last executing test programs:

3m37.289116102s ago: executing program 0 (id=1026):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x40000)
close(r4)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x11c, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x16}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@handle={0x73682a85, 0x210b, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}, @acquire_done, @increfs_done={0x40106308, 0x3}], 0x58, 0x0, &(0x7f0000000800)="70a0fe8bb1523eb45bbcbb0fb84d878ab518bc320682ae4b83758c9455b3e687695bcd4a1f2a6fd52f501c054706ba320650e62b2c2fc07c634ee1dbf87997bc92a2ca2e02e4b06cd66986840c50e55f179712729fa0c109"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002440)={0x11c, 0x0, &(0x7f0000002200)=[@exit_looper, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x2, 0x0, 0x2}, @fd, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}}, @exit_looper, @increfs_done, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002080)={@ptr={0x70742a85, 0x0, &(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000002040), 0x0, 0x0, 0x1f}, @flat=@weak_binder={0x77622a85, 0x80, 0x3}}, &(0x7f0000002100)={0x0, 0x28, 0x50}}, 0x1400}, @decrefs, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002140)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x9, 0x0, 0x1d}, @fda={0x66646185, 0x6, 0x1, 0xe}}, &(0x7f00000021c0)={0x0, 0x18, 0x38}}, 0x1000}], 0xdf, 0x0, &(0x7f0000002340)="dc869aab031399c6de7435f0bc255821f9cddcf44880a4c5df87b880d8138f5de06d61929d14fee0468cab0ed84caf8e4b27e05ce190a0baaf1a7e61bab1ae35371d18e9deb3a500a0f3e93a15c77a2616b5860d81ecfbb2922bd17f5740df445dd378263b9b039426b944a56b5b3a5bb258bee20200566456491eadb11559f43e91a6d3546600717f59c829066ab3b9ab743801c392d30aa7da15337e861103fac0e90e967ce34dd287eff6e8ef41b01989dabaea051429f78750e2098d7e7e9bf9c55f4a93b7efaf5fc4dba5c17a0ee152669048f5dec85566b7aef1ac38"})

3m37.224003142s ago: executing program 0 (id=1028):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x900}, 0x60)

3m37.113998903s ago: executing program 0 (id=1030):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b9", 0xbb}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x50009404, &(0x7f0000000040))

3m36.06950163s ago: executing program 0 (id=1041):
sched_setscheduler(0x0, 0x2, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
pipe2$9p(&(0x7f0000000340), 0x82000)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x1, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r1, &(0x7f0000000240)=""/157, 0x9d)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x489e, 0x200)
fadvise64(r3, 0x9, 0x8, 0x5)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd)
write$char_usb(r4, &(0x7f0000000080)="ccb7e8fe44ff601e3f8117038a61272c3b55ec46facb212f60f86173532ae3e66280232be3c948177e73f49d7b066889fbeb9fc5994ec017ce742b256a822f406f3eb3d9346305e7a229e8b2a8055d54d7bfea38086772c93a4f603608507dd27e12ec50ad8a8aac1501332d5c69836f991201b4e24bed940931b4b2e1890aea7ed81e5c5a9a9e79b7c14505dadd4af4a256afaeafbc20a3501a38b75fdf4211ea447a09c4ee5179f5c7c05c08c353f414ffa9b32574094806334fd6", 0xbc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e)
ioctl$BLKPG(r7, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='bP|,', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600e91600000800b700c5000000", @ANYRES8=r5, @ANYRESOCT=r3], 0x2c}}, 0x0)
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000140)=0xffffffff)

3m35.883877476s ago: executing program 0 (id=1042):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})

3m35.257894094s ago: executing program 0 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2d, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8018)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@generic={0x82, 0x2}, @ra={0x94, 0x4, 0x7}]}}}}})
recvfrom$inet(r1, &(0x7f0000000000)=""/3, 0x3, 0x40012002, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)

3m19.930303708s ago: executing program 32 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2d, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8018)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@generic={0x82, 0x2}, @ra={0x94, 0x4, 0x7}]}}}}})
recvfrom$inet(r1, &(0x7f0000000000)=""/3, 0x3, 0x40012002, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)

13.445825036s ago: executing program 2 (id=1887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x300, 0x0, {0x2, 0x0, 0x23}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

12.766836923s ago: executing program 2 (id=1892):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x3ff})
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="9a06ec67851a8d822dc7e98b2df43eac8afa4ed7fd743354c3740c9cc9f20caebddd146c425138a0b7ee8015f7b3a348c5da0d365c91b3d2a3c81b0c28e8b975127edc15582bae49d1cc947431d2404768844ef32238ef196cea74d103b5b6f2f8f1a6087cc4d7b46757adb1cb654b6b4c41fdb3d497feb81cb142a1da82e27dd1b31a942ee33311b1bb7946c9c329ee37489f10335fac7631e994298274783601975c1cbb629503f7b954d761067aa8c9beebe2796e8f89099365d52e967ef37572f3fb904bc03e65601e0028153dd9eb86cae3ea3d2de4ae5b915bf190", 0xde)
close_range(r0, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000180)=0x6, 0x9e5)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r2=>0x0})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=<r3=>0x0)
kcmp(r2, r3, 0x5, r1, r0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, r3})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
lseek(r1, 0x3ff, 0x3)
r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8, 0x80200)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x4158c0, 0x0)
ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000380)={0x2, 0x3, 0x1})
ioctl$NBD_SET_SOCK(r6, 0xab00, r6)
writev(r0, &(0x7f0000000600)=[{&(0x7f00000003c0)="f5779d77387e864bf8778539a9f6df6f6c86bd3d489087", 0x17}, {&(0x7f0000000400)="9dd22b515f49f1acbedb0d7cd2c0258a0d0c3d893f86636910b2c3763818fe88667a22f0eb8d771ec4968c23d2b78e219d99bb1ce635affeb927699c482a1ecd4296e0aa1c8e63cab29b6a922addc85fe37b12c0b2f8386c07d09eeff873cd7958c3345c3c87c789844ce81ef9d6b63d1c5a1ef728d793f8647a9b291cf2e831131569649d6eedc87385922ff2eaa3d281276940f5eaae9e7c2b6f9667970c39aa9e99000ea0a086f38f8097d26879cde978dbca6ab93e552ccb9af61fa9ce7edf90f5de8401c7da78fda16925f9fa44", 0xd0}, {&(0x7f0000000500)="191d5d2332d4cb22243c8c175d10cadfe10a516cfb61b575257244cd70aac719374ebcaef42fb9287a2060cddaf557ecc38b0d529f986ff9c1d651680fbed41bca6192a99e22efc4a1a654349ec10ea49aa5fbe9f86d086c184e991f78302f390dd365fc07a7cd29f1f8014d0d15130cae1776806f3d1f88879d71405ca62e1daa8e07cc90ae61f6fced1b6e25f5a75289b567f2a08df62237ce1fd4480b9f863f30abe33efe357725b2c26cc76b3d613c620631f825087faf11936e04afb2b0bbf23391bb2809dfedabcb1a74d35e1f1f578e6282bd2215ed8dc14faa5375eab03b0b3920633de1311b61fec872d0bd0c5c403f86a6", 0xf6}], 0x3)
ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000640)=""/241)
bind$802154_raw(r6, &(0x7f0000000740)={0x24, @none={0x0, 0x3}}, 0x14)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000000780)={r6, 0x0, 0x7, 0x0, 0x0, 0x2})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0)="df4cb03df178d247be09eb1d84fd3ead85af102c8341dd2fd17f7cf37fb38a6cbcddc8bd13a67b323330921018d10353516c5b50cda83ac32d9072cca8c9a7d58a594add41e30a61265947711205eb208ea5c8da3060b19b905ccc4956fd4356939b09cb732afdf0e61fd11890fb6a525b110d615b3ba76e87d127370395", 0x7e, r4}, 0x68)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000008c0), 0x12200, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000900))
r9 = syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0xa, 0x20, 0xf8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "6001ed"}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x3cb2, 0x3}, {0x6, 0x24, 0x1a, 0x8001, 0x24}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @obex={0x5, 0x24, 0x15, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x3d, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5c, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x2, 0x2f, 0x1, 0xff, 0xc}, 0x5f, &(0x7f0000000a40)={0x5, 0xf, 0x5f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x2, 0x7fff}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7fff800, 0x0, 0x0, [0xc000, 0xf0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe5, 0x80, 0x5, 0x3, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0xc6, 0x4, 0xfff, 0x0, 0x8, [0xc000, 0x30, 0xff0030, 0x30]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0xf00, 0x81, [0xc0, 0xc000, 0xf0]}]}, 0x6, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x10, &(0x7f0000000c00)=@string={0x10, 0x3, "c4fc96b62758f2f6bb2f2fc8bab8"}}]})
syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000d40)={0x14, &(0x7f0000000cc0)={0x0, 0xc, 0x2, {0x2, 0x31}}, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d80)={0x0, 0x16, 0xa4, "e4add5706774d76893ab9cc2171e4c2f4f4f807efc30b1cb3f3cf00008ed5249cb19e28bdc2a00dc50069320b144098ef10d4d602045cdb1568e4a9bd64136dbecdffb7e647d7aa9993a1cd55f8e319046fe4567526e659a3d7ee015ac2fc86244909124da92be066d2694ebee6f6136beaa8bd93bf2f7e728f6cc3e1ca275696f81a295aa777bb886e05206c75e91a5c15d44dcc5a21dc513ab51364de5180da5ebb784"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xa3}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000ec0)={0x20, 0x80, 0x1c, {0x3, 0xc96, 0x0, 0x24ce, 0xb9fa, 0xfff8, 0x7, 0x0, 0x101, 0x8000, 0x45be, 0x1}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}})
ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000001080)={0x10000000, 0x5, 0x100000000})
r10 = dup3(r7, r7, 0x80000)
ioctl$INCFS_IOC_PERMIT_FILL(r10, 0x40046721, &(0x7f00000010c0)={r5})

9.484773998s ago: executing program 2 (id=1918):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

9.285309893s ago: executing program 2 (id=1920):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, 0x0)
unshare(0x2c020400)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x486240, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000440)={0x9, 0x80})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
ptrace(0x10, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x20, 0xe, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x9, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x846)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="84010000100001000000000000000000ac14142b000000000000000000000000e00000020000000000000000000000000000fffdfffe0000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000009000000000000000000000000000000000008001000000000000000000000000000000000000000000000000000000000000000000000000100008000000000fcffffff000000000000002000000000000000000200000062000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x184}}, 0x20004000)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000)
io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r6, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4082, 0xff2, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r6, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x1ff, 0x1, 0x2, 0x5, 0x0, 0xb, 0x8, 0xa2b, 0x2b, 0x7, 0x7, 0x5, 0x6, 0x7, 0x2]}, &(0x7f00000025c0)=0x100)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', <r7=>0x0, 0x20, 0x1, 0x1, 0x0, {{0x2b, 0x4, 0x1, 0x9, 0xac, 0x65, 0x0, 0x14, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x6, 0x1, 0x1, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@local, 0x5}, {@multicast2, 0x101}]}, @end, @timestamp_prespec={0x44, 0x44, 0xa3, 0x3, 0x4, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x100}, {@rand_addr=0x64010101, 0x101}, {@empty, 0x7}, {@broadcast, 0xfffffe00}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010100}, {@broadcast, 0xa}]}, @noop, @ssrr={0x89, 0x27, 0x6c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @remote, @rand_addr=0x64010102, @empty, @multicast1, @multicast2, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', r7, 0x4, 0x1, 0xc6, 0x8, 0x62, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x1, 0x80, 0x8}})

8.680693174s ago: executing program 4 (id=1924):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250e00000008000300", @ANYRES32=r3, @ANYBLOB="08000e000d00000008000300", @ANYRES32=0x0, @ANYBLOB="f8424dcf405b3ff0dae97a9eaf0ffd2d91497c9ce2637392c99527cfefbf15e5c61740a86e5efbea51cd3759d89a"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r4=>0x0})
r5 = userfaultfd(0x80801)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", <r7=>0xffffffffffffffff})
r8 = epoll_create1(0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r9, 0xc004510e, &(0x7f0000000080)=0x80000001)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x80000000})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00bca72c397f38f822ead2edfb236d7e1f775f78391c81b3ede4e06e6a6fb7da8c2db3497a4c9847746acc86cb7ada688b772a4c03ccfc24a7db29c2ad9b429b2c0d93fc72196058f5e16dc1954c1bcd15a8bf435afc5315b584e20126e8c50a52c6fa252eabe75dad5160151a2eb153bb8ed80baba4b08a8c277965f11eb61c39ac3cacfada0cf2b080d4d250dd6c1685fbac95381a7570f5508b5dd7193dcead5cec9bea5797665c1e9fe8c715c6d3b6e1712b4185643f7c10506a201edd8495c993f1ffff4278d48b399cf0d234a19a02d8202b0271acb472c26fab0a4aff5279a932e038f02ec072aa2e00"/246, @ANYRES16=r1, @ANYBLOB="010826bd7008fddbdf252500000008000200", @ANYRES32=r4, @ANYBLOB="05002b00000000000600060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

7.849010624s ago: executing program 4 (id=1930):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1)
r3 = dup2(r2, r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x24080814)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="02"], 0xc4}}, 0x4004)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0xd8db6000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xed565e2ddecb3e49}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xfc3463bc5c86f085}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000200)={{0x54000, 0x80a0000, 0x8, 0x9, 0x4, 0x0, 0x7, 0xf8, 0x0, 0x4, 0x59, 0x3}, {0x40000, 0x6000, 0x4, 0x1, 0x3, 0xff, 0x1, 0x3, 0x70, 0x1, 0x8, 0x1}, {0x2000, 0x50000, 0xd, 0x80, 0x9, 0x21, 0x4, 0x8, 0x0, 0x3, 0x5, 0x5}, {0x1, 0xea4a43ceee6b960e, 0xe, 0x1, 0xa0, 0xe, 0x3, 0xa, 0x5, 0x2, 0x0, 0x9}, {0x50000, 0xf000, 0x9, 0x17, 0x8, 0xa8, 0x3, 0xff, 0x5, 0x9, 0x5, 0x4}, {0xf3b7b8162528136e, 0x30000, 0x9, 0x5, 0x8, 0xf1, 0x9, 0x7f, 0xdc, 0x0, 0x4, 0x3}, {0xf000, 0xdddd0000, 0xb, 0x1, 0x3, 0x1, 0x6, 0xb, 0x3, 0x5, 0x6, 0x9}, {0x9000, 0x5000, 0x0, 0xc, 0x9c, 0x7e, 0x8, 0x0, 0x7, 0x9, 0x4, 0x8}, {0xe6e74002, 0x53}, {0x26000, 0x8}, 0xa0050015, 0x0, 0x4000, 0x5, 0xb, 0xa900, 0xdddd0000, [0x8000000000000000, 0xbec, 0x0, 0x4]})
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000208010180000000000000006a000009"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x4e26, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xe9, [@empty, @broadcast, @multicast2, @multicast2, @multicast2]}]}}}], 0x28}, 0x4000004)

7.514656314s ago: executing program 4 (id=1935):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xfdad, &(0x7f0000000080)={&(0x7f0000000440)={0x6c, r1, 0x20, 0x304, 0xfbfffffd, {0x3}, [@TIPC_NLA_BEARER={0x58}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x84)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000f80), 0x4)
syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff200009040201"], 0x0) (async)
syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff200009040201"], 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x0, @remote, 0x2}}, 0x9, 0xd5ee, 0xea, 0x5, 0x44, 0x6, 0xb}, &(0x7f0000000200)=0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r4=>0x0, @in6={{0xa, 0x4e22, 0x0, @remote, 0x2}}, 0x9, 0xd5ee, 0xea, 0x5, 0x44, 0x6, 0xb}, &(0x7f0000000200)=0x9c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000fc0)={r4, 0x1000, "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"}, &(0x7f0000002000)=0x1008)

7.466210027s ago: executing program 3 (id=1936):
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="88000000cbe01ef01cb465a7ae2c58174139", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25040000004c000280080004"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0})
r3 = socket(0x40000000015, 0x5, 0x0)
getpeername$netlink(r3, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x76, 0x9000, 0x0, 0x0}, {0x8, 0x0, 0x0, 0x0}], 0x2})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080)

4.49912966s ago: executing program 4 (id=1952):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0})
r0 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x18, 0x1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f00000001c0))

4.329208758s ago: executing program 3 (id=1954):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0xde6}], 0x1c) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6erspan0\x00', 0x4}, 0x18)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$int_in(r1, 0x40000000af01, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r4 = socket$packet(0x11, 0x1, 0x300) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x2b2e, 0x4) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)) (async)
r6 = dup(r4)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="200774000000740c578b9ecf101f181fe5d7e97fd25542eaa47c02e01363ec4c9defc667374485bf7ec9fef8b7c89c5129f5b57a25e06b9d34533c2c9cd2e759319848e15dd74d3b62bd4b080e990b29b38b0114f25b41b2aac702ed27e7b3d113e4a8e7b7adf2d0d8bc3d581629cb6ddf3917de0d38285bbf68"], &(0x7f00000000c0)=ANY=[@ANYBLOB="000320"]}, &(0x7f00000002c0)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="401603000000ee9eff5d705005aef6a0093ab16904b16aabba2ffbce8d97faf0e590c1b043ee5572d31363128e50267b725a75da6d765d89376927d97008263ba28740153015a4a9fae8e6e3449d2072c9f1708c88dcc416f2b177a596a6fc08fa144794515ab0"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x7201}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "8ba9d845bb160014ab112c0b0c2a04dc0e9ee98ed7d1a59153b63b4135b7d0f5aff911f6aad11f8bdbbf7dcd8688a1"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.23593037s ago: executing program 4 (id=1955):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x7b, 0xf8, 0x5f, 0x8, 0x2c7c, 0x700, 0xab98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x2, 0x90, 0x3b, "", [{{0x9, 0x4, 0xae, 0xf, 0x2, 0xff, 0x35, 0x6a, 0x80, [], [{{0x9, 0x5, 0x80, 0x2, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
write(r1, &(0x7f0000000000)="ea", 0x1)
sendmmsg$alg(r1, &(0x7f00000006c0), 0x0, 0x40010)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
close(r1)

4.06688683s ago: executing program 2 (id=1957):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20042, 0x40)
r2 = openat(r1, 0x0, 0x840, 0xe)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2040000001, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x104, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x13, @local, 0x10}, r4}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r4, 0x9dff7ffc}}, 0x4d)
syz_usb_control_io(r0, 0x0, 0x0)
socket(0x400000000008, 0x3, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="060001"], 0x0, 0x0, 0x0, 0x0})

2.098015282s ago: executing program 1 (id=1985):
syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xdd, 0x74, 0xb2, 0x8, 0x46d, 0x8f5, 0xe4c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5d, 0x6, 0xa0, 0x9, "", [{{0x9, 0x4, 0xe6, 0xe1, 0x0, 0x7b, 0x7f, 0xf5, 0x8}}]}}]}}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x217, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0xa, {0x9, 0x21, 0x40, 0x7f, 0x1, {0x22, 0x26d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x10, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7f, 0x5, 0x7, 0xff, 0x2}, 0xbc, &(0x7f0000000080)={0x5, 0xf, 0xbc, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x10, 0x5}, @generic={0x97, 0x10, 0x2, "dce8cd1ecd645628ef99f9cccca0a2821bfcf999cfe5650543e7aff7a37cbd7ed92642b9643d24774aa7c861246358ddcf4c429a8c6ea81fd0b464a83fa540f38d105456c328a4e61ce45744a347faacc56cb0888678260243b56eabcde44f3fb8b5512c2afff4805e90f552932fb23300fee7271e1458ae07c678744d847fee3af59076be3fb1b8fc000a06f72169f7d515d580"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x1, 0x3, 0x8, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x0, 0x40, 0xf7b, 0x2}]}, 0x8, [{0x51, &(0x7f0000000140)=@string={0x51, 0x3, "064f12dd6f3bffa6ec7ffc691d11c0b0077af703546d533b5f0279c70110f7da48193c7643e775167d5c0acc44b6d5393a0c8581d96fb8a39621575e067f911ab37eb773d3fe1086e824491c13b563"}}, {0xe1, &(0x7f00000001c0)=@string={0xe1, 0x3, "e0e8bf37bd44fcdccb1258a1b8bc63441a5dc57f859d0cbef2ff7973b5cbe56cca0eed094e90bde49f30314a3e9131e2987a8b4a1dcc37ab73186b36e178100670ae772a70ebf9a5d40132ac7f09975520552290930efbe6ac3b48b4c4790bafb917e6494b946922eadc8878f787f3fc63e38b9d072dcfb0913f6de04ce7900a5db11741d4cc1ea8fef94b34654c411c4a5f78d11758b25306ea7fc830b3cdd45514ffec2e66b48fc1ea153e8e08c8b08318ec8cb61d289239e26fa6fb09f83042f97839f4b73d327036ba4c900ebac0076d15bfee6f00a2cafceb9b4c85c7"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x72, &(0x7f0000000340)=@string={0x72, 0x3, "d4ac05a56f21f8e05171a7fc0632c32bc40495938104f7e82613385611c0686b1134348cdbca37db87cf5ba92d2d5513c7193062825a574017d52a1889bde44c48b3dc0bd7b2e6e5d3392afe16df33b3fd9474241902323dee5ac762da5e368fdf97f1308ead1071f07bca93d1e36175"}}, {0x8, &(0x7f00000003c0)=@string={0x8, 0x3, "02b71bb660a0"}}, {0x75, &(0x7f0000000480)=@string={0x75, 0x3, "3dca6c3d0c7339503fcf33cd1c3f819fc1cf9413238054d1f446ad19ae3136cfc21202436bd4c19e078eee9ec895ff751c49469fef2bb1615bcd63f416b532bc0f4aa475ab6d176c8bc2f51b36b072bf8698ee6dac2bc5e135d2aa886313b76b2954ab9952ec43ee2148c3c0fd5482619c0aa0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2801}}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2.012734337s ago: executing program 1 (id=1986):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911", 0x2f, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c", 0x5d}], 0x1, &(0x7f00000008c0)=[@iv={0xb0, 0x117, 0x2, 0x99, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xc8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd0", 0x75}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610", 0xd4}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.895316504s ago: executing program 1 (id=1987):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="f78d9ca38fff48f3be52163448412ba8592c8fedc70ae15d558fe44ccf94d540", 0x20}], 0x1, 0x0, 0x0, 0x28044854}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/133, 0x85}], 0x3}, 0x0)

1.830931881s ago: executing program 1 (id=1988):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac7)
semget$private(0x0, 0x4000, 0x0)
unshare(0x8000000) (async)
semget$private(0x0, 0x4000, 0x0)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1", 0x11}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x4fd}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d20", 0xec}], 0x1}}], 0x3, 0x42054) (async)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0xfffffffd) (async)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

1.132367715s ago: executing program 3 (id=1989):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x540, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004)
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getpeername$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0)
recvmsg$qrtr(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x38, 0x10040)

1.067067355s ago: executing program 4 (id=1990):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = add_key(&(0x7f0000003880)='rxrpc\x00', &(0x7f00000038c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
listen(0xffffffffffffffff, 0x2005)
socket(0x10, 0x80002, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000))
sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
keyctl$read(0xb, r1, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r6], 0xfe33)

1.055645893s ago: executing program 3 (id=1991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050201000000fddbdf2512000000180001801400020069705f76746930000000000000000000"], 0x2c}}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050201000000fddbdf2512000000180001801400020069705f76746930000000000000000000"], 0x2c}}, 0x4000000) (async)

712.02146ms ago: executing program 2 (id=1992):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000002c0))
bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, 0x0, 0x2}, 0xe)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x2, 0x10, 0x1, 0xfffffff7, 0x12, "d2f498c10997866bd39c398cc26fef42dfedeb"})
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000e041a00010000000000000000000a00fc003a2a5e247b0000000c001b803a0000007d000000"], 0x28}, {&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x12fc}, {&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002300000828bd7000fe3100"/28], 0x1c}], 0x3}, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1)
memfd_create(&(0x7f00000007c0)='\x9d#\x18\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\t\x12\b\x01\xd9\x04\x00/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\x02\x00\x00\x00\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xddW\xe6}\xc5\xa4\x8f\x98\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8\xac\x00P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\x01\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0m\xc9\x82<\xa9\xdc\xddRU\t\xe9\xbah\xb6\xb2\xea-{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DL\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xd1\xc3\xe8?.\x8a)*\xdeag\xc6\xf3\xd6\x94\x9dn\x06\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96\xb71~2{@:\x97^\xbfcu9\x8c<^ll\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\xd7\x99\x19pn\xbe\xb8\f#\xe2\x8f\x02\xedk\x10\x1b\x9c\x10\xd5\xab\x95Yn\xe9\x00\xb5\xa29\xd7\xd1\bs\xd0x0\xf2F\xaam\xd8\\\x16\x98\x86\xbe\xbc|h+\t.\x0f\x1b?\xbf5\x9fW\xa7\x02\x14J\x16|TV\x1bW\xd6r\nR\x82\xe0\x88%\xfa\x1f\xae\xcb\xb5g\xd5\x9a\x17\xd2F3A\x03-\xe22\x1b\xb4\xb5\b\x8b\xe79\xbew#2\xbd`', 0x2)
recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r9, @ANYBLOB="810626bd7000fddbdf258800000008000300", @ANYRES32, @ANYBLOB="1a0006"], 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0x20000800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRES16=r2, @ANYBLOB="01ea27bd7000fbdbdf256c00000008000300", @ANYRES64=r1, @ANYRESOCT=r9], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040084)

591.978105ms ago: executing program 3 (id=1993):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x87)
r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000280)="bb1dedc3acc3b41233f1024724fdf9bbae8016c0ab4d2a5c7e5296fa25a51eea081fe8586a269353a01dcad482d4d665be40d086c46c01fc44e521dc3c063fb126341088d3e8fe0e3cc1dabd05", 0xffffffffffffffd4, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000))
keyctl$link(0x8, r3, r1)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000)
keyctl$reject(0x13, r1, 0x8000000000000001, 0x9, r1)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000025c0)='9A', 0x2}], 0x1}}], 0x1, 0x4040005)

309.19407ms ago: executing program 1 (id=1994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
ioctl$FIBMAP(r1, 0x2284, &(0x7f0000000040)=0x85)
timer_create(0x2, 0x0, &(0x7f0000000400)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f00000004c0))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x2d, 0xb, 0x0, 0x0, {0x6}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x78}]}]}, 0x1c}}, 0x8000)
r3 = epoll_create1(0x0)
epoll_pwait(r3, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})

102.071882ms ago: executing program 3 (id=1995):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, <r1=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000440)={r1, 0xacf})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r2], 0xfdef)

0s ago: executing program 1 (id=1996):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="f78d9ca38fff48f3be52163448412ba8592c8fedc70ae15d558fe44ccf94d540", 0x20}], 0x1, 0x0, 0x0, 0x28044854}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/133, 0x85}], 0x3}, 0x0)

kernel console output (not intermixed with test programs):

SK>
[  328.724199][ T5341] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  328.969151][ T5341] usb 2-1: config 0 has an invalid interface number: 244 but max is 0
[  328.969179][ T5341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.969198][ T5341] usb 2-1: config 0 has no interface number 0
[  328.969229][ T5341] usb 2-1: too many endpoints for config 0 interface 244 altsetting 236: 50, using maximum allowed: 30
[  328.969288][ T5341] usb 2-1: config 0 interface 244 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 50
[  328.969316][ T5341] usb 2-1: config 0 interface 244 has no altsetting 0
[  328.969349][ T5341] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  328.969373][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.074255][ T5341] usb 2-1: config 0 descriptor??
[  329.092740][   T38] kauditd_printk_skb: 155 callbacks suppressed
[  329.092758][   T38] audit: type=1326 audit(1781327687.469:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.2.1612" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2a42fce59 code=0x0
[  329.264302][ T4924] Bluetooth: hci1: command tx timeout
[  329.348122][ T5720] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  329.495794][ T5720] usb 5-1: Using ep0 maxpacket: 32
[  329.507868][ T5720] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  329.507898][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.507917][ T5720] usb 5-1: Product: syz
[  329.507932][ T5720] usb 5-1: Manufacturer: syz
[  329.507945][ T5720] usb 5-1: SerialNumber: syz
[  329.540937][ T5720] usb 5-1: config 0 descriptor??
[  329.568821][ T5720] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  329.581974][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.682397][ T5341] usb 2-1: string descriptor 0 read error: -71
[  329.767531][ T5341] usb 2-1: USB disconnect, device number 79
[  330.041500][T10361] veth0_vlan: entered promiscuous mode
[  330.072367][T10361] veth1_vlan: entered promiscuous mode
[  330.102334][ T5720] gspca_ov534_9: reg_w failed -71
[  330.314176][ T5718] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  330.339685][T10361] veth0_macvtap: entered promiscuous mode
[  330.357377][T10361] veth1_macvtap: entered promiscuous mode
[  330.386578][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.404188][ T5341] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  330.407791][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.451802][  T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.452019][  T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.452049][  T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.452074][  T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.501821][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.501881][ T5718] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  330.501903][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.544682][ T5718] usb 2-1: config 0 descriptor??
[  330.554154][ T5720] gspca_ov534_9: Unknown sensor 0000
[  330.554279][ T5720] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  330.563707][ T5720] usb 5-1: USB disconnect, device number 22
[  330.598243][ T5341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.598270][ T5341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  330.598291][ T5341] usb 3-1: config 1 has no interface number 0
[  330.598334][ T5341] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  330.649476][ T5341] usb 3-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40
[  330.649504][ T5341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.649520][ T5341] usb 3-1: Product: syz
[  330.649532][ T5341] usb 3-1: Manufacturer: syz
[  330.649544][ T5341] usb 3-1: SerialNumber: syz
[  330.800924][ T5341] usb 3-1: selecting invalid altsetting 1
[  330.813637][ T5718] usbhid 2-1:0.0: can't add hid device: -71
[  330.813756][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  330.846367][ T5718] usb 2-1: USB disconnect, device number 80
[  331.366167][ T5718] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  331.618388][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.618887][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.638302][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.638921][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.639312][T10503] binder: 10502:10503 ioctl 89fa 2000000010c0 returned -22
[  331.640811][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.652065][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.654873][ T5341] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS
[  331.654921][ T5341] cdc_ncm 3-1:1.1: bind() failure
[  331.910148][ T5341] usb 3-1: USB disconnect, device number 87
[  331.941607][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.941666][ T5718] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  331.941689][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.061513][ T5718] usb 2-1: config 0 descriptor??
[  332.568035][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.568419][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.568809][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.569181][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.569525][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.569908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.570179][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.570544][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.570827][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.571266][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.999019][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.999036][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.130593][ T5718] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  333.140693][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.171714][ T5718] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32
[  333.263922][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.298285][   T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  333.484156][   T37] usb 5-1: Using ep0 maxpacket: 32
[  333.500624][   T37] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  333.500831][   T37] usb 5-1: config 0 has no interface number 0
[  333.500878][   T37] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  333.500905][   T37] usb 5-1: config 0 interface 85 has no altsetting 0
[  333.570506][   T37] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  333.570592][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.570613][   T37] usb 5-1: Product: syz
[  333.570635][   T37] usb 5-1: Manufacturer: syz
[  333.570650][   T37] usb 5-1: SerialNumber: syz
[  333.645655][   T37] usb 5-1: config 0 descriptor??
[  333.703987][ T4924] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  333.940794][    C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  333.940872][ T5718] usb 2-1: USB disconnect, device number 81
[  334.335143][   T37] appletouch 5-1:0.85: Geyser mode initialized.
[  334.396267][   T37] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input33
[  334.459592][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.459611][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.538709][   T37] usb 5-1: USB disconnect, device number 23
[  335.306801][   T37] appletouch 5-1:0.85: input: appletouch disconnected
[  335.404216][ T5718] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  335.565028][ T5718] usb 2-1: Using ep0 maxpacket: 32
[  335.569366][ T5718] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  335.569403][ T5718] usb 2-1: config 0 has no interface number 0
[  335.569449][ T5718] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  335.616753][ T5718] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  335.616782][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.616801][ T5718] usb 2-1: Product: syz
[  335.616815][ T5718] usb 2-1: Manufacturer: syz
[  335.616827][ T5718] usb 2-1: SerialNumber: syz
[  335.680841][ T5718] usb 2-1: config 0 descriptor??
[  335.707324][ T5718] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  335.707361][ T5718] em28xx 2-1:0.132: Video interface 132 found:
[  335.746800][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.115546][ T5718] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  336.560963][ T5718] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  336.561001][ T5718] em28xx 2-1:0.132: board has no eeprom
[  336.617782][ T5718] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  336.617812][ T5718] em28xx 2-1:0.132: analog set to bulk mode.
[  336.618166][   T37] em28xx 2-1:0.132: Registering V4L2 extension
[  336.697415][ T5718] usb 2-1: USB disconnect, device number 82
[  336.738444][ T5718] em28xx 2-1:0.132: Disconnecting em28xx
[  337.191518][   T37] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  337.191543][   T37] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  337.191556][   T37] em28xx 2-1:0.132: No AC97 audio processor
[  337.243347][   T37] usb 2-1: Decoder not found
[  337.243366][   T37] em28xx 2-1:0.132: failed to create media graph
[  337.243401][   T37] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  337.456992][   T37] em28xx 2-1:0.132: Remote control support is not available for this card.
[  337.468803][ T5718] em28xx 2-1:0.132: Closing input extension
[  337.577036][    C0] net_ratelimit: 10590 callbacks suppressed
[  337.577056][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.577431][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.577701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.578069][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.578367][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.578721][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.579042][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.579419][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.579688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.580087][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  338.107923][ T5718] em28xx 2-1:0.132: Freeing device
[  338.224480][ T5692] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  338.374146][ T5692] usb 5-1: Using ep0 maxpacket: 32
[  338.384144][ T5692] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  338.384172][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.384192][ T5692] usb 5-1: Product: syz
[  338.384205][ T5692] usb 5-1: Manufacturer: syz
[  338.384220][ T5692] usb 5-1: SerialNumber: syz
[  338.392789][ T5692] usb 5-1: config 0 descriptor??
[  339.095133][ T5720] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  339.095164][ T5692] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  339.095187][ T5692] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  339.544154][ T5720] usb 4-1: Using ep0 maxpacket: 32
[  339.546610][ T5720] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  339.546634][ T5720] usb 4-1: config 0 has no interface number 0
[  339.546669][ T5720] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  339.546693][ T5720] usb 4-1: config 0 interface 85 has no altsetting 0
[  339.548669][ T5720] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  339.548698][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.548717][ T5720] usb 4-1: Product: syz
[  339.548732][ T5720] usb 4-1: Manufacturer: syz
[  339.548746][ T5720] usb 4-1: SerialNumber: syz
[  339.675910][ T5720] usb 4-1: config 0 descriptor??
[  340.008119][ T5692] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  340.313973][ T5692] usb 5-1: USB disconnect, device number 24
[  341.102425][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1645'.
[  341.379023][ T5692] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  341.466121][ T5836] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  341.594188][ T5836] usb 5-1: device descriptor read/64, error -71
[  341.596567][ T5692] usb 3-1: Using ep0 maxpacket: 8
[  341.621418][ T5692] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  341.621474][ T5692] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  341.621497][ T5692] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  341.621521][ T5692] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  341.621544][ T5692] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  341.621586][ T5692] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  341.621608][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.728309][ T5720] appletouch 4-1:0.85: Failed to request geyser raw mode
[  341.728537][ T5720] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  341.839420][ T5836] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  341.896845][ T5720] usb 4-1: USB disconnect, device number 21
[  341.954250][ T5692] usb 3-1: usb_control_msg returned -71
[  341.954296][ T5692] usbtmc 3-1:16.0: can't read capabilities
[  341.995075][ T5836] usb 5-1: device descriptor read/64, error -71
[  341.995158][   T37] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  342.104737][ T5836] usb usb5-port1: attempt power cycle
[  342.134147][   T37] usb 2-1: device descriptor read/64, error -71
[  342.394239][   T37] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  342.465007][ T5836] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  342.485047][ T5836] usb 5-1: device descriptor read/8, error -71
[  342.525460][   T37] usb 2-1: device descriptor read/64, error -71
[  342.584094][    C0] net_ratelimit: 10222 callbacks suppressed
[  342.584113][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.584474][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.584808][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.585196][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.585477][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.585838][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.586129][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.586501][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.586826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.587243][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.635720][   T37] usb usb2-port1: attempt power cycle
[  342.777112][ T5836] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  342.822965][ T5836] usb 5-1: device descriptor read/8, error -71
[  342.925710][ T5836] usb usb5-port1: unable to enumerate USB device
[  343.095010][   T37] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  343.277263][ T5692] usb 3-1: USB disconnect, device number 88
[  343.324870][   T37] usb 2-1: device descriptor read/8, error -71
[  343.624908][   T37] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  343.646575][   T37] usb 2-1: device descriptor read/8, error -71
[  343.765210][   T37] usb usb2-port1: unable to enumerate USB device
[  344.564210][ T5720] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  344.697449][T10607] netlink: 'syz.2.1654': attribute type 1 has an invalid length.
[  344.853026][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.853052][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.934209][   T37] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  345.041140][T10614] FAULT_INJECTION: forcing a failure.
[  345.041140][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.041175][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.4.1656 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  345.041202][T10614] Tainted: [L]=SOFTLOCKUP
[  345.041208][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  345.041220][T10614] Call Trace:
[  345.041227][T10614]  <TASK>
[  345.041236][T10614]  dump_stack_lvl+0xe8/0x150
[  345.041264][T10614]  should_fail_ex+0x46b/0x600
[  345.041298][T10614]  _copy_to_user+0x31/0xb0
[  345.041327][T10614]  simple_read_from_buffer+0xe1/0x170
[  345.041353][T10614]  proc_fail_nth_read+0x1be/0x230
[  345.041376][T10614]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  345.041399][T10614]  ? rw_verify_area+0x2ac/0x4e0
[  345.041421][T10614]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  345.041442][T10614]  vfs_read+0x212/0xa80
[  345.041472][T10614]  ? __pfx_vfs_read+0x10/0x10
[  345.041496][T10614]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  345.041522][T10614]  ? lockdep_hardirqs_on+0x7a/0x110
[  345.041545][T10614]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  345.041574][T10614]  ? mutex_lock_nested+0x152/0x1d0
[  345.041602][T10614]  ? fdget_pos+0x252/0x320
[  345.041630][T10614]  ksys_read+0x156/0x270
[  345.041656][T10614]  ? __pfx_ksys_read+0x10/0x10
[  345.041686][T10614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.041711][T10614]  do_syscall_64+0x174/0x580
[  345.041734][T10614]  ? trace_irq_disable+0x3b/0x140
[  345.041762][T10614]  ? clear_bhb_loop+0x40/0x90
[  345.041789][T10614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.041808][T10614] RIP: 0033:0x7f9448ddd68e
[  345.041825][T10614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  345.041841][T10614] RSP: 002b:00007f9447075fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  345.041862][T10614] RAX: ffffffffffffffda RBX: 00007f94470766c0 RCX: 00007f9448ddd68e
[  345.041876][T10614] RDX: 000000000000000f RSI: 00007f94470760a0 RDI: 0000000000000004
[  345.041888][T10614] RBP: 00007f9447076090 R08: 0000000000000000 R09: 0000000000000000
[  345.041900][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.041912][T10614] R13: 00007f9449096038 R14: 00007f9449095fa0 R15: 00007ffd797e8be8
[  345.041942][T10614]  </TASK>
[  345.064174][   T37] usb 3-1: device descriptor read/64, error -71
[  345.098937][ T5720] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  345.098966][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  345.098985][ T5720] usb 4-1: SerialNumber: syz
[  345.339852][   T37] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  345.484209][   T37] usb 3-1: device descriptor read/64, error -71
[  345.595615][   T37] usb usb3-port1: attempt power cycle
[  345.954404][   T37] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  345.978128][   T37] usb 3-1: device descriptor read/8, error -71
[  346.216829][   T37] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  346.237655][   T37] usb 3-1: device descriptor read/8, error -71
[  346.348480][   T37] usb usb3-port1: unable to enumerate USB device
[  346.505988][ T5720] usb 4-1: 0:2 : does not exist
[  346.549658][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'.
[  346.577494][ T5720] usb 4-1: USB disconnect, device number 22
[  346.723470][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'.
[  346.893270][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  347.012095][T10642] binder: 10641:10642 ioctl c0306201 200000000680 returned -14
[  347.594400][    C0] net_ratelimit: 13865 callbacks suppressed
[  347.594423][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.594713][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.595095][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.595448][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.595823][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.596115][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.596494][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.598308][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.598731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.599084][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.042832][T10657] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.194966][ T5692] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  348.346205][ T5692] usb 2-1: Using ep0 maxpacket: 32
[  348.361440][ T5692] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  348.361465][ T5692] usb 2-1: config 0 has no interface number 0
[  348.361502][ T5692] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  348.361529][ T5692] usb 2-1: config 0 interface 85 has no altsetting 0
[  348.403995][ T5692] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  348.404452][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.404473][ T5692] usb 2-1: Product: syz
[  348.404485][ T5692] usb 2-1: Manufacturer: syz
[  348.404496][ T5692] usb 2-1: SerialNumber: syz
[  348.412554][ T5692] usb 2-1: config 0 descriptor??
[  349.025552][ T5692] appletouch 2-1:0.85: Geyser mode initialized.
[  349.033546][ T5692] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input35
[  349.079446][T10657] bridge_slave_0 (unregistering): left allmulticast mode
[  349.079533][T10657] bridge_slave_0 (unregistering): left promiscuous mode
[  349.118426][T10657] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.144153][ T5720] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[  349.238869][  T822] usb 2-1: USB disconnect, device number 87
[  349.238993][    C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  349.452725][  T822] appletouch 2-1:0.85: input: appletouch disconnected
[  349.464443][ T5720] usb 3-1: device descriptor read/64, error -71
[  349.816461][ T5720] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  349.893765][T10686] overlay: Unknown parameter 'measure'
[  349.924273][   T37] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  350.074240][   T37] usb 5-1: device descriptor read/64, error -71
[  350.269694][  T822] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  350.314204][   T37] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  350.424129][  T822] usb 2-1: Using ep0 maxpacket: 8
[  350.433173][  T822] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  350.433205][  T822] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  350.433227][  T822] usb 2-1: config 0 interface 0 has no altsetting 0
[  350.433255][  T822] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  350.433275][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.485561][   T37] usb 5-1: device descriptor read/64, error -71
[  350.504232][ T5720] usb 3-1: device descriptor read/64, error -71
[  350.517263][  T822] usb 2-1: config 0 descriptor??
[  350.594630][   T37] usb usb5-port1: attempt power cycle
[  350.624390][ T5720] usb usb3-port1: attempt power cycle
[  350.932077][  T822] hid (null): unknown global tag 0xc
[  350.932102][  T822] hid (null): unknown global tag 0xd
[  350.947325][   T37] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  350.966595][   T37] usb 5-1: device descriptor read/8, error -71
[  350.981151][  T822] uclogic 0003:5543:0004.0015: unknown main item tag 0x0
[  350.981185][  T822] uclogic 0003:5543:0004.0015: unknown main item tag 0x0
[  350.981212][  T822] uclogic 0003:5543:0004.0015: unknown main item tag 0x0
[  350.981313][  T822] uclogic 0003:5543:0004.0015: unknown global tag 0xc
[  350.981329][  T822] uclogic 0003:5543:0004.0015: item 0 1 1 12 parsing failed
[  351.021660][  T822] uclogic 0003:5543:0004.0015: parse failed
[  351.021770][  T822] uclogic 0003:5543:0004.0015: probe with driver uclogic failed with error -22
[  351.084341][ T5720] usb 3-1: new full-speed USB device number 95 using dummy_hcd
[  351.204190][   T37] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  351.225243][   T37] usb 5-1: device descriptor read/8, error -71
[  351.227853][ T5720] usb 3-1: device descriptor read/8, error -71
[  351.329312][ T5692] usb 2-1: USB disconnect, device number 88
[  351.337917][   T37] usb usb5-port1: unable to enumerate USB device
[  351.352462][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'.
[  351.407758][T10703] netlink: 'syz.2.1686': attribute type 10 has an invalid length.
[  352.061346][   T38] audit: type=1326 audit(1781327710.439:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.1.1688" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f467f24ce59 code=0x0
[  352.133873][ T5720] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  352.160531][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.160557][ T5720] usb 3-1: config 0 has no interfaces?
[  352.160586][ T5720] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  352.160608][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.183586][ T5720] usb 3-1: config 0 descriptor??
[  352.260002][T10703] team0 (unregistering): Port device team_slave_0 removed
[  352.317664][T10703] team0 (unregistering): Port device team_slave_1 removed
[  352.414131][T10716] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1688'.
[  352.595327][ T5692] usb 3-1: USB disconnect, device number 96
[  352.604767][    C0] net_ratelimit: 5914 callbacks suppressed
[  352.604785][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.605057][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.606141][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.606460][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.607659][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.607946][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.609102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.609377][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.610549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.610826][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.904266][   T37] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  353.090622][   T37] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  353.090653][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.090672][   T37] usb 2-1: Product: syz
[  353.090687][   T37] usb 2-1: Manufacturer: syz
[  353.090702][   T37] usb 2-1: SerialNumber: syz
[  353.574836][   T37] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  353.809100][T10730] netlink: 'syz.4.1695': attribute type 11 has an invalid length.
[  353.968645][T10703] syz.2.1686 (10703) used greatest stack depth: 17112 bytes left
[  354.104690][ T5720] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  354.198170][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.248494][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.307463][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.307497][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.307532][ T5720] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  354.307554][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.348054][ T5720] usb 4-1: config 0 descriptor??
[  355.049971][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'.
[  355.075670][   T37] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  355.076603][   T37] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  355.179479][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.180142][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.203350][   T37] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  355.245970][   T37] usb 2-1: USB disconnect, device number 89
[  355.281863][ T5720] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  355.575374][ T5720] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  355.871600][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1700'.
[  355.966753][ T5836] usb 3-1: new low-speed USB device number 97 using dummy_hcd
[  356.186878][   T37] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  356.237044][ T5720] cp2112 0003:10C4:EA90.0016: error requesting version
[  356.245453][ T5720] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -32
[  356.387202][   T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.387258][   T37] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  356.387282][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.424506][   T37] usb 5-1: config 0 descriptor??
[  356.430654][   T37] pwc: Askey VC010 type 2 USB webcam detected.
[  356.478381][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.483292][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.754992][ T5836] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  356.855963][   T37] pwc: recv_control_msg error -32 req 02 val 2b00
[  356.857953][   T37] pwc: recv_control_msg error -32 req 02 val 2700
[  356.859649][   T37] pwc: recv_control_msg error -32 req 02 val 2c00
[  356.860308][   T37] pwc: recv_control_msg error -32 req 04 val 1000
[  356.860989][   T37] pwc: recv_control_msg error -32 req 04 val 1300
[  356.861759][   T37] pwc: recv_control_msg error -32 req 04 val 1400
[  356.863569][   T37] pwc: recv_control_msg error -32 req 02 val 2000
[  356.890063][   T37] pwc: recv_control_msg error -32 req 02 val 2100
[  356.909747][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  356.939858][ T5836] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  356.939887][ T5836] usb 3-1: config 0 has no interface number 0
[  356.939982][ T5836] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  356.940013][ T5836] usb 3-1: config 0 interface 85 has no altsetting 0
[  356.995452][ T5836] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  356.995483][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.995501][ T5836] usb 3-1: Product: syz
[  356.995515][ T5836] usb 3-1: Manufacturer: syz
[  356.995529][ T5836] usb 3-1: SerialNumber: syz
[  357.003200][ T5836] usb 3-1: config 0 descriptor??
[  357.277710][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'.
[  357.383385][   T37] pwc: recv_control_msg error -71 req 02 val 2500
[  357.395506][   T37] pwc: recv_control_msg error -71 req 02 val 2400
[  357.398232][   T37] pwc: recv_control_msg error -71 req 02 val 2600
[  357.412380][   T37] pwc: recv_control_msg error -71 req 02 val 2900
[  357.467584][   T37] pwc: recv_control_msg error -71 req 02 val 2800
[  357.476509][   T37] pwc: recv_control_msg error -71 req 04 val 1100
[  357.484508][   T37] pwc: recv_control_msg error -71 req 04 val 1200
[  357.528045][ T5720] usb 4-1: USB disconnect, device number 23
[  357.621462][    C0] net_ratelimit: 6815 callbacks suppressed
[  357.621488][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  357.624910][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.625156][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.634563][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  357.634886][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.635158][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.638438][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  357.638771][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.639040][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.649231][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  357.882281][ T5836] appletouch 3-1:0.85: Geyser mode initialized.
[  357.904899][ T5836] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input36
[  357.999966][   T37] pwc: Registered as video103.
[  358.009963][   T37] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37
[  358.052738][   T37] usb 5-1: USB disconnect, device number 33
[  358.180647][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'.
[  358.242916][  T822] usb 3-1: USB disconnect, device number 98
[  359.937737][  T822] appletouch 3-1:0.85: input: appletouch disconnected
[  360.024163][ T5720] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  360.207062][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.207090][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  360.207105][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  360.209160][ T5720] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  360.209185][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.209196][ T5720] usb 4-1: Product: syz
[  360.209203][ T5720] usb 4-1: Manufacturer: syz
[  360.209211][ T5720] usb 4-1: SerialNumber: syz
[  360.215474][ T5720] usb 4-1: config 0 descriptor??
[  360.226841][T10770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  360.434138][ T5720] rc_core: IR keymap rc-streamzap not found
[  360.434157][ T5720] Registered IR keymap rc-empty
[  360.494298][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'.
[  360.525000][ T5720] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  360.539319][ T5720] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38
[  362.105136][   T37] usb 4-1: USB disconnect, device number 24
[  362.624801][    C0] net_ratelimit: 9998 callbacks suppressed
[  362.624820][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  362.625163][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.625375][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.626538][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  362.626853][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.627132][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.628295][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  362.628607][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.628885][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.630090][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  367.634306][    C0] net_ratelimit: 14950 callbacks suppressed
[  367.634320][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.634767][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  367.634943][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.635094][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.635470][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.635900][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  367.636101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.636252][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.636634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.637061][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  372.644138][    C0] net_ratelimit: 15210 callbacks suppressed
[  372.644158][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.644929][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  372.645256][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.645536][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.646247][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.646990][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  372.647315][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.647622][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.648378][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.649141][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  373.893796][T10798] 9p: Bad value for 'rfdno'
[  373.955873][T10793] netlink: 'syz.1.1711': attribute type 21 has an invalid length.
[  374.010817][T10799] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1712'.
[  374.094508][   T37] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  374.233946][T10802] program syz.1.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.264806][   T37] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[  374.264835][   T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  374.295220][   T37] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  374.295257][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  374.295277][   T37] usb 5-1: SerialNumber: syz
[  374.726484][   T37] usb 5-1: 0:2 : does not exist
[  374.726572][   T37] usb 5-1: unit 5: unexpected type 0x0a
[  374.928172][   T37] usb 5-1: USB disconnect, device number 34
[  375.207794][T10796] udevd[10796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.624144][   T37] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  375.676010][ T4924] Bluetooth: hci4: command 0x0406 tx timeout
[  375.829108][   T37] usb 2-1: Using ep0 maxpacket: 32
[  375.831640][   T37] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  375.831666][   T37] usb 2-1: config 0 has no interface number 0
[  375.831705][   T37] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  375.831731][   T37] usb 2-1: config 0 interface 85 has no altsetting 0
[  375.869918][   T37] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  375.869949][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.869967][   T37] usb 2-1: Product: syz
[  375.869980][   T37] usb 2-1: Manufacturer: syz
[  375.869991][   T37] usb 2-1: SerialNumber: syz
[  375.897023][   T37] usb 2-1: config 0 descriptor??
[  375.902371][T10828] FAULT_INJECTION: forcing a failure.
[  375.902371][T10828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.902421][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.2.1722 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  375.902447][T10828] Tainted: [L]=SOFTLOCKUP
[  375.902454][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  375.902468][T10828] Call Trace:
[  375.902479][T10828]  <TASK>
[  375.902486][T10828]  dump_stack_lvl+0xe8/0x150
[  375.902513][T10828]  should_fail_ex+0x46b/0x600
[  375.902545][T10828]  _copy_to_user+0x31/0xb0
[  375.902567][T10828]  simple_read_from_buffer+0xe1/0x170
[  375.902592][T10828]  proc_fail_nth_read+0x1be/0x230
[  375.902614][T10828]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  375.902636][T10828]  ? rw_verify_area+0x2ac/0x4e0
[  375.902657][T10828]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  375.902677][T10828]  vfs_read+0x212/0xa80
[  375.902705][T10828]  ? __pfx_vfs_read+0x10/0x10
[  375.902728][T10828]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  375.902752][T10828]  ? lockdep_hardirqs_on+0x7a/0x110
[  375.902774][T10828]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  375.902797][T10828]  ? mutex_lock_nested+0x152/0x1d0
[  375.902822][T10828]  ? fdget_pos+0x252/0x320
[  375.902850][T10828]  ksys_read+0x156/0x270
[  375.902873][T10828]  ? __pfx_ksys_read+0x10/0x10
[  375.902892][T10828]  ? __pfx_tty_ioctl+0x10/0x10
[  375.902920][T10828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.902939][T10828]  do_syscall_64+0x174/0x580
[  375.902962][T10828]  ? trace_irq_disable+0x3b/0x140
[  375.902984][T10828]  ? clear_bhb_loop+0x40/0x90
[  375.903007][T10828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.903025][T10828] RIP: 0033:0x7fd2a42bd68e
[  375.903042][T10828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  375.903057][T10828] RSP: 002b:00007fd2a2555fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  375.903078][T10828] RAX: ffffffffffffffda RBX: 00007fd2a25566c0 RCX: 00007fd2a42bd68e
[  375.903091][T10828] RDX: 000000000000000f RSI: 00007fd2a25560a0 RDI: 0000000000000004
[  375.903103][T10828] RBP: 00007fd2a2556090 R08: 0000000000000000 R09: 0000000000000000
[  375.903115][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.903131][T10828] R13: 00007fd2a4576038 R14: 00007fd2a4575fa0 R15: 00007ffc8fd64448
[  375.903161][T10828]  </TASK>
[  376.528850][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1720'.
[  376.713557][   T37] appletouch 2-1:0.85: Geyser mode initialized.
[  376.793187][   T37] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input39
[  377.138207][ T5836] usb 2-1: USB disconnect, device number 90
[  377.150018][   T37] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  377.264283][  T822] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  377.314217][   T37] usb 5-1: Using ep0 maxpacket: 16
[  377.317278][   T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.317329][   T37] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  377.321541][   T37] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  377.321569][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.321588][   T37] usb 5-1: Product: syz
[  377.321602][   T37] usb 5-1: Manufacturer: syz
[  377.321617][   T37] usb 5-1: SerialNumber: syz
[  377.394742][ T5836] appletouch 2-1:0.85: input: appletouch disconnected
[  377.420725][   T37] usb 5-1: config 0 descriptor??
[  377.456946][   T37] appledisplay 5-1:0.0: Could not find int-in endpoint
[  377.460443][   T37] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  377.514216][  T822] usb 3-1: device descriptor read/64, error -71
[  377.658386][    C0] net_ratelimit: 7663 callbacks suppressed
[  377.658400][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  377.658576][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.658759][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.659486][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.660877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  377.661201][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.661475][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.664850][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.665644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  377.665947][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.794224][  T822] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  377.898108][T10841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1726'.
[  377.934192][  T822] usb 3-1: device descriptor read/64, error -71
[  378.045600][  T822] usb usb3-port1: attempt power cycle
[  378.384233][  T822] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  378.404241][   T32] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  378.414275][  T822] usb 3-1: device descriptor read/8, error -71
[  378.702527][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  378.702623][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  378.798968][T10858] syz.3.1731 (10858): drop_caches: 2
[  378.816974][  T822] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  378.868830][  T822] usb 3-1: device descriptor read/8, error -71
[  378.975163][  T822] usb usb3-port1: unable to enumerate USB device
[  379.187738][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1733'.
[  379.226554][T10868] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1733'.
[  379.825483][   T37] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  379.975544][   T37] usb 4-1: Using ep0 maxpacket: 8
[  380.002337][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  380.002376][   T37] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.002426][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.002455][   T37] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.002480][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.002503][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.002529][   T37] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.002555][   T37] usb 4-1: config 168 interface 0 has no altsetting 0
[  380.024119][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  380.024164][   T37] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.024204][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.024231][   T37] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.024256][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.024282][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.024308][   T37] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.024335][   T37] usb 4-1: config 168 interface 0 has no altsetting 0
[  380.135542][   T37] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  380.135586][   T37] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.135626][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.135655][   T37] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.135680][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.135706][   T37] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.135742][   T37] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.135770][   T37] usb 4-1: config 168 interface 0 has no altsetting 0
[  380.458721][   T37] usb 4-1: string descriptor 0 read error: -22
[  380.458862][   T37] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  380.458885][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.574220][ T5598] usb 5-1: USB disconnect, device number 35
[  380.679740][   T37] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  380.827201][   T37] usb 4-1: USB disconnect, device number 25
[  381.654486][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.655050][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.664636][    C0] net_ratelimit: 7278 callbacks suppressed
[  382.664658][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  382.664978][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.665255][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.665779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  382.666179][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  382.666353][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.666563][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.666974][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  382.667414][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  382.667595][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.859529][    T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  383.584341][ T5609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  383.584748][ T5609] Bluetooth: hci1: Injecting HCI hardware error event
[  383.598053][ T4924] Bluetooth: hci1: hardware error 0x00
[  384.704986][T10910] cgroup: Unknown subsys name 'cpuset'
[  385.064810][  T822] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  385.235731][  T822] usb 5-1: Using ep0 maxpacket: 32
[  385.237721][  T822] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  385.237748][  T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.294168][  T822] usb 5-1: config 0 descriptor??
[  385.334204][   T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  385.460497][  T822] gspca_main: sq930x-2.14.0 probing 041e:403c
[  385.485607][   T32] usb 4-1: Using ep0 maxpacket: 32
[  385.501323][   T32] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  385.501350][   T32] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  385.501373][   T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  385.501534][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  385.503169][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  385.503649][   T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  385.503694][   T32] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  385.503717][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.631207][   T32] usb 4-1: config 0 descriptor??
[  385.915008][   T32] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  385.966422][   T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  386.194778][ T5598] usb 4-1: USB disconnect, device number 27
[  386.195817][    C1] usblp0: nonzero read bulk status received: -71
[  386.215091][   T10] usb 3-1: Using ep0 maxpacket: 32
[  386.217297][   T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  386.217323][   T10] usb 3-1: config 0 has no interface number 0
[  386.217367][   T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  386.217394][   T10] usb 3-1: config 0 interface 85 has no altsetting 0
[  386.263557][T10914] usblp0: error -71 reading from printer
[  386.504162][  T822] gspca_sq930x: reg_w 0105 bf00 failed -110
[  386.544356][ T4924] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  386.564405][  T822] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[  387.184492][T10914] usblp0: removed
[  387.269536][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  387.269556][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.269566][   T10] usb 3-1: Product: syz
[  387.269573][   T10] usb 3-1: Manufacturer: syz
[  387.269581][   T10] usb 3-1: SerialNumber: syz
[  387.277582][   T10] usb 3-1: config 0 descriptor??
[  387.610725][  T822] usb 5-1: USB disconnect, device number 36
[  387.674272][    C0] net_ratelimit: 10974 callbacks suppressed
[  387.674289][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  387.674599][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.674883][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.675602][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.676352][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  387.676769][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.677051][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.677757][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.678498][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  387.678809][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.779564][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1754'.
[  387.794230][   T32] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  388.009059][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.009108][   T32] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  388.009132][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.050238][   T32] usb 2-1: config 0 descriptor??
[  388.242362][   T10] appletouch 3-1:0.85: Geyser mode initialized.
[  388.249696][   T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input40
[  388.276764][   T32] usbhid 2-1:0.0: can't add hid device: -71
[  388.276873][   T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  388.298781][   T32] usb 2-1: USB disconnect, device number 93
[  388.445942][  T822] usb 3-1: USB disconnect, device number 103
[  388.446776][    C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  388.705328][  T822] appletouch 3-1:0.85: input: appletouch disconnected
[  388.855484][ T5836] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  389.007437][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.007487][ T5836] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  389.007509][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.057971][ T5836] usb 2-1: config 0 descriptor??
[  389.694666][   T32] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  389.824252][   T32] usb 4-1: device descriptor read/64, error -71
[  389.895686][  T822] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  390.044274][  T822] usb 5-1: Using ep0 maxpacket: 32
[  390.047089][  T822] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  390.047116][  T822] usb 5-1: config 0 has no interface number 0
[  390.047283][  T822] usb 5-1: config 0 interface 12 has no altsetting 0
[  390.070425][   T32] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  390.097251][  T822] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  390.097281][  T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.097366][  T822] usb 5-1: Product: syz
[  390.097381][  T822] usb 5-1: Manufacturer: syz
[  390.097395][  T822] usb 5-1: SerialNumber: syz
[  390.171691][ T5692] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  390.238516][  T822] usb 5-1: config 0 descriptor??
[  390.258022][   T32] usb 4-1: device descriptor read/64, error -71
[  390.348720][ T5692] usb 3-1: unable to get BOS descriptor or descriptor too short
[  390.365088][   T32] usb usb4-port1: attempt power cycle
[  390.373670][ T5692] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[  390.373753][ T5692] usb 3-1: config 114 has no interface number 0
[  390.373806][ T5692] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  390.373831][ T5692] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  390.373905][ T5692] usb 3-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid maxpacket 43947, setting to 64
[  390.373932][ T5692] usb 3-1: config 114 interface 240 has no altsetting 0
[  390.463526][ T5692] usb 3-1: string descriptor 0 read error: -22
[  390.463727][ T5692] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  390.463818][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.507855][T10950] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  390.523639][ T5692] ir_usb 3-1:114.240: required endpoints missing
[  390.754155][   T32] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  390.808804][ T5836] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  390.868074][   T32] usb 4-1: device descriptor read/8, error -71
[  390.901242][ T5836] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41
[  390.918912][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.922404][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.103737][ T5836] usb 2-1: USB disconnect, device number 94
[  391.103821][    C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  391.114153][   T32] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  391.135131][   T32] usb 4-1: device descriptor read/8, error -71
[  391.244703][   T32] usb usb4-port1: unable to enumerate USB device
[  391.794211][ T5836] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  391.944355][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  391.950275][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short
[  391.952485][ T5836] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 146, changing to 7
[  391.991974][  T822] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  391.992124][  T822] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  391.992143][  T822] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  392.024304][  T822] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  392.026399][ T5836] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[  392.026428][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.026448][ T5836] usb 2-1: Product: ⠉
[  392.026463][ T5836] usb 2-1: SerialNumber: syz
[  392.092942][  T822] usb 5-1: USB disconnect, device number 37
[  392.365278][ T5836] usb 2-1: BAAD GENERIC IO: no channels?
[  392.448996][ T5836] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  392.463529][ T5836] usb 2-1: can't set first interface for hiFace device.
[  392.463569][ T5836] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5
[  392.486731][ T5836] usb 2-1: can't set first interface for hiFace device.
[  392.486769][ T5836] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5
[  392.492622][ T5836] usb 2-1: can't set first interface for hiFace device.
[  392.492658][ T5836] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5
[  392.564878][ T5836] usb 2-1: USB disconnect, device number 95
[  392.662244][T10796] udevd[10796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  392.698849][    C0] net_ratelimit: 7061 callbacks suppressed
[  392.698863][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  392.699322][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  392.702562][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.702876][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.703611][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  392.709491][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  392.720898][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.721197][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.721894][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  392.749073][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  392.914687][ T5836] usb 3-1: USB disconnect, device number 104
[  394.230378][T10991] binder: 10990:10991 ioctl c0306201 200000001040 returned -14
[  394.239753][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'.
[  394.674271][ T5836] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  394.695952][   T32] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  394.764564][   T37] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  394.814183][ T5836] usb 3-1: device descriptor read/64, error -71
[  394.859820][   T32] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  394.859849][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.859869][   T32] usb 4-1: Product: syz
[  394.859882][   T32] usb 4-1: Manufacturer: syz
[  394.859896][   T32] usb 4-1: SerialNumber: syz
[  394.924122][   T37] usb 2-1: Using ep0 maxpacket: 16
[  394.927954][   T37] usb 2-1: unable to get BOS descriptor or descriptor too short
[  394.929862][   T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.929884][   T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  394.972445][   T37] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  394.972531][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.972551][   T37] usb 2-1: Product: syz
[  394.972566][   T37] usb 2-1: Manufacturer: syz
[  394.972580][   T37] usb 2-1: SerialNumber: syz
[  395.064201][  T822] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  395.073467][T10991] binder: 10990:10991 ioctl 8933 200000000040 returned -22
[  395.146701][ T5836] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  395.198517][   T32] rtl8150 4-1:1.0: couldn't reset the device
[  395.199107][   T32] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  395.241798][   T32] usb 4-1: USB disconnect, device number 32
[  395.248073][  T822] usb 5-1: Using ep0 maxpacket: 32
[  395.258663][  T822] usb 5-1: too many configurations: 180, using maximum allowed: 8
[  395.262763][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.281897][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.294319][ T5836] usb 3-1: device descriptor read/64, error -71
[  395.294997][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.299639][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.322303][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.342014][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.353966][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.370260][  T822] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  395.397807][  T822] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  395.397835][  T822] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  395.397903][  T822] usb 5-1: Product: syz
[  395.397917][  T822] usb 5-1: Manufacturer: syz
[  395.433090][ T5836] usb usb3-port1: attempt power cycle
[  395.489668][  T822] hub 5-1:4.0: Invalid hub with more than one config or interface
[  395.489704][  T822] hub 5-1:4.0: probe with driver hub failed with error -22
[  395.774318][ T5836] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  395.794934][ T5836] usb 3-1: device descriptor read/8, error -71
[  396.057280][ T5836] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  396.091753][ T5836] usb 3-1: device descriptor read/8, error -71
[  396.197322][ T5836] usb usb3-port1: unable to enumerate USB device
[  396.238875][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.252372][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.443132][   T37] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  396.443233][   T37] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  396.581062][ T5720] usb 5-1: USB disconnect, device number 38
[  397.673741][T11018] 9p: Bad value for 'rfdno'
[  397.717976][   T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  397.747702][    C0] net_ratelimit: 8814 callbacks suppressed
[  397.747724][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.748924][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  397.749291][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.749789][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.750552][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.751376][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  397.751715][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.751990][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.753143][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.753932][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  397.788502][   T37] usb 2-1: USB disconnect, device number 96
[  397.882587][T10796] udevd[10796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  398.224411][   T32] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  398.394127][   T32] usb 3-1: Using ep0 maxpacket: 32
[  398.403722][   T32] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  398.403749][   T32] usb 3-1: config 0 has no interface number 0
[  398.403792][   T32] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  398.403819][   T32] usb 3-1: config 0 interface 85 has no altsetting 0
[  398.461377][   T32] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  398.461404][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.461423][   T32] usb 3-1: Product: syz
[  398.461436][   T32] usb 3-1: Manufacturer: syz
[  398.461450][   T32] usb 3-1: SerialNumber: syz
[  398.504484][   T32] usb 3-1: config 0 descriptor??
[  398.656994][T11023] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  398.917440][   T32] appletouch 3-1:0.85: Failed to read mode from device.
[  398.917653][   T32] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  399.130834][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  399.131248][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  399.131635][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  399.132098][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  399.132481][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  399.194406][   T32] usb 3-1: USB disconnect, device number 109
[  399.203843][T10796] udevd[10796]: setting mode of /dev/bus/usb/003/109 to 020664 failed: No such file or directory
[  399.203982][T10796] udevd[10796]: setting owner of /dev/bus/usb/003/109 to uid=0, gid=0 failed: No such file or directory
[  400.368806][   T32] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  400.572530][   T32] usb 3-1: device descriptor read/64, error -71
[  400.658277][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  400.835998][   T32] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  400.930017][T11053] 9p: Bad value for 'rfdno'
[  400.984214][   T32] usb 3-1: device descriptor read/64, error -71
[  401.094840][   T32] usb usb3-port1: attempt power cycle
[  401.201884][   T10] usb 4-1: Using ep0 maxpacket: 16
[  401.204620][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  401.209138][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40
[  401.209167][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.209187][   T10] usb 4-1: Product: syz
[  401.209201][   T10] usb 4-1: Manufacturer: syz
[  401.209215][   T10] usb 4-1: SerialNumber: syz
[  401.584311][   T32] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  401.604963][   T32] usb 3-1: device descriptor read/8, error -71
[  401.844198][   T32] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  401.869989][   T32] usb 3-1: device descriptor read/8, error -71
[  401.977158][   T32] usb usb3-port1: unable to enumerate USB device
[  402.024146][ T5718] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  402.174141][ T5718] usb 5-1: Using ep0 maxpacket: 32
[  402.185805][ T5718] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  402.185835][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.185853][ T5718] usb 5-1: Product: syz
[  402.185868][ T5718] usb 5-1: Manufacturer: syz
[  402.185882][ T5718] usb 5-1: SerialNumber: syz
[  402.544397][   T32] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  402.545802][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  402.686534][   T32] usb 2-1: device descriptor read/64, error -32
[  402.754214][    C0] net_ratelimit: 9619 callbacks suppressed
[  402.754235][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  402.754518][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.754761][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.755430][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.756138][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  402.756317][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.756475][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.756860][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.757355][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  402.757568][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  403.028183][ T5718] usb 5-1: config 0 descriptor??
[  403.054445][   T32] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  403.054728][    C1] raw-gadget.3 gadget.1: ignoring, device is not running
[  403.118206][ T5718] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  403.214374][   T32] usb 2-1: device descriptor read/64, error -32
[  403.326603][   T32] usb usb2-port1: attempt power cycle
[  403.704250][   T32] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  403.727148][   T32] usb 2-1: Using ep0 maxpacket: 16
[  403.732472][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  403.754654][   T32] usb 2-1: config 114 has an invalid interface number: 170 but max is 0
[  403.754686][   T32] usb 2-1: config 114 has no interface number 0
[  403.754787][   T32] usb 2-1: config 114 interface 170 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  403.754813][   T32] usb 2-1: config 114 interface 170 altsetting 232 bulk endpoint 0xF has invalid maxpacket 16
[  403.754838][   T32] usb 2-1: config 114 interface 170 has no altsetting 0
[  403.832265][   T32] usb 2-1: string descriptor 0 read error: -22
[  403.832461][   T32] usb 2-1: New USB device found, idVendor=12d1, idProduct=e677, bcdDevice=1c.4f
[  403.832486][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.882178][T11069] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  403.882537][T11069] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  403.944903][   T32] option 2-1:114.170: GSM modem (1-port) converter detected
[  404.293373][   T10] usb 4-1: USB disconnect, device number 33
[  404.523732][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.566977][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.587469][ T5718] gspca_ov534_9: reg_w failed -110
[  404.632031][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'.
[  404.858308][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.858840][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.884159][ T5718] gspca_ov534_9: Unknown sensor 0000
[  404.884249][ T5718] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  404.919697][ T5718] usb 5-1: USB disconnect, device number 39
[  404.944448][    T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  405.417699][    T9] usb 3-1: config 0 has an invalid interface number: 13 but max is 2
[  405.417726][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.417745][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  405.417764][    T9] usb 3-1: config 0 has no interface number 0
[  405.417807][    T9] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  405.417839][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.423993][    T9] usb 3-1: config 0 descriptor??
[  405.965246][ T5718] usb 2-1: USB disconnect, device number 99
[  406.036003][T11089] netlink: 'syz.4.1806': attribute type 11 has an invalid length.
[  406.424806][ T5718] option 2-1:114.170: device disconnected
[  406.521472][    T9] usb 3-1: USB disconnect, device number 114
[  406.724286][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  406.904146][   T10] usb 4-1: Using ep0 maxpacket: 16
[  406.906785][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  407.226439][ T5718] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  407.376758][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.376804][ T5718] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  407.376867][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.422686][ T5718] usb 5-1: config 0 descriptor??
[  407.504661][   T32] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  407.523790][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  407.523820][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.523840][   T10] usb 4-1: Product: syz
[  407.523853][   T10] usb 4-1: Manufacturer: syz
[  407.523868][   T10] usb 4-1: SerialNumber: syz
[  407.582296][   T10] usb 4-1: config 0 descriptor??
[  407.596782][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  407.596815][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  407.624236][ T5836] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  407.676169][   T32] usb 2-1: Using ep0 maxpacket: 8
[  407.679033][   T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  407.679071][   T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  407.679165][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  407.679193][   T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  407.679218][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  407.679244][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  407.679333][   T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  407.679360][   T32] usb 2-1: config 168 interface 0 has no altsetting 0
[  407.680889][   T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  407.680925][   T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  407.681024][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  407.681051][   T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  407.681077][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  407.681102][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  407.681182][   T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  407.681210][   T32] usb 2-1: config 168 interface 0 has no altsetting 0
[  407.683174][   T32] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  407.683210][   T32] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  407.683312][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  407.683341][   T32] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  407.683366][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  407.683391][   T32] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  407.683651][   T32] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  407.683679][   T32] usb 2-1: config 168 interface 0 has no altsetting 0
[  407.764129][    C0] net_ratelimit: 8897 callbacks suppressed
[  407.764149][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.764865][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  407.765181][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.765447][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.766164][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.766875][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  407.767189][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.767455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.768188][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.768946][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  408.145210][ T5718] usbhid 5-1:0.0: can't add hid device: -71
[  408.145330][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  408.177914][ T5718] usb 5-1: USB disconnect, device number 40
[  408.196088][   T32] usb 2-1: string descriptor 0 read error: -22
[  408.196239][   T32] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  408.196263][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.274187][ T5836] usb 3-1: Using ep0 maxpacket: 16
[  408.285017][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  408.285051][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  408.291020][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  408.291049][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.291069][ T5836] usb 3-1: Product: syz
[  408.291083][ T5836] usb 3-1: Manufacturer: syz
[  408.291098][ T5836] usb 3-1: SerialNumber: syz
[  408.456989][ T5836] usb 3-1: config 0 descriptor??
[  408.486955][   T32] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  408.493366][ T5836] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  408.493399][ T5836] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  408.561743][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.562750][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.597415][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  408.695711][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.718297][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.742233][ T5718] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  408.764817][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  408.764849][   T10] em28xx 4-1:0.0: board has no eeprom
[  408.849332][ T5598] usb 2-1: USB disconnect, device number 100
[  408.866918][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  408.866961][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  408.867019][  T823] em28xx 4-1:0.0: Binding DVB extension
[  408.925622][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.925888][ T5718] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  408.925914][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.195502][   T10] usb 4-1: USB disconnect, device number 34
[  409.198549][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  409.251784][ T5836] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  409.252595][ T5836] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  409.313379][ T5718] usb 5-1: config 0 descriptor??
[  409.552343][  T823] em28xx 4-1:0.0: Registering input extension
[  409.614818][   T10] em28xx 4-1:0.0: Closing input extension
[  409.646760][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.647438][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.364366][   T32] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  410.574261][   T32] usb 2-1: Using ep0 maxpacket: 32
[  410.583658][   T32] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  410.583682][   T32] usb 2-1: config 0 has no interface number 0
[  410.729457][   T32] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  410.729551][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.729572][   T32] usb 2-1: Product: syz
[  410.729586][   T32] usb 2-1: Manufacturer: syz
[  410.729600][   T32] usb 2-1: SerialNumber: syz
[  410.960704][   T32] usb 2-1: config 0 descriptor??
[  410.983617][   T32] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  411.038249][ T5836] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  411.047284][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  411.048163][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  411.049253][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  411.049920][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  411.131090][ T5836] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  411.434312][ T4924] Bluetooth: hci0: command 0x0406 tx timeout
[  411.649995][ T5836] usb 3-1: USB disconnect, device number 115
[  412.218029][   T10] em28xx 4-1:0.0: Freeing device
[  412.245014][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  412.291349][ T5718] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  412.357931][   T32] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  412.510980][ T5718] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input43
[  412.722903][   T32] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  412.775204][    C0] net_ratelimit: 7130 callbacks suppressed
[  412.775224][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.776058][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  412.776404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.776697][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.778880][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.779677][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  412.779969][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.786660][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.787464][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.788276][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  412.852774][ T5718] usb 5-1: USB disconnect, device number 41
[  412.852861][    C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  412.931873][   T32] usb 2-1: USB disconnect, device number 101
[  413.052485][   T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  413.083154][   T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  413.087375][   T32] quatech2 2-1:0.51: device disconnected
[  413.244174][   T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  413.476476][   T10] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  413.476502][   T10] usb 4-1: config 5 has no interface number 0
[  413.476551][   T10] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0
[  413.476574][   T10] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  413.476596][   T10] usb 4-1: config 5 interface 123 has no altsetting 0
[  413.479417][   T10] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  413.479443][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.479461][   T10] usb 4-1: Product: syz
[  413.479474][   T10] usb 4-1: Manufacturer: syz
[  413.479486][   T10] usb 4-1: SerialNumber: syz
[  414.074257][ T5718] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  414.189669][T11128] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  414.247612][ T5718] usb 5-1: Using ep0 maxpacket: 32
[  414.323164][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.323198][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.323220][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  414.323267][ T5718] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  414.323289][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.415964][ T5718] usb 5-1: config 0 descriptor??
[  414.604777][ T5598] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  414.850883][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.850919][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.850947][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.850973][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.851000][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.851027][ T5718] pantherlord 0003:0810:0002.0017: unknown main item tag 0x0
[  414.851112][ T5718] pantherlord 0003:0810:0002.0017: item fetching failed at offset 39/40
[  414.853587][ T5718] pantherlord 0003:0810:0002.0017: parse failed
[  414.853668][ T5718] pantherlord 0003:0810:0002.0017: probe with driver pantherlord failed with error -22
[  415.068917][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.069550][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.138931][T11147] 9p: Could not find request transport: xen
[  415.293565][T11133] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1823'.
[  415.374337][ T5718] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  415.526452][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  415.605822][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.609163][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.681903][ T5609] Bluetooth: hci2: unknown advertising packet type: 0x6e
[  415.681942][ T5609] Bluetooth: hci2: unknown advertising packet type: 0x06
[  415.681956][ T5609] Bluetooth: hci2: Dropping invalid advertising data
[  415.681971][ T5609] Bluetooth: hci2: Malformed LE Event: 0x02
[  415.799123][ T5598] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  415.799153][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.799228][ T5598] usb 2-1: Product: syz
[  415.799243][ T5598] usb 2-1: Manufacturer: syz
[  415.799257][ T5598] usb 2-1: SerialNumber: syz
[  416.121571][ T5598] usb 2-1: can't set config #1, error -71
[  416.301605][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short
[  416.302237][ T5836] usb 5-1: USB disconnect, device number 42
[  416.302773][ T5718] usb 3-1: unable to read config index 0 descriptor/start: -71
[  416.302805][ T5718] usb 3-1: can't read configurations, error -71
[  416.670366][T11159] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1832'.
[  416.688072][T11156] comedi comedi3: das16m1: I/O port conflict (0x500,8)
[  416.804997][ T5598] usb 2-1: USB disconnect, device number 102
[  416.827258][   T10] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  417.404120][ T5836] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  417.564147][ T5836] usb 5-1: Using ep0 maxpacket: 32
[  417.578994][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short
[  417.581567][ T5836] usb 5-1: config 4 has an invalid interface number: 224 but max is 0
[  417.581592][ T5836] usb 5-1: config 4 has no interface number 0
[  417.581623][ T5836] usb 5-1: config 4 interface 224 has no altsetting 0
[  417.617770][ T5836] usb 5-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da
[  417.617800][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.617820][ T5836] usb 5-1: Product: syz
[  417.617834][ T5836] usb 5-1: Manufacturer: syz
[  417.617848][ T5836] usb 5-1: SerialNumber: syz
[  417.784276][    C0] net_ratelimit: 9905 callbacks suppressed
[  417.784297][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.785055][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.785900][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  417.786241][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.786532][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.787243][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.787998][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  417.788320][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.788670][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.789395][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.808228][   T10] usb 4-1: USB disconnect, device number 35
[  418.219422][ T5598] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  418.395469][ T5598] usb 2-1: Using ep0 maxpacket: 32
[  418.399437][ T5598] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  418.399463][ T5598] usb 2-1: config 0 has no interface number 0
[  418.399506][ T5598] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  418.399534][ T5598] usb 2-1: config 0 interface 85 has no altsetting 0
[  418.403490][ T5598] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  418.403516][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.403535][ T5598] usb 2-1: Product: syz
[  418.403547][ T5598] usb 2-1: Manufacturer: syz
[  418.403561][ T5598] usb 2-1: SerialNumber: syz
[  418.611912][ T5598] usb 2-1: config 0 descriptor??
[  418.634311][ T5718] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  419.274365][  T822] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  419.417238][ T5598] appletouch 2-1:0.85: Failed to read mode from device.
[  419.417462][ T5598] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  419.423548][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  419.423965][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  419.424619][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  419.425008][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  419.425381][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  419.435211][  T822] usb 3-1: Using ep0 maxpacket: 32
[  419.485768][  T822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.485857][  T822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34285, setting to 1024
[  419.485886][  T822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  419.489993][  T822] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  419.490022][  T822] usb 3-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  419.490040][  T822] usb 3-1: Product: syz
[  419.490146][  T822] usb 3-1: Manufacturer: syz
[  419.490162][  T822] usb 3-1: SerialNumber: syz
[  419.494318][ T5598] usb 2-1: USB disconnect, device number 103
[  419.593563][T11184] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  419.628775][  T822] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46
[  420.118242][  T822] usb 3-1: USB disconnect, device number 118
[  420.118321][    C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  420.478948][ T5836] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware
[  420.570819][  T822] appletouch 3-1:1.0: input: appletouch disconnected
[  420.800630][ T5836] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  420.800703][ T5836] dib0700: firmware download failed at 7 with -22
[  420.827041][ T5836] usb 5-1: USB disconnect, device number 43
[  422.090577][T11206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1849'.
[  422.091098][T11206] unsupported nlmsg_type 40
[  422.564188][ T5836] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  422.714227][ T5836] usb 5-1: Using ep0 maxpacket: 8
[  422.725015][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61
[  422.725051][ T5836] usb 5-1: can't read configurations, error -61
[  422.794367][    C0] net_ratelimit: 8236 callbacks suppressed
[  422.794386][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  422.794701][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.794965][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.795641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.796379][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  422.796706][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.796966][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.797641][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.798097][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  422.798270][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.855746][ T5836] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  423.054158][ T5836] usb 5-1: Using ep0 maxpacket: 8
[  423.057670][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61
[  423.057705][ T5836] usb 5-1: can't read configurations, error -61
[  423.058280][ T5836] usb usb5-port1: attempt power cycle
[  423.424938][ T5836] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  423.456403][ T5836] usb 5-1: Using ep0 maxpacket: 8
[  423.478326][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61
[  423.478364][ T5836] usb 5-1: can't read configurations, error -61
[  423.624140][ T5836] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  423.645006][ T5836] usb 5-1: Using ep0 maxpacket: 8
[  423.654126][ T5836] usb 5-1: unable to read config index 0 descriptor/start: -61
[  423.654161][ T5836] usb 5-1: can't read configurations, error -61
[  423.655079][ T5836] usb usb5-port1: unable to enumerate USB device
[  423.861135][ T5598] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[  424.244180][ T5836] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  424.404110][ T5836] usb 2-1: Using ep0 maxpacket: 8
[  424.407984][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short
[  424.409299][ T5836] usb 2-1: config 93 has an invalid interface number: 89 but max is 0
[  424.409324][ T5836] usb 2-1: config 93 has no interface number 0
[  424.409354][ T5836] usb 2-1: config 93 interface 89 has no altsetting 0
[  424.413412][ T5836] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  424.413440][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.413459][ T5836] usb 2-1: Product: syz
[  424.413473][ T5836] usb 2-1: Manufacturer: syz
[  424.413487][ T5836] usb 2-1: SerialNumber: syz
[  424.746976][ T5598] usb 3-1: device descriptor read/64, error -71
[  424.786455][ T5836] usb 2-1: USB disconnect, device number 104
[  425.054212][ T5598] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  425.244231][ T5598] usb 3-1: device descriptor read/64, error -71
[  426.329444][ T5598] usb usb3-port1: attempt power cycle
[  426.465815][T11250] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  426.465945][T11250] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  427.267709][T11250] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  427.267798][T11250] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  427.338658][T11250] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  427.338779][T11250] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  427.667333][ T5836] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  427.804383][    C0] net_ratelimit: 11907 callbacks suppressed
[  427.804406][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.805203][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  427.805511][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.805774][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.806492][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.807248][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  427.807607][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.807869][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.808608][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.809351][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  427.814126][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  427.819153][ T5836] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  427.819179][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.819199][ T5836] usb 2-1: Product: syz
[  427.819212][ T5836] usb 2-1: Manufacturer: syz
[  427.819226][ T5836] usb 2-1: SerialNumber: syz
[  428.032375][ T5836] r8152-cfgselector 2-1: Unknown version 0x0000
[  428.032400][ T5836] r8152-cfgselector 2-1: config 0 descriptor??
[  428.471147][ T5609] Bluetooth: hci2: command 0x0406 tx timeout
[  428.495404][ T5836] r8152-cfgselector 2-1: Unknown version 0x0000
[  428.495910][ T5836] r8152-cfgselector 2-1: No union descriptors
[  428.554326][ T5836] r8152-cfgselector 2-1: USB disconnect, device number 105
[  429.038317][ T5598] usb usb3-port1: Cannot enable. Maybe the USB cable is bad?
[  429.329184][ T5598] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  429.351131][ T4924] Bluetooth: hci4: command 0x0406 tx timeout
[  429.351609][ T5609] Bluetooth: hci0: command 0x0406 tx timeout
[  429.352188][ T5598] usb 3-1: Using ep0 maxpacket: 32
[  429.369510][ T5598] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  429.369536][ T5598] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.369555][ T5598] usb 3-1: config 0 has no interface number 0
[  429.369595][ T5598] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  429.369617][ T5598] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[  429.369638][ T5598] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  429.369664][ T5598] usb 3-1: config 0 interface 196 has no altsetting 0
[  429.371916][ T5598] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  429.371942][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.371962][ T5598] usb 3-1: Product: syz
[  429.371976][ T5598] usb 3-1: Manufacturer: syz
[  429.371989][ T5598] usb 3-1: SerialNumber: syz
[  429.379897][ T5598] usb 3-1: config 0 descriptor??
[  429.544224][ T5836] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  429.694198][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  429.710430][ T5836] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  429.710456][ T5836] usb 2-1: config 0 has no interface number 0
[  429.739225][ T5836] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  429.739254][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.739274][ T5836] usb 2-1: Product: syz
[  429.739287][ T5836] usb 2-1: Manufacturer: syz
[  429.739301][ T5836] usb 2-1: SerialNumber: syz
[  429.782473][ T5836] usb 2-1: config 0 descriptor??
[  429.797672][ T5836] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  430.054575][ T5598] ipheth 3-1:0.196: Unable to find endpoints
[  430.093851][ T5598] usb 3-1: USB disconnect, device number 122
[  430.196882][ T5836] gspca_spca1528: reg_w err -71
[  430.216882][ T5836] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  430.244712][ T5836] usb 2-1: USB disconnect, device number 106
[  430.544252][ T5609] Bluetooth: hci2: command 0x0406 tx timeout
[  431.424492][ T4924] Bluetooth: hci4: command 0x0406 tx timeout
[  431.424542][ T5609] Bluetooth: hci0: command 0x0406 tx timeout
[  432.303805][T11328] netlink: 'syz.4.1897': attribute type 11 has an invalid length.
[  432.814568][    C0] net_ratelimit: 9371 callbacks suppressed
[  432.814586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  432.814897][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.815175][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.815868][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.816632][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  432.816949][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.817283][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.818052][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.818814][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  432.819142][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.934905][ T5598] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  433.134200][  T822] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  433.264453][  T822] usb 4-1: device descriptor read/64, error -71
[  433.504471][  T822] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  433.675759][  T822] usb 4-1: device descriptor read/64, error -71
[  433.786500][  T822] usb usb4-port1: attempt power cycle
[  434.017117][ T5609] Bluetooth: hci4: unexpected event for opcode 0x200f
[  434.185489][  T822] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  434.205420][  T822] usb 4-1: device descriptor read/8, error -71
[  434.475696][  T822] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  434.495315][  T822] usb 4-1: device descriptor read/8, error -71
[  434.598201][T11380] FAULT_INJECTION: forcing a failure.
[  434.598201][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.598238][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.4.1917 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  434.598265][T11380] Tainted: [L]=SOFTLOCKUP
[  434.598272][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  434.598299][T11380] Call Trace:
[  434.598308][T11380]  <TASK>
[  434.598317][T11380]  dump_stack_lvl+0xe8/0x150
[  434.598349][T11380]  should_fail_ex+0x46b/0x600
[  434.598380][T11380]  _copy_from_user+0x2d/0xb0
[  434.598407][T11380]  do_sock_getsockopt+0x200/0x7e0
[  434.598440][T11380]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  434.598478][T11380]  ? __fget_files+0x3a6/0x420
[  434.598497][T11380]  ? __fget_files+0x2a/0x420
[  434.598522][T11380]  __x64_sys_getsockopt+0x1aa/0x250
[  434.598550][T11380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.598570][T11380]  do_syscall_64+0x174/0x580
[  434.598593][T11380]  ? trace_irq_disable+0x3b/0x140
[  434.598617][T11380]  ? clear_bhb_loop+0x40/0x90
[  434.598640][T11380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.598660][T11380] RIP: 0033:0x7f9448e1ce59
[  434.598677][T11380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.598693][T11380] RSP: 002b:00007f9447076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  434.598715][T11380] RAX: ffffffffffffffda RBX: 00007f9449095fa0 RCX: 00007f9448e1ce59
[  434.598729][T11380] RDX: 0000000000000070 RSI: 0000000000000084 RDI: 0000000000000003
[  434.598741][T11380] RBP: 00007f9447076090 R08: 00002000000025c0 R09: 0000000000000000
[  434.598753][T11380] R10: 00002000000024c0 R11: 0000000000000246 R12: 0000000000000001
[  434.598764][T11380] R13: 00007f9449096038 R14: 00007f9449095fa0 R15: 00007ffd797e8be8
[  434.598794][T11380]  </TASK>
[  434.604643][  T822] usb usb4-port1: unable to enumerate USB device
[  434.921555][T11383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1918'.
[  434.993389][ T5598] usb 3-1: Using ep0 maxpacket: 8
[  435.085992][ T5598] usb 3-1: device descriptor read/all, error -71
[  435.940591][T11406] netlink: 'syz.3.1925': attribute type 11 has an invalid length.
[  436.956236][ T5598] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  437.030998][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.031526][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.734167][ T5598] usb 3-1: Using ep0 maxpacket: 8
[  437.754142][ T5598] usb 3-1: unable to get BOS descriptor or descriptor too short
[  437.755315][ T5598] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024
[  437.755345][ T5598] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0
[  437.755377][ T5598] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0
[  437.755400][ T5598] usb 3-1: config 1 interface 0 has no altsetting 0
[  437.765009][ T5598] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  437.765038][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.765057][ T5598] usb 3-1: Product: syz
[  437.765070][ T5598] usb 3-1: Manufacturer: syz
[  437.765084][ T5598] usb 3-1: SerialNumber: syz
[  437.776624][T11389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  437.824038][    C0] net_ratelimit: 10099 callbacks suppressed
[  437.824055][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.824329][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.825045][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.825788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  437.826090][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.826348][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.827027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.827850][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  437.828148][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.828412][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.344906][ T5721] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  438.813718][    T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  438.834161][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  438.851718][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.851851][ T5721] usb 5-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30
[  438.851892][ T5721] usb 5-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  438.851921][ T5721] usb 5-1: config 1 interface 2 has no altsetting 0
[  438.869903][ T5721] usb 5-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  438.869932][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.869952][ T5721] usb 5-1: Product: syz
[  438.869965][ T5721] usb 5-1: Manufacturer: syz
[  438.870028][ T5721] usb 5-1: SerialNumber: syz
[  439.976598][ T5721] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  440.013392][ T5721] usb 5-1: unit 4 not found!
[  440.013479][ T5721] usb 5-1: unit 144 not found!
[  440.033857][    T9] usb 4-1: device descriptor read/all, error -71
[  440.135213][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.135314][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  442.117576][ T5721] usb 5-1: USB disconnect, device number 48
[  442.176340][T10843] udevd[10843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  442.306028][ T5598] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8
[  442.383575][ T5598] usb 3-1: USB disconnect, device number 124
[  442.394326][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  442.403432][ T5598] usblp0: removed
[  442.834186][    C0] net_ratelimit: 9747 callbacks suppressed
[  442.834201][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.834586][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.835041][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  442.835219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.835369][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.835775][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.836200][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:ab:e8:77:8f:10, vlan:0)
[  442.836373][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.836522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.836895][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  443.779729][T11559] netlink: 'syz.4.1990': attribute type 2 has an invalid length.
[  443.779749][T11559] netlink: 'syz.4.1990': attribute type 3 has an invalid length.
[  443.779765][T11559] netlink: 11910 bytes leftover after parsing attributes in process `syz.4.1990'.
[  444.432068][    T9] usb 4-1: device not accepting address 42, error -71
[  444.442319][    T9] usb usb4-port1: attempt power cycle
[  444.544504][   T39] INFO: task kworker/u8:4:67 blocked for more than 143 seconds.
[  444.544531][   T39]       Tainted: G             L      syzkaller #0
[  444.544542][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  444.544563][   T39] task:kworker/u8:4    state:D stack:20520 pid:67    tgid:67    ppid:2      task_flags:0x4208060 flags:0x00080000
[  444.544616][   T39] Workqueue: netns cleanup_net
[  444.544640][   T39] Call Trace:
[  444.544646][   T39]  <TASK>
[  444.544659][   T39]  __schedule+0x172b/0x5550
[  444.544684][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  444.544720][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  444.544744][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  444.544772][   T39]  ? rt_spin_lock+0x1e0/0x400
[  444.544793][   T39]  ? __pfx___schedule+0x10/0x10
[  444.544822][   T39]  ? schedule+0x90/0x360
[  444.544846][   T39]  schedule+0x164/0x360
[  444.544870][   T39]  rxrpc_destroy_all_calls+0x44e/0x570
[  444.544900][   T39]  ? __pfx_rxrpc_destroy_all_calls+0x10/0x10
[  444.544926][   T39]  ? __pfx_var_wake_function+0x10/0x10
[  444.544949][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  444.544972][   T39]  ? __timer_delete_sync+0x53e/0x610
[  444.545002][   T39]  rxrpc_exit_net+0x6f/0xc0
[  444.545024][   T39]  ops_undo_list+0x49f/0x940
[  444.545054][   T39]  ? rt_spin_unlock+0x1a0/0x200
[  444.545074][   T39]  ? __pfx_ops_undo_list+0x10/0x10
[  444.545093][   T39]  ? rt_spin_unlock+0x14f/0x200
[  444.545113][   T39]  ? idr_destroy+0x21b/0x2a0
[  444.545135][   T39]  ? rt_spin_unlock+0x160/0x200
[  444.545157][   T39]  cleanup_net+0x56e/0x800
[  444.545181][   T39]  ? __pfx_cleanup_net+0x10/0x10
[  444.545214][   T39]  ? process_one_work+0x8be/0x1630
[  444.545242][   T39]  process_one_work+0x98b/0x1630
[  444.545290][   T39]  ? __pfx_process_one_work+0x10/0x10
[  444.545316][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.545352][   T39]  worker_thread+0xb49/0x1140
[  444.545390][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  444.545428][   T39]  kthread+0x388/0x470
[  444.545450][   T39]  ? __pfx_worker_thread+0x10/0x10
[  444.545485][   T39]  ? __pfx_kthread+0x10/0x10
[  444.545508][   T39]  ret_from_fork+0x514/0xb70
[  444.545535][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  444.545559][   T39]  ? __switch_to+0xc79/0x1410
[  444.545581][   T39]  ? __pfx_kthread+0x10/0x10
[  444.545605][   T39]  ret_from_fork_asm+0x1a/0x30
[  444.545647][   T39]  </TASK>
[  444.545846][   T39] 
[  444.545846][   T39] Showing all locks held in the system:
[  444.545856][   T39] 6 locks held by kworker/0:0/9:
[  444.545866][   T39]  #0: ffff88801afa6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.545941][   T39]  #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.545994][   T39]  #2: ffff88802a39e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  444.546039][   T39]  #3: ffff88802a3b6658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60
[  444.546089][   T39]  #4: ffff888020b39a58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60
[  444.546132][   T39]  #5: ffffffff8f056340 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820
[  444.546180][   T39] 6 locks held by ksoftirqd/0/15:
[  444.546191][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  444.546240][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  444.546291][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  444.546335][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0
[  444.546387][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  444.546434][   T39]  #5: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x160/0x13e0
[  444.546479][   T39] 1 lock held by khungtaskd/39:
[  444.546490][   T39]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  444.546535][   T39] 3 locks held by kworker/u8:4/67:
[  444.546545][   T39]  #0: ffff88801be9e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.546593][   T39]  #1: ffffc9000152fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.546644][   T39]  #2: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  444.546694][   T39] 3 locks held by kworker/u8:8/1047:
[  444.546705][   T39]  #0: ffff8880338eb938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.546776][   T39]  #1: ffffc900056afc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.546829][   T39]  #2: ffff888057dd21d0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe8/0xfa0
[  444.546895][   T39] 2 locks held by getty/5361:
[  444.546906][   T39]  #0: ffff8880371ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  444.546954][   T39]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[  444.547010][   T39] 3 locks held by kworker/0:3/5598:
[  444.547020][   T39]  #0: ffff88801afa6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.547075][   T39]  #1: ffffc9000427fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.547124][   T39]  #2: ffff88802a83c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  444.547169][   T39] 6 locks held by kworker/u9:2/5609:
[  444.547179][   T39]  #0: ffff888059a29138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.547228][   T39]  #1: ffffc900042ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.547280][   T39]  #2: ffff8880567ecf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  444.547327][   T39]  #3: ffff8880567ec0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  444.547379][   T39]  #4: ffffffff8f935498 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[  444.547430][   T39]  #5: ffff88805d06ab70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[  444.547492][   T39] 2 locks held by kworker/1:7/5719:
[  444.547502][   T39]  #0: ffff88813fe57938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.547547][   T39]  #1: ffffc90004d0fc40 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.547593][   T39] 3 locks held by kworker/0:5/5721:
[  444.547604][   T39]  #0: ffff88801afa6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  444.547656][   T39]  #1: ffffc90004d2fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  444.547706][   T39]  #2: ffff88802a3c6210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  444.547752][   T39] 3 locks held by syz-executor/8882:
[  444.547763][   T39]  #0: ffff888040206500 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  444.547815][   T39]  #1: ffff88805d0bcdf0 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: iput+0x25c/0xf00
[  444.547860][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  444.547909][   T39] 1 lock held by syz.2.1992/11558:
[  444.547919][   T39]  #0: ffff88801ae82cb0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0
[  444.547971][   T39] 2 locks held by syz.2.1992/11560:
[  444.547981][   T39]  #0: ffff88801ae82cb0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  444.548036][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  444.548083][   T39] 4 locks held by syz.3.1995/11567:
[  444.548093][   T39]  #0: ffff88803b20d530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  444.548134][   T39]  #1: ffffffff8e3d0d18 (rcu_node_0){-...}-{2:2}, at: rcu_preempt_deferred_qs_irqrestore+0x238/0xc60
[  444.548191][   T39]  #2: ffff88804dbdccd8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0x8b0
[  444.548234][   T39]  #3: ffff88802fef67f8 (&p->pi_lock){-...}-{2:2}, at: _task_rq_lock+0x5b/0x460
[  444.548288][   T39] 5 locks held by syz.1.1996/11568:
[  444.548299][   T39]  #0: ffff88803b20ba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  444.548342][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[  444.548395][   T39]  #2: ffff88804dbdc4d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  444.548453][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  444.548496][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0
[  444.548542][   T39] 
[  444.548547][   T39] =============================================
[  444.548547][   T39] 
[  444.548567][   T39] NMI backtrace for cpu 1
[  444.548584][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.548610][   T39] Tainted: [L]=SOFTLOCKUP
[  444.548617][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.548628][   T39] Call Trace:
[  444.548635][   T39]  <TASK>
[  444.548643][   T39]  dump_stack_lvl+0xe8/0x150
[  444.548669][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  444.548689][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  444.548713][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  444.548736][   T39]  sys_info+0x135/0x170
[  444.548763][   T39]  watchdog+0xfd3/0x1030
[  444.548793][   T39]  ? watchdog+0x1c9/0x1030
[  444.548821][   T39]  kthread+0x388/0x470
[  444.548843][   T39]  ? __pfx_watchdog+0x10/0x10
[  444.548863][   T39]  ? __pfx_kthread+0x10/0x10
[  444.548885][   T39]  ret_from_fork+0x514/0xb70
[  444.548911][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  444.548933][   T39]  ? __switch_to+0xc79/0x1410
[  444.548955][   T39]  ? __pfx_kthread+0x10/0x10
[  444.548977][   T39]  ret_from_fork_asm+0x1a/0x30
[  444.549016][   T39]  </TASK>
[  444.549023][   T39] Sending NMI from CPU 1 to CPUs 0:
[  444.549051][    C0] NMI backtrace for cpu 0
[  444.549065][    C0] CPU: 0 UID: 0 PID: 11567 Comm: syz.3.1995 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.549086][    C0] Tainted: [L]=SOFTLOCKUP
[  444.549092][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.549101][    C0] RIP: 0010:__lock_acquire+0x52/0x2d10
[  444.549122][    C0] Code: 11 48 89 44 24 08 31 ed 83 3d 79 12 2e 0e 00 0f 84 ef 13 00 00 45 89 cf 49 89 f9 48 8b 07 48 3d e0 04 7f 93 0f 84 da 13 00 00 <41> 89 cd 41 89 d6 8b 0d 32 49 88 0c 85 c9 44 0f 44 c1 31 c9 48 3d
[  444.549135][    C0] RSP: 0018:ffffc9000462f130 EFLAGS: 00000006
[  444.549149][    C0] RAX: ffffffff99cabd40 RBX: 0000000000000000 RCX: 0000000000000002
[  444.549159][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3cb360
[  444.549169][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8e3cb360
[  444.549179][    C0] R10: dffffc0000000000 R11: fffff940003b0f31 R12: 0000000000000002
[  444.549194][    C0] R13: ffffffff8e3cb360 R14: 0000000000000000 R15: 0000000000000000
[  444.549205][    C0] FS:  0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000
[  444.549217][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  444.549228][    C0] CR2: 000055556c151a38 CR3: 000000003ed62000 CR4: 00000000003526f0
[  444.549242][    C0] Call Trace:
[  444.549248][    C0]  <TASK>
[  444.549255][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  444.549274][    C0]  ? rt_spin_lock+0x1e0/0x400
[  444.549292][    C0]  ? pfn_valid+0xba/0x480
[  444.549310][    C0]  lock_acquire+0x106/0x350
[  444.549327][    C0]  ? pfn_valid+0xba/0x480
[  444.549342][    C0]  ? page_table_check_clear+0x124/0x4f0
[  444.549357][    C0]  ? pfn_valid+0xba/0x480
[  444.549371][    C0]  pfn_valid+0xd6/0x480
[  444.549384][    C0]  ? pfn_valid+0xba/0x480
[  444.549399][    C0]  page_table_check_clear+0x21/0x4f0
[  444.549413][    C0]  ? vm_normal_page+0xe6/0x1d0
[  444.549431][    C0]  __zap_vma_range+0x354e/0x4ab0
[  444.549460][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  444.549482][    C0]  ? mas_find+0xb0e/0xd30
[  444.549499][    C0]  ? unmap_vmas+0x1c5/0x570
[  444.549518][    C0]  unmap_vmas+0x3ac/0x570
[  444.549538][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  444.549563][    C0]  exit_mmap+0x280/0x9e0
[  444.549581][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  444.549595][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.549615][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  444.549635][    C0]  ? __pfx_exit_aio+0x10/0x10
[  444.549654][    C0]  ? uprobe_clear_state+0x2bf/0x3f0
[  444.549672][    C0]  __mmput+0xcb/0x3e0
[  444.549692][    C0]  exit_mm+0x18e/0x250
[  444.549709][    C0]  do_exit+0x6a2/0x22c0
[  444.549726][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  444.549748][    C0]  ? __pfx_do_exit+0x10/0x10
[  444.549763][    C0]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  444.549777][    C0]  ? reacquire_held_locks+0x104/0x190
[  444.549804][    C0]  ? rt_spin_lock+0x1e0/0x400
[  444.549821][    C0]  do_group_exit+0x21b/0x2d0
[  444.549837][    C0]  ? rt_spin_unlock+0x160/0x200
[  444.549852][    C0]  get_signal+0x1284/0x1330
[  444.549878][    C0]  arch_do_signal_or_restart+0xbc/0x840
[  444.549895][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  444.549913][    C0]  ? __fget_files+0x2a/0x420
[  444.549931][    C0]  exit_to_user_mode_loop+0x104/0x710
[  444.549949][    C0]  ? rcu_is_watching+0x15/0xb0
[  444.549970][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.549985][    C0]  do_syscall_64+0x353/0x580
[  444.550003][    C0]  ? trace_irq_disable+0x3b/0x140
[  444.550020][    C0]  ? clear_bhb_loop+0x40/0x90
[  444.550037][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.550052][    C0] RIP: 0033:0x7fe8c8c6ce59
[  444.550065][    C0] Code: Unable to access opcode bytes at 0x7fe8c8c6ce2f.
[  444.550072][    C0] RSP: 002b:00007fe8c6ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  444.550088][    C0] RAX: 0000000000000000 RBX: 00007fe8c8ee5fa0 RCX: 00007fe8c8c6ce59
[  444.550098][    C0] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004
[  444.550109][    C0] RBP: 00007fe8c8d02d6f R08: 0000000000000000 R09: 0000000000000000
[  444.550119][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.550128][    C0] R13: 00007fe8c8ee6038 R14: 00007fe8c8ee5fa0 R15: 00007ffd43907008
[  444.550145][    C0]  </TASK>
[  444.551065][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  444.551080][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  444.551104][   T39] Tainted: [L]=SOFTLOCKUP
[  444.551111][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  444.551120][   T39] Call Trace:
[  444.551127][   T39]  <TASK>
[  444.551134][   T39]  vpanic+0x56c/0xa60
[  444.551163][   T39]  ? __pfx_vpanic+0x10/0x10
[  444.551197][   T39]  panic+0xc5/0xd0
[  444.551222][   T39]  ? __pfx_panic+0x10/0x10
[  444.551247][   T39]  ? __x2apic_send_IPI_mask+0x158/0x190
[  444.551278][   T39]  ? wq_watchdog_touch+0xf9/0x160
[  444.551305][   T39]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[  444.551330][   T39]  watchdog+0x102c/0x1030
[  444.551357][   T39]  ? watchdog+0x1c9/0x1030
[  444.551382][   T39]  kthread+0x388/0x470
[  444.551401][   T39]  ? __pfx_watchdog+0x10/0x10
[  444.551420][   T39]  ? __pfx_kthread+0x10/0x10
[  444.551441][   T39]  ret_from_fork+0x514/0xb70
[  444.551467][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  444.551490][   T39]  ? __switch_to+0xc79/0x1410
[  444.551511][   T39]  ? __pfx_kthread+0x10/0x10
[  444.551533][   T39]  ret_from_fork_asm+0x1a/0x30
[  444.551573][   T39]  </TASK>
[  444.552056][   T39] Kernel Offset: disabled