.669062][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  896.709040][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  896.715207][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  896.721199][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[  899.616730][    T8] libceph: connect (1)[c::]:6789 error -101
[  899.639799][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  899.759974][T10963] ceph: No mds server is up or the cluster is laggy
[  899.855923][   T28] audit: type=1800 audit(1788815106.880:4): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1313" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  899.957117][   T28] audit: type=1800 audit(1788815106.880:5): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1313" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  900.870768][T10970] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  900.926247][T10970] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  900.932421][T10970] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  900.940655][T10970] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  901.115643][T10982] serio: Serial port ttynull
[  901.198257][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'.
[  901.759966][T10989] syz_tun: entered allmulticast mode
[  901.771127][T10989] dvmrp6: entered allmulticast mode
[  901.787091][T10957] Bluetooth: hci2: command 0x0406 tx timeout
[  902.199898][T10987] syz_tun: left allmulticast mode
[  902.944777][T10957] Bluetooth: hci0: command 0x0c1a tx timeout
[  902.950871][T10957] Bluetooth: hci4: command 0x0406 tx timeout
[  902.956980][ T9351] Bluetooth: hci3: command 0x0406 tx timeout
[  905.119982][    T8] libceph: connect (1)[c::]:6789 error -101
[  905.139588][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  905.365650][T11005] ceph: No mds server is up or the cluster is laggy
[  906.387031][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  907.184996][T10957] Bluetooth: hci4: command 0x0406 tx timeout
[  910.379937][    T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  910.772331][    T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  911.901396][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  911.948481][    T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[  912.104842][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'.
[  912.144020][T11068] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  912.165197][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.213435][    T9] usb 1-1: config 0 descriptor??
[  912.240347][    T9] usb 1-1: can't set config #0, error -71
[  913.844996][    T9] usb 1-1: USB disconnect, device number 23
[  914.271188][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  914.344257][T11079] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  914.564566][    T9] usb 1-1: Using ep0 maxpacket: 16
[  914.578507][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  914.622411][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  914.658740][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  914.711812][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  914.747765][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.790248][    T9] usb 1-1: config 0 descriptor??
[  915.062476][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1350'.
[  915.115426][    T8] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  915.290685][    T8] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  915.309135][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input15
[  915.465772][T11098] fido_id[11098]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  915.523818][    T9] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  915.637092][    T9] usb 1-1: USB disconnect, device number 24
[  915.842850][T11100] fido_id[11100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  916.020423][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  917.766465][   T28] audit: type=1800 audit(1788815124.700:6): pid=11114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1356" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  917.856147][T11118] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  918.051267][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1360'.
[  918.123574][ T5757] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  918.258978][ T5757] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  918.318254][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  918.537639][T11131] fido_id[11131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  920.952139][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'.
[  924.501658][T11162] .: renamed from bond0 (while UP)
[  924.515416][   T28] audit: type=1800 audit(1788815131.550:7): pid=11151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1368" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  924.564957][T11162] FAULT_INJECTION: forcing a failure.
[  924.564957][T11162] name failslab, interval 1, probability 0, space 0, times 0
[  924.590681][T11164] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  924.635227][T11162] CPU: 0 PID: 11162 Comm: syz.0.1372 Not tainted syzkaller #0
[  924.642726][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  924.652793][T11162] Call Trace:
[  924.656137][T11162]  <TASK>
[  924.659129][T11162]  dump_stack_lvl+0x18c/0x250
[  924.663979][T11162]  ? show_regs_print_info+0x20/0x20
[  924.669198][T11162]  ? load_image+0x420/0x420
[  924.673703][T11162]  ? __might_sleep+0xe0/0xe0
[  924.678308][T11162]  ? __lock_acquire+0x7d80/0x7d80
[  924.683335][T11162]  should_fail_ex+0x394/0x4c0
[  924.688030][T11162]  should_failslab+0x9/0x20
[  924.692532][T11162]  slab_pre_alloc_hook+0x59/0x300
[  924.697576][T11162]  kmem_cache_alloc_node+0x5e/0x310
[  924.702763][T11162]  ? __alloc_skb+0x103/0x2c0
[  924.707381][T11162]  __alloc_skb+0x103/0x2c0
[  924.711783][T11162]  alloc_uevent_skb+0x7d/0x230
[  924.716551][T11162]  kobject_uevent_net_broadcast+0x17e/0x530
[  924.722435][T11162]  kobject_uevent_env+0x559/0x890
[  924.727452][T11162]  kobject_rename+0x3f6/0x4f0
[  924.732118][T11162]  ? kobject_init_and_add+0x1a0/0x1a0
[  924.737480][T11162]  ? sysfs_rename_link_ns+0x17f/0x1b0
[  924.742881][T11162]  device_rename+0x15d/0x1e0
[  924.747492][T11162]  dev_change_name+0x308/0x8e0
[  924.752262][T11162]  ? end_current_label_crit_section+0x170/0x170
[  924.758511][T11162]  ? dev_ioctl+0x5dc/0x1140
[  924.763085][T11162]  ? __lock_acquire+0x7d80/0x7d80
[  924.768097][T11162]  ? dev_alloc_name+0x1d0/0x1d0
[  924.772931][T11162]  ? full_name_hash+0x92/0xe0
[  924.777595][T11162]  ? dev_ifsioc+0x316/0xc40
[  924.782088][T11162]  dev_ioctl+0x5ec/0x1140
[  924.786406][T11162]  sock_do_ioctl+0x239/0x310
[  924.791043][T11162]  ? sock_show_fdinfo+0xb0/0xb0
[  924.795885][T11162]  sock_ioctl+0x5be/0x7e0
[  924.800201][T11162]  ? sock_poll+0x3e0/0x3e0
[  924.804610][T11162]  ? bpf_lsm_file_ioctl+0x9/0x10
[  924.809551][T11162]  ? security_file_ioctl+0x80/0xa0
[  924.814658][T11162]  ? sock_poll+0x3e0/0x3e0
[  924.819060][T11162]  __se_sys_ioctl+0xfd/0x170
[  924.823655][T11162]  do_syscall_64+0x55/0xb0
[  924.828059][T11162]  ? clear_bhb_loop+0x40/0x90
[  924.832792][T11162]  ? clear_bhb_loop+0x40/0x90
[  924.837454][T11162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  924.843334][T11162] RIP: 0033:0x7f842e79e159
[  924.847783][T11162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  924.867420][T11162] RSP: 002b:00007f842f64a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  924.875818][T11162] RAX: ffffffffffffffda RBX: 00007f842ea25fa0 RCX: 00007f842e79e159
[  924.883775][T11162] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005
[  924.891732][T11162] RBP: 00007f842e835024 R08: 0000000000000000 R09: 0000000000000000
[  924.899684][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  924.907639][T11162] R13: 00007f842ea26038 R14: 00007f842ea25fa0 R15: 00007ffcd0abc798
[  924.915608][T11162]  </TASK>
[  926.183066][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'.
[  929.816509][T11200] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  930.422090][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'.
[  930.675188][ T1191] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  930.810625][ T1191] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  930.947320][T11219] fido_id[11219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  931.587224][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.783676][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  932.111360][T11221] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  932.841775][T11221] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  932.896640][T11221] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  932.932968][T11221] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  933.024943][T10957] Bluetooth: hci2: command 0x0406 tx timeout
[  933.912898][   T28] audit: type=1800 audit(1788815140.940:8): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1393" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  933.976574][   T28] audit: type=1800 audit(1788815140.970:9): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1393" name="syzkaller0" dev="sda1" ino=2048 res=0 errno=0
[  934.864507][T10957] Bluetooth: hci3: command 0x0406 tx timeout
[  934.961334][T10957] Bluetooth: hci0: command 0x0c1a tx timeout
[  934.967485][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  935.639850][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1400'.
[  935.805275][ T5757] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  935.852407][ T5757] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  936.438231][T11264] input: ! as /devices/virtual/input/input18
[  944.037523][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1411'.
[  944.471705][ T5757] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  944.518709][ T5757] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  944.774883][T11304] fido_id[11304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  946.368641][T11307] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  948.039981][T11315] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  948.394978][T11322] FAULT_INJECTION: forcing a failure.
[  948.394978][T11322] name failslab, interval 1, probability 0, space 0, times 0
[  948.454550][T11322] CPU: 0 PID: 11322 Comm: syz.4.1416 Not tainted syzkaller #0
[  948.462038][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  948.472079][T11322] Call Trace:
[  948.475367][T11322]  <TASK>
[  948.478285][T11322]  dump_stack_lvl+0x18c/0x250
[  948.482985][T11322]  ? show_regs_print_info+0x20/0x20
[  948.488170][T11322]  ? load_image+0x420/0x420
[  948.492669][T11322]  ? __might_sleep+0xe0/0xe0
[  948.497246][T11322]  ? __lock_acquire+0x7d80/0x7d80
[  948.502256][T11322]  should_fail_ex+0x394/0x4c0
[  948.506926][T11322]  should_failslab+0x9/0x20
[  948.511415][T11322]  slab_pre_alloc_hook+0x59/0x300
[  948.516429][T11322]  ? __lock_acquire+0x7d80/0x7d80
[  948.521437][T11322]  ? do_raw_spin_lock+0x11f/0x2b0
[  948.526444][T11322]  ? bus_add_driver+0x162/0x630
[  948.531279][T11322]  __kmem_cache_alloc_node+0x53/0x250
[  948.536639][T11322]  ? bus_add_driver+0x162/0x630
[  948.541473][T11322]  kmalloc_trace+0x2a/0xe0
[  948.545877][T11322]  bus_add_driver+0x162/0x630
[  948.550544][T11322]  ? driver_find+0x18d/0x190
[  948.555122][T11322]  driver_register+0x23a/0x310
[  948.559875][T11322]  usb_gadget_register_driver_owner+0xf9/0x270
[  948.566075][T11322]  raw_ioctl+0x1613/0x3d80
[  948.570547][T11322]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  948.576167][T11322]  ? tomoyo_path_number_perm+0x217/0x5e0
[  948.581784][T11322]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  948.587225][T11322]  ? make_qualifier+0x260/0x260
[  948.592073][T11322]  ? __fget_files+0x28/0x460
[  948.596653][T11322]  ? bpf_lsm_file_ioctl+0x9/0x10
[  948.601575][T11322]  ? security_file_ioctl+0x80/0xa0
[  948.606671][T11322]  ? make_qualifier+0x260/0x260
[  948.611502][T11322]  __se_sys_ioctl+0xfd/0x170
[  948.616082][T11322]  do_syscall_64+0x55/0xb0
[  948.620510][T11322]  ? clear_bhb_loop+0x40/0x90
[  948.625189][T11322]  ? clear_bhb_loop+0x40/0x90
[  948.629866][T11322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  948.635756][T11322] RIP: 0033:0x7fb37959ddeb
[  948.640183][T11322] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  948.659784][T11322] RSP: 002b:00007fb37a3b4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  948.668183][T11322] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb37959ddeb
[  948.676140][T11322] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[  948.684092][T11322] RBP: 00007fb37a3b5fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  948.692044][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.699997][T11322] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000
[  948.707960][T11322]  </TASK>
[  950.874475][ T1191] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  951.197601][ T1191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  952.124673][ T1191] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  952.160485][ T1191] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  952.171835][T11322] UDC core: USB Raw Gadget: driver registration failed: -12
[  952.189834][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -12
[  952.198295][ T1191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.618114][ T1191] usb 1-1: config 0 descriptor??
[  953.654791][ T1191] usb 1-1: can't set config #0, error -71
[  953.689921][ T1191] usb 1-1: USB disconnect, device number 25
[  953.921795][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1422'.
[  954.274160][ T5808] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  954.310699][ T5808] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  954.505571][T11351] fido_id[11351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  954.748247][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1426'.
[  965.551895][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  967.941269][    T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  968.476605][    T9] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  968.650061][T11429] fido_id[11429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  968.850064][T11433] comedi comedi1: pcl724: I/O port conflict (0x4,4)
[  969.363963][T11439] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  969.456471][T11443] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  973.645174][T11470] overlayfs: failed to resolve './bus': -2
[  973.716302][T11470] netlink: 'syz.5.1461': attribute type 11 has an invalid length.
[  973.982194][T11484] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  975.421696][ T5808] libceph: connect (1)[c::]:6789 error -22
[  975.452385][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  975.580419][T11485] ceph: No mds server is up or the cluster is laggy
[  975.914577][ T5808] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  976.126978][ T5808] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  977.392854][ T5808] usb 1-1: config 1 has no interface number 0
[  977.422409][ T5808] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  977.467344][ T5808] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  977.538297][ T5808] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  977.591475][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.630109][ T5808] usb 1-1: Product: syz
[  977.634345][ T5808] usb 1-1: Manufacturer: syz
[  977.673595][ T5808] usb 1-1: SerialNumber: syz
[  977.693993][T11497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  977.720700][ T5808] usb 1-1: Expected 3 endpoints, found: 2
[  979.552545][    T9] usb 1-1: USB disconnect, device number 26
[  979.889586][T11526] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  980.114657][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  980.824496][    T9] usb 4-1: Using ep0 maxpacket: 8
[  981.597505][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  981.624561][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  981.659805][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  981.671174][ T1191] libceph: connect (1)[c::]:6789 error -101
[  981.696289][ T1191] libceph: mon0 (1)[c::]:6789 connect error
[  981.711901][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  981.733626][T11532] ceph: No mds server is up or the cluster is laggy
[  981.770373][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  981.846084][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  981.892315][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.151550][    T9] usb 4-1: usb_control_msg returned -32
[  982.176133][T11540] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  982.183001][    T9] usbtmc 4-1:16.0: can't read capabilities
[  984.113885][    T9] usb 4-1: USB disconnect, device number 21
[  984.503490][T11572] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  986.097470][    T9] libceph: connect (1)[c::]:6789 error -101
[  986.148437][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  986.204996][T11581] ceph: No mds server is up or the cluster is laggy
[  987.164190][ T5808] libceph: connect (1)[c::]:6789 error -101
[  987.194592][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[  987.406312][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'.
[  987.485518][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'.
[  990.869005][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  991.056521][T11608] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  991.157071][    T9] usb 6-1: Using ep0 maxpacket: 16
[  991.178906][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  991.200791][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  991.230370][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.274457][    T9] usb 6-1: Product: syz
[  991.282451][    T9] usb 6-1: Manufacturer: syz
[  991.301669][    T9] usb 6-1: SerialNumber: syz
[  991.333086][    T9] usb 6-1: config 0 descriptor??
[  991.500118][    T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  991.541708][    T9] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  991.566667][T11615] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  992.965214][    T9] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  993.032079][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.041110][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  993.104174][    T9] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  994.634673][    T9] em28xx 6-1:0.0: board has no eeprom
[  994.744482][    T9] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  994.779332][    T9] em28xx 6-1:0.0: dvb set to bulk mode.
[  994.807539][ T1191] em28xx 6-1:0.0: Binding DVB extension
[  994.836387][    T9] usb 6-1: USB disconnect, device number 5
[  994.896697][    T9] em28xx 6-1:0.0: Disconnecting em28xx
[  994.998341][ T1191] em28xx 6-1:0.0: Registering input extension
[  995.046020][    T9] em28xx 6-1:0.0: Closing input extension
[  995.132859][    T9] em28xx 6-1:0.0: Freeing device
[  999.581367][T11648] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1002.328886][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1002.355871][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1002.456305][T11661] ceph: No mds server is up or the cluster is laggy
[ 1002.876580][T11676] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1005.289049][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'.
[ 1005.466897][ T1191] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[ 1005.545000][ T1191] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1009.258436][    T8] libceph: connect (1)[c::]:6789 error -101
[ 1009.273292][    T8] libceph: mon0 (1)[c::]:6789 connect error
[ 1009.373986][T11707] ceph: No mds server is up or the cluster is laggy
[ 1017.596601][T11745] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1021.349117][T11774] binder: 11773:11774 ioctl 4018620d 0 returned -22
[ 1023.584617][T11785] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1024.104509][ T5757] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1026.277180][ T5757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.318363][ T5757] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1026.372978][ T5757] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1026.454958][ T5757] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[ 1026.514849][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1026.555167][ T5757] usb 4-1: Product: syz
[ 1026.575071][ T5757] usb 4-1: Manufacturer: syz
[ 1026.611099][ T5757] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[ 1026.657676][ T5757] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1026.726897][ T5757] garmin_gps: probe of ttyUSB0 failed with error -8
[ 1026.855375][ T5757] usb 4-1: USB disconnect, device number 22
[ 1026.875884][ T5757] garmin_gps 4-1:1.0: device disconnected
[ 1027.081656][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1556'.
[ 1027.992710][T11811] ipvlan2: entered allmulticast mode
[ 1028.583553][T11811] syz_tun: entered allmulticast mode
[ 1036.540732][T11835] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1036.835687][T11847] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1039.803011][T11867] trusted_key: encrypted_key: insufficient parameters specified
[ 1040.360870][T11875] gadgetfs: bound to dummy_udc driver
[ 1040.695335][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1040.727460][    C0] gadgetfs: connected
[ 1040.740944][    T9] gadgetfs: disconnected
[ 1043.365913][T11894] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1043.672612][T11902] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1045.115466][T11905] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1578'.
[ 1048.242602][    T8] libceph: connect (1)[c::]:6789 error -101
[ 1048.254572][    T8] libceph: mon0 (1)[c::]:6789 connect error
[ 1048.388904][T11924] ceph: No mds server is up or the cluster is laggy
[ 1048.556769][ T5808] libceph: connect (1)[c::]:6789 error -101
[ 1048.562848][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[ 1051.030248][T11940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1590'.
[ 1052.397283][T11955] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1054.326557][ T5808] libceph: connect (1)[c::]:6789 error -101
[ 1054.344195][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[ 1054.467614][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.474018][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.614743][ T5808] libceph: connect (1)[c::]:6789 error -101
[ 1054.620813][ T5808] libceph: mon0 (1)[c::]:6789 connect error
[ 1054.720498][T11966] ceph: No mds server is up or the cluster is laggy
[ 1057.586595][T11977] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1602'.
[ 1060.665662][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1060.681909][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1061.809169][T11991] ceph: No mds server is up or the cluster is laggy
[ 1061.818830][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1061.964702][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1062.067716][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'.
[ 1065.518893][T12016] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1614'.
[ 1066.014452][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1067.341478][ T5757] libceph: connect (1)[c::]:6789 error -101
[ 1067.360650][ T5757] libceph: mon0 (1)[c::]:6789 connect error
[ 1067.425278][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'.
[ 1067.452987][T12024] ceph: No mds server is up or the cluster is laggy
[ 1067.488154][    T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[ 1067.499668][    T9] usb 6-1: config 1 has no interface number 0
[ 1068.186108][ T5807] libceph: connect (1)[c::]:6789 error -101
[ 1068.192389][ T5807] libceph: mon0 (1)[c::]:6789 connect error
[ 1068.810061][    T9] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[ 1069.160622][ T5808] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 1069.183939][    T9] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x6E, skipping
[ 1069.243668][ T5808] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1069.282553][    T9] usb 6-1: string descriptor 0 read error: -71
[ 1069.330568][    T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1070.419480][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.546730][    T9] usb 6-1: can't set config #1, error -71
[ 1070.572112][T12035] fido_id[12035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1070.612333][    T9] usb 6-1: USB disconnect, device number 6
[ 1073.372742][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'.
[ 1077.753072][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'.
[ 1077.807812][T12076] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1079.296120][ T5807] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1079.366428][ T5807] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1079.527988][T12079] fido_id[12079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1084.705878][T12107] syz_tun: entered allmulticast mode
[ 1084.715426][T12107] dvmrp6: entered allmulticast mode
[ 1085.172761][T12105] syz_tun: left allmulticast mode
[ 1087.974857][T12129] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1089.267377][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'.
[ 1089.276568][T12131] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1645'.
[ 1089.288881][T12131] geneve2: entered promiscuous mode
[ 1089.294090][T12131] geneve2: entered allmulticast mode
[ 1091.518038][T12150] loop0: detected capacity change from 0 to 3904
[ 1091.889739][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'.
[ 1091.929828][T12153] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[ 1091.972911][T12153] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 1092.002434][T12153]  loop0:
[ 1093.906148][T12164] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1102.965911][T12212] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1103.199859][T12214] netlink: 'syz.0.1671': attribute type 1 has an invalid length.
[ 1103.229634][T12214] netlink: 'syz.0.1671': attribute type 2 has an invalid length.
[ 1104.305760][T10957] Bluetooth: hci4: Unable to find connection with handle 0x0000
[ 1109.679705][ T7169] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 1109.690520][ T7169] Buffer I/O error on dev nullb1, logical block 0, lost async page write
[ 1111.205457][T12265] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1112.447491][T12271] 9pnet_fd: Insufficient options for proto=fd
[ 1113.269683][T12273] 9pnet_virtio: no channels available for device .
[ 1115.940062][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.163451][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.300624][T12296] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1117.308781][T12296] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1117.318524][T12296] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1117.325985][T12296] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1118.556090][ T5808] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1119.265011][T10957] Bluetooth: hci2: command 0x0406 tx timeout
[ 1119.344947][T10957] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1119.351019][T10957] Bluetooth: hci4: command 0x0406 tx timeout
[ 1119.357478][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[ 1120.017728][ T5808] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[ 1120.041372][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.066688][ T5808] usb 1-1: Product: syz
[ 1120.070872][ T5808] usb 1-1: Manufacturer: syz
[ 1120.104689][ T5808] usb 1-1: SerialNumber: syz
[ 1120.121916][ T5808] ums_eneub6250 1-1:1.0: USB Mass Storage device detected
[ 1120.165601][ T5808] scsi host1: usb-storage 1-1:1.0
[ 1121.186465][    T9] ------------[ cut here ]------------
[ 1121.192190][    T9] URB ffff88807b830b00 submitted while active
[ 1121.928063][    T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf15/0x17a0
[ 1121.937809][    T9] Modules linked in:
[ 1121.942267][    T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0
[ 1121.949845][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1121.960641][    T9] Workqueue: events_freezable usb_stor_scan_dwork
[ 1121.967515][    T9] RIP: 0010:usb_submit_urb+0xf15/0x17a0
[ 1121.973139][    T9] Code: 6c 8b 44 89 fa e8 6b 96 1c 04 e9 74 fc ff ff e8 01 8f 1b fb c6 05 b8 1f 0b 08 01 48 c7 c7 80 19 6c 8b 48 89 de e8 ab 5b e5 fa <0f> 0b e9 63 f1 ff ff e8 df 8e 1b fb eb 12 e8 d8 8e 1b fb 41 bc 80
[ 1121.993273][    T9] RSP: 0018:ffffc900000e7958 EFLAGS: 00010246
[ 1121.999769][    T9] RAX: ea5d0d73f0085300 RBX: ffff88807b830b00 RCX: ffff88801b640000
[ 1122.008174][    T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1122.016488][    T9] RBP: dffffc0000000000 R08: ffffc900000e7567 R09: 1ffff9200001ceac
[ 1122.024812][    T9] R10: dffffc0000000000 R11: fffff5200001cead R12: 0000000000000c00
[ 1122.033197][    T9] R13: ffff88803090cf70 R14: ffff88807b830b08 R15: dffffc0000000000
[ 1122.041649][    T9] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1122.051062][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1122.057995][    T9] CR2: 00007fb37a3556c8 CR3: 0000000030559000 CR4: 00000000003526f0
[ 1122.066327][    T9] Call Trace:
[ 1122.069631][    T9]  <TASK>
[ 1122.072586][    T9]  ? __init_swait_queue_head+0xa8/0x140
[ 1122.078453][    T9]  usb_stor_msg_common+0x2a3/0x500
[ 1122.083610][    T9]  ? usb_stor_blocking_completion+0x40/0x40
[ 1122.089621][    T9]  ? lockdep_hardirqs_on+0x98/0x150
[ 1122.094901][    T9]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1122.101099][    T9]  usb_stor_Bulk_max_lun+0x2fd/0x5b0
[ 1122.106711][    T9]  usb_stor_scan_dwork+0xf4/0x260
[ 1122.111772][    T9]  ? process_scheduled_works+0x975/0x1600
[ 1122.117813][    T9]  process_scheduled_works+0xa60/0x1600
[ 1122.123414][    T9]  ? worker_attach_to_pool+0x370/0x370
[ 1122.129183][    T9]  ? assign_work+0x3cc/0x5d0
[ 1122.134152][    T9]  worker_thread+0xa5e/0xfe0
[ 1122.139107][    T9]  ? _raw_spin_unlock+0x40/0x40
[ 1122.144102][    T9]  ? __kthread_parkme+0x71/0x1c0
[ 1122.149348][    T9]  kthread+0x2fa/0x390
[ 1122.153453][    T9]  ? pr_cont_work+0x550/0x550
[ 1122.158446][    T9]  ? kthread_blkcg+0xd0/0xd0
[ 1122.163071][    T9]  ret_from_fork+0x48/0x80
[ 1122.167822][    T9]  ? kthread_blkcg+0xd0/0xd0
[ 1122.172438][    T9]  ret_from_fork_asm+0x11/0x20
[ 1122.177534][    T9]  </TASK>
[ 1122.180574][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1122.187835][    T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted syzkaller #0
[ 1122.195031][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1122.205068][    T9] Workqueue: events_freezable usb_stor_scan_dwork
[ 1122.211477][    T9] Call Trace:
[ 1122.214743][    T9]  <TASK>
[ 1122.217656][    T9]  dump_stack_lvl+0x18c/0x250
[ 1122.222319][    T9]  ? show_regs_print_info+0x20/0x20
[ 1122.227496][    T9]  ? load_image+0x420/0x420
[ 1122.231986][    T9]  panic+0x2ca/0x720
[ 1122.235918][    T9]  ? bpf_jit_dump+0xd0/0xd0
[ 1122.240408][    T9]  ? ret_from_fork_asm+0x11/0x20
[ 1122.245349][    T9]  __warn+0x2e0/0x470
[ 1122.249316][    T9]  ? usb_submit_urb+0xf15/0x17a0
[ 1122.254238][    T9]  ? usb_submit_urb+0xf15/0x17a0
[ 1122.259157][    T9]  report_bug+0x2be/0x4f0
[ 1122.263478][    T9]  ? usb_submit_urb+0xf15/0x17a0
[ 1122.268415][    T9]  ? usb_submit_urb+0xf15/0x17a0
[ 1122.273338][    T9]  ? usb_submit_urb+0xf17/0x17a0
[ 1122.278255][    T9]  handle_bug+0xcf/0x120
[ 1122.282485][    T9]  exc_invalid_op+0x1a/0x50
[ 1122.286968][    T9]  asm_exc_invalid_op+0x1a/0x20
[ 1122.291800][    T9] RIP: 0010:usb_submit_urb+0xf15/0x17a0
[ 1122.297330][    T9] Code: 6c 8b 44 89 fa e8 6b 96 1c 04 e9 74 fc ff ff e8 01 8f 1b fb c6 05 b8 1f 0b 08 01 48 c7 c7 80 19 6c 8b 48 89 de e8 ab 5b e5 fa <0f> 0b e9 63 f1 ff ff e8 df 8e 1b fb eb 12 e8 d8 8e 1b fb 41 bc 80
[ 1122.316922][    T9] RSP: 0018:ffffc900000e7958 EFLAGS: 00010246
[ 1122.322972][    T9] RAX: ea5d0d73f0085300 RBX: ffff88807b830b00 RCX: ffff88801b640000
[ 1122.330928][    T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1122.338880][    T9] RBP: dffffc0000000000 R08: ffffc900000e7567 R09: 1ffff9200001ceac
[ 1122.346830][    T9] R10: dffffc0000000000 R11: fffff5200001cead R12: 0000000000000c00
[ 1122.354783][    T9] R13: ffff88803090cf70 R14: ffff88807b830b08 R15: dffffc0000000000
[ 1122.362746][    T9]  ? usb_submit_urb+0xf15/0x17a0
[ 1122.367670][    T9]  ? __init_swait_queue_head+0xa8/0x140
[ 1122.373202][    T9]  usb_stor_msg_common+0x2a3/0x500
[ 1122.378303][    T9]  ? usb_stor_blocking_completion+0x40/0x40
[ 1122.384183][    T9]  ? lockdep_hardirqs_on+0x98/0x150
[ 1122.389367][    T9]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1122.395505][    T9]  usb_stor_Bulk_max_lun+0x2fd/0x5b0
[ 1122.400779][    T9]  usb_stor_scan_dwork+0xf4/0x260
[ 1122.405786][    T9]  ? process_scheduled_works+0x975/0x1600
[ 1122.411489][    T9]  process_scheduled_works+0xa60/0x1600
[ 1122.417034][    T9]  ? worker_attach_to_pool+0x370/0x370
[ 1122.422480][    T9]  ? assign_work+0x3cc/0x5d0
[ 1122.427053][    T9]  worker_thread+0xa5e/0xfe0
[ 1122.431644][    T9]  ? _raw_spin_unlock+0x40/0x40
[ 1122.436475][    T9]  ? __kthread_parkme+0x71/0x1c0
[ 1122.441399][    T9]  kthread+0x2fa/0x390
[ 1122.445449][    T9]  ? pr_cont_work+0x550/0x550
[ 1122.450109][    T9]  ? kthread_blkcg+0xd0/0xd0
[ 1122.454684][    T9]  ret_from_fork+0x48/0x80
[ 1122.459084][    T9]  ? kthread_blkcg+0xd0/0xd0
[ 1122.463653][    T9]  ret_from_fork_asm+0x11/0x20
[ 1122.468420][    T9]  </TASK>
[ 1122.471487][    T9] Kernel Offset: disabled
[ 1122.475866][    T9] Rebooting in 86400 seconds..