last executing test programs:

10.605183102s ago: executing program 3 (id=3113):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000687a5a20720c110075090102030109021b00010000000009040000016fc6df00090509"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000687a5a20720c110075090102030109021b00010000000009040000016fc6df00090509"], 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x20, 0x0, &(0x7f00000016c0))
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x11, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc)
r2 = semget$private(0x0, 0x7, 0x3c0)
semop(r2, &(0x7f0000000140)=[{0x0, 0x6, 0x3800}, {0x2, 0xbf}, {0x4, 0xfffc}], 0x3)
semctl$IPC_RMID(r2, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc)
syz_usb_connect$cdc_ncm(0x6, 0x95, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x2, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a20874e610"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x7, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x9f, 0x8001, 0x8a, 0xdd, 0x4, 0xc0}, @obex={0x5, 0x24, 0x15, 0xda}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x6168, 0xe, 0xe, 0x1, 0xfe}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfb, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x8, 0x80}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xc, 0x6, 0x7f, 0x40}, 0x31, &(0x7f0000000200)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x48, 0x10, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x72, 0x9, 0xa3, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8, 0xf00, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7c, 0x3a, 0xa}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x82, &(0x7f0000000340)=@string={0x82, 0x3, "cb30c9a4bcbda55f18ead72372d96255a9096f8a0c0e7e0e207cb5ac40502946075d649c199cdb4b08196a448ecfaddfceed7476796d7357a54ded4f21dd5e0eb9f5bbaa40c83bd195a068ce58aad5d6cab55dd542066d90f6a95e396904f1caa2fe5d7734003a5f1761cbcafdcc4e5a5771a38f09a8ff64b9781cdb5a3588c4"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "12f40c7485e4bf2b4d98d82f96d80d06fe0011004ea1670366c7be803d92fad2b393c51a99f3a73a4202258e9528fb73ac565697efa033e6646cc7a9d087ae3e3ac2b0b2d4247dd95f76f469f845132738bd5e9ebbbd1196b62c54d290a659"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x449}}, {0x80, &(0x7f0000000500)=@string={0x80, 0x3, "b2adc65d41e860b7f2d84f0a334277fa16111782f96fe5bbfd38cf48c9f34ef73c03f9b100b3c906ddcd0502df6db2bccb4a3ef5f54412c1ccfcc6222667e74a04acfe75aeb2e4156433a7c44f0c14e2c5b4439a24043495c9d563a3bba903688e82b6f8a3edd95e8289061275f93afdcc96f15e23a0456d69afa8edd48a"}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "24b0b9d1e2dbd42e760841914dedd5de9ac38454c66dc647b9d0be6a058de1620f58883f928efc7c0ed3eca993bc6e076e0b013bc1cc445bb1d7c54da5374b5ab3eb376b0c04fc943a752341988583f96fd38263ec4d6fbd0d55ee55160bb878bc20d3f4eb4c42947d457ff2fadc0cbfd4918a4743e5e8009aa1284562eeda8570b46d9e865b0dc43e0eb96b8268022f6076243d7dc76e0d98d659cb83abe0d1024c4fad430f42c25c56432ea242db18294915b730cc73cfb6d9347d38da4fb4746b1cedb2128312f2777ca38ac068a7dacbc9dd0e9fb530ed241a2a8356af096909769c5bef78a1936c5f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44b}}, {0xb7, &(0x7f00000006c0)=@string={0xb7, 0x3, "d8320f810006497cdbb76d14d0e19696b0b7055171a34077373c798ef447a190baa31ceb7fbbfec0447b2b8712a631257c7f3c747afe32405e76027827e0ea6765c7326ca82eb0014c65b1cd446b40b297e75a0e4ffa4ee09662bb7fb634375a5f5405dd052cea98e93d728baedc9975115d44c5caaf4049d622814733c70060d12654a89217cb2972e4cdda8f8b59443489689d07ef03e22b6c8042670164a0f5006b7850bc9010fd2b2ad4227a9314b60e407f3b"}}, {0xd5, &(0x7f0000000b40)=@string={0xd5, 0x3, "84a660d62d89f3621dbfb94a08bdf22acaaea5c0db026c135f3ba10b139d119ac6dff83fa80162119b98ae5fa2e9712cbac40f4ca36f0327209fe3af34395703ee85faf4b028398dbeb2f85e0eece5ce65b53a0c7bbca5812b517cf9ad89d084d96016892edf149ba76f267fbc1a36d22fc6df093dd6f3db091498ea4141f20aec8838bfd9f996d57a19101d117df6b05605f468edf87386f08492bb5e8894bdff4d3406d2838f4c3c8ae6b10564e32825429651cf68d868d59e09826a83219921e131c944a7cc7701155822c5ce979d55c028"}}]}) (async)
syz_usb_connect$cdc_ncm(0x6, 0x95, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x2, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a20874e610"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x7, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x9f, 0x8001, 0x8a, 0xdd, 0x4, 0xc0}, @obex={0x5, 0x24, 0x15, 0xda}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x6168, 0xe, 0xe, 0x1, 0xfe}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfb, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x8, 0x80}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xc, 0x6, 0x7f, 0x40}, 0x31, &(0x7f0000000200)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x48, 0x10, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x72, 0x9, 0xa3, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x8, 0xf00, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7c, 0x3a, 0xa}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x82, &(0x7f0000000340)=@string={0x82, 0x3, "cb30c9a4bcbda55f18ead72372d96255a9096f8a0c0e7e0e207cb5ac40502946075d649c199cdb4b08196a448ecfaddfceed7476796d7357a54ded4f21dd5e0eb9f5bbaa40c83bd195a068ce58aad5d6cab55dd542066d90f6a95e396904f1caa2fe5d7734003a5f1761cbcafdcc4e5a5771a38f09a8ff64b9781cdb5a3588c4"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x61, &(0x7f0000000440)=@string={0x61, 0x3, "12f40c7485e4bf2b4d98d82f96d80d06fe0011004ea1670366c7be803d92fad2b393c51a99f3a73a4202258e9528fb73ac565697efa033e6646cc7a9d087ae3e3ac2b0b2d4247dd95f76f469f845132738bd5e9ebbbd1196b62c54d290a659"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x449}}, {0x80, &(0x7f0000000500)=@string={0x80, 0x3, "b2adc65d41e860b7f2d84f0a334277fa16111782f96fe5bbfd38cf48c9f34ef73c03f9b100b3c906ddcd0502df6db2bccb4a3ef5f54412c1ccfcc6222667e74a04acfe75aeb2e4156433a7c44f0c14e2c5b4439a24043495c9d563a3bba903688e82b6f8a3edd95e8289061275f93afdcc96f15e23a0456d69afa8edd48a"}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "24b0b9d1e2dbd42e760841914dedd5de9ac38454c66dc647b9d0be6a058de1620f58883f928efc7c0ed3eca993bc6e076e0b013bc1cc445bb1d7c54da5374b5ab3eb376b0c04fc943a752341988583f96fd38263ec4d6fbd0d55ee55160bb878bc20d3f4eb4c42947d457ff2fadc0cbfd4918a4743e5e8009aa1284562eeda8570b46d9e865b0dc43e0eb96b8268022f6076243d7dc76e0d98d659cb83abe0d1024c4fad430f42c25c56432ea242db18294915b730cc73cfb6d9347d38da4fb4746b1cedb2128312f2777ca38ac068a7dacbc9dd0e9fb530ed241a2a8356af096909769c5bef78a1936c5f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44b}}, {0xb7, &(0x7f00000006c0)=@string={0xb7, 0x3, "d8320f810006497cdbb76d14d0e19696b0b7055171a34077373c798ef447a190baa31ceb7fbbfec0447b2b8712a631257c7f3c747afe32405e76027827e0ea6765c7326ca82eb0014c65b1cd446b40b297e75a0e4ffa4ee09662bb7fb634375a5f5405dd052cea98e93d728baedc9975115d44c5caaf4049d622814733c70060d12654a89217cb2972e4cdda8f8b59443489689d07ef03e22b6c8042670164a0f5006b7850bc9010fd2b2ad4227a9314b60e407f3b"}}, {0xd5, &(0x7f0000000b40)=@string={0xd5, 0x3, "84a660d62d89f3621dbfb94a08bdf22acaaea5c0db026c135f3ba10b139d119ac6dff83fa80162119b98ae5fa2e9712cbac40f4ca36f0327209fe3af34395703ee85faf4b028398dbeb2f85e0eece5ce65b53a0c7bbca5812b517cf9ad89d084d96016892edf149ba76f267fbc1a36d22fc6df093dd6f3db091498ea4141f20aec8838bfd9f996d57a19101d117df6b05605f468edf87386f08492bb5e8894bdff4d3406d2838f4c3c8ae6b10564e32825429651cf68d868d59e09826a83219921e131c944a7cc7701155822c5ce979d55c028"}}]})
syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x90, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x19}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0xff, "ef"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x6, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x5, 0x4, 0x7f, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x6, 0x4, 0x54}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8df, 0x8, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x80, 0xc, {0x7, 0x25, 0x1, 0x80, 0x1, 0x13}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x87, 0x4, {0x7, 0x25, 0x1, 0xc266395255b948dd, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x4f, 0x2, 0x8, 0x20, 0x7}, 0x8, &(0x7f0000000940)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x81d}}, {0x41, &(0x7f00000009c0)=@string={0x41, 0x3, "3ef48796bdfb1fc021666f7e52863241db561b18aeb55c9a7ddd31e8b00bca9ab04f7db446fa6c9620492e3cc99fd9a332a54f4a5a10c47b11944f78b40a81"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x807}}]}) (async)
syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x90, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x19}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0xff, "ef"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x6, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x5, 0x4, 0x7f, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x6, 0x4, 0x54}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8df, 0x8, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x80, 0xc, {0x7, 0x25, 0x1, 0x80, 0x1, 0x13}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x87, 0x4, {0x7, 0x25, 0x1, 0xc266395255b948dd, 0x8, 0x100}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x4f, 0x2, 0x8, 0x20, 0x7}, 0x8, &(0x7f0000000940)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x81d}}, {0x41, &(0x7f00000009c0)=@string={0x41, 0x3, "3ef48796bdfb1fc021666f7e52863241db561b18aeb55c9a7ddd31e8b00bca9ab04f7db446fa6c9620492e3cc99fd9a332a54f4a5a10c47b11944f78b40a81"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x807}}]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x85)

9.359315967s ago: executing program 3 (id=3116):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000200000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa67dfffeb09b5351f5bde05"], 0x230)

9.276339786s ago: executing program 3 (id=3117):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x5)
accept4(r0, 0x0, 0x0, 0x80800)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x81}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4040041}, 0x24000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x48082}, 0x48010)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f070000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r8})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r9})

8.730646987s ago: executing program 0 (id=3125):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000000420000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa67dfffeb09b5351f5bde05"], 0x230)

8.603768404s ago: executing program 0 (id=3126):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x28, 0x0, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0xc2010)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

8.043278701s ago: executing program 0 (id=3127):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x3a4, &(0x7f00000000c0)=ANY=[])
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x8002, 0x4}, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff81050000ffff000058000b480400945f64009400050028925a01000000000000008000f0fffeff60a461e700fff5dd0000001000014001080800418e00000008fcff", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
r10 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f043, 0x8})
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r11, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r12=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={<r13=>r12, 0x8}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f00000001c0)={r13, 0xfff, 0x30, 0x8, 0x4}, &(0x7f0000000280)=0x18)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f194aacf0000000000801300000008000300", @ANYRES32=r5, @ANYBLOB="0400130006001200010000000600b500850100000a000600080211000001000006001a0103000000"], 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x4000004)
r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0)
connect$unix(r14, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0003100005f95d8a1f5c90727931646683c6d2b47fa7f83ded0f141580e1e142cf19d7fcbac7ee7d572b540137173448dd3b0b149591348b789aa890422c9516c07739a1ff916d042218765ae8216af88071a966f7a01c07d4e78e95403886e8d901c3cce4e2e6a0050550fd3bf2767e166436f49ff38dadf803151734e71e86b2d63ced244b8590c349794dac1ce5f88739d27e362fecb3af8935b910455227855e67ed9592c0663d60bbe1030df124316c2986dceb062c11b55f0", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25010000000800040004000000080003000500000008000200040000004400018014000400fe8000000000000000000000000000bb14000400fc010000000000000000000000000001080006000200000008000600010000000800060009000000080002000600000008000200020000000800030007000000050005000000000008000300050000000800030007000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fe3f5f256500000008000300", @ANYRES32=r5, @ANYBLOB="08000100400000000800020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48808}, 0x20048040)

7.46383308s ago: executing program 0 (id=3130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000020000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021"], 0xd8}}, 0x8090)

7.428542561s ago: executing program 0 (id=3131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x4, {0x3}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}}, 0x0)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905060220000200020905822b"], 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffc, 0x3}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000140)="2e000c0001000283d2f147f2eeb1b110a52889e89c672b387b45078201000000245b7395685efa752dc40ee9e2d188153d3e1a", 0x33)
syz_usb_control_io$hid(r1, 0x0, 0x0)

6.867390515s ago: executing program 0 (id=3137):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000002000"}})

6.602579269s ago: executing program 1 (id=3140):
r0 = gettid()
fsopen(&(0x7f0000000280)='nfsd\x00', 0x1)
capget(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0x5, 0x1, 0x9, 0x9, 0x4, 0x1})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)=<r1=>0x0)
clock_gettime(0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000100))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x50, r3, 0x1, 0x70bd27, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000380)='\x87\\\xff\x1b\f\xd2\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={r5, 0x1, 0x4000, 0x2000})
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2)
write$UHID_INPUT(r7, &(0x7f00000010c0)={0xc, {"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", 0xfffffffffffffd8f}}, 0x1006)
timerfd_gettime(r7, &(0x7f0000000240))
r8 = socket$phonet(0x23, 0x2, 0x1)
recvmmsg(r8, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10020, 0x0)

6.125651383s ago: executing program 3 (id=3141):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x464}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) (async)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x3, 0x0, 0x0, "3992ca995e968b0b065f3e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e2d341be59b00d4eb026a6375a22b930a6400"}, 0x48}, 0x1, 0x0, 0x0, 0x4008c80}, 0x8811)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb5c0754", 0xd6}], 0x1}, 0x20004804)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) (async)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

5.661779018s ago: executing program 1 (id=3142):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x844c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0x212, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x24233cfc, 0x54}}}}, [@NL80211_ATTR_IE={0x6f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xf, 0xa25bc06b9122f7c}}, @rann={0x7e, 0x15, {{0x1, 0x39}, 0x81, 0x2, @device_b, 0x20, 0x3, 0xd}}, @dsss={0x3, 0x1, 0x84}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x16, {0x0, 0x7, @val=0x5, @void, @val="d4d05c026a767c0cfc12aa0a31bf1458"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @val=0x7fff, @void, @val="997e9d126532d2659bf2a605bb68fce9"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x9, 0x1}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x3, {0x2, 0x70, 0x5}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x6, 0x75, 0xb, 0x2}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4005}, 0x80)
ftruncate(0xffffffffffffffff, 0x10000)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4000)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380)={0x2, 0xff}, 0x2)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x886f94a146e86f51}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800)
r3 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x7, 0x80201)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000500)={<r4=>0x0, 0x8000}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000580)={r4, 0x401}, &(0x7f00000005c0)=0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4050)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd0, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x333}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x33f9, @local, 0x9bd}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8044}, 0x20004002)
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2000, 0x0)
getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=<r8=>0x0)
quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, r8, &(0x7f0000000a00)='./file0\x00')
ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000a40)={0x4f, 0xcd, 0x9, 0x1, 0x4, 0x81})
bind$qrtr(r0, &(0x7f0000000a80)={0x2a, 0x3, 0x7ffe}, 0xc)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r5)
sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc4, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0xe}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x4010)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r10, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x7fffffff, @bearer=@l2={'ib', 0x3a, 'veth0_vlan\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x8c4}, 0x40084)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40000)
sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c080)
socket$caif_seqpacket(0x25, 0x5, 0x2)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xd4)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2211064}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x118, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff2718}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x4000)

5.547833593s ago: executing program 1 (id=3143):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf0000fffffffffffffff70000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa67dfffeb09b5351f5bde05"], 0x230)

5.421970477s ago: executing program 1 (id=3145):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TCSETS(r1, 0x40204706, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"})
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x40, 0xe, 0x57, "abe763a89f1a85d4d1dd4b1b8679b7d00a9c3421773aee33647bf8bd95163d050fdd49ba1ad6758d414d71ce50859694fbf0cefc24b3a75e2f7e05781633715c4e67188a3db1a9e81d6d65260cb01c130fd8932945f3e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="60100400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES16=r2, @ANYRES64=r2, @ANYRES16=0x0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$sierra_net(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x10, 0x43, {0x43, 0x30, "9ba005077b3035f7929f1bc89cd4121f831befdfe1a208c4893b5c318179fb4b74e7f8fd0c8e0019a84dac7badb86b43d5ee2e3a95230a1d16aa1072263cda7059"}}, &(0x7f0000000100)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "4dff4fa737dc2fc038184d4603f0c86823effe786dcfb8931189a164e8a885839ed3fa61a06ea20862615615d2fe06511bc81153a35d3ea93f"}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x20, 0xe, 0x3e, "7b56d899029bfe39ff567dedf8793d0304e8d033bb81a8e376dc0dccf00ba3ace81ebaead700fded489f944267ad7a46da9d76649cc0f0ac2a887e0ca450"}, &(0x7f0000000600)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200180"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.530786215s ago: executing program 2 (id=3149):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0)
syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
fchdir(r1)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x6, 0x3, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x170}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xf, 0x1}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4c, 0x5, 0x8, 0x10, 0xe}, 0x12f, &(0x7f0000000100)={0x5, 0xf, 0x12f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0xc, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d85cb5f4d73878f84bdc88699ee332aa"}, @generic={0xd4, 0x10, 0x3, "86b5c1924f0e48a2f89c82a8af64fa2c1751d35dcaec4ebd3d7039f454457e5fd4a58915feceb97fc64cf7317d0a8167a159886b8984ffe73f0719d3c106904cc62799f79bc50d031a755b25e5f6f40d46a1f417fecbe2bc414f0d5e61fd8cca44f4bfebd0df755fa90cd36c9931784dca03d0ddbb7d327c825cf646eac5c031a72de31a55b53e23d81703383bbff8389ec4f0a87de20a0fc03acafd2c73bac670a53b5d490945418aca5dea917ea583ba68b05ba089b43c75c20de280d1b944e5b4509c96ab0b2e32a47f9b311e6bc37b"}, @ptm_cap={0x3}, @generic={0x38, 0x10, 0xa, "c43336fa4e9af770410d49be33e1de791962b2dab3350369b8969dcdcd7e9c94baa12b0980a2fa7fcafc993d6e49cf432eca843c03"}]}, 0x4, [{0xff, &(0x7f0000000240)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41b}}, {0x94, &(0x7f0000000380)=@string={0x94, 0x3, "2a8df8f2aaf1e9de2d7c2091423b6ad64ba703bd64090350734b9351b106cc83d065ae2016fe110f601857e527915ef2b40d653a2c98e2e59af49e75ef74bab754ad20044f3390b8b82b51c4964ad441a6e14e51292bef01c85e5c83dcee7c0cb799f9c0d30d7d4f14f772a54020cde43444cbf867bf3a749f4b343b921afedd5cd3560d9977ff936ee25e1604f4b7be36ad"}}, {0x65, &(0x7f0000000440)=@string={0x65, 0x3, "70c8bc9743736bb73c59fc73d343da4ea43da0da77346c32bfeb318e0f92952d4b47202f3a80eae19d592fc5d600c040fd4a9dc5f8a6492f4b0b549195c5733fe505aba6ee39c9dc27df2fedbd739a042978d8df0dcea156445c474997679ac99fee5d"}}]})
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x40)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x4, 0x5, 0xce9, 0xb, 0xafc2, 0x10, 0x9, 0x1, 0x8, 0x6, 0x8000, 0x8, 0x0, 0xe0c, 0x8, 0x1, 0x6fd1a0f6, 0x1, 0xfffffff9, 0x7f, 0xfffffbff, 0x9, 0x18e8, 0x38000, 0x87a, 0x7, 0x7fff, 0x8, 0x3a, 0x80, 0x8, 0x80, 0x9, 0x1, 0x1, 0xac5, 0x0, 0x10, 0xfa, 0x5, 0x8c, 0x890, 0x0, 0x6, 0xd7, 0x2, 0x0, 0x399, 0x95b, 0x3, 0xe4e2, 0xf, 0x3, 0x3ff, 0x80000001, 0xffffffff, 0x73, 0x1, 0x4, 0x0, 0x1, 0x4e, 0x0, 0x8, 0x1, 0x4, 0x16f, 0x7, 0x6, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8, 0x3, 0x8, 0x4, 0x7, 0x6a, 0xf, 0x6, 0x1, 0x7, 0x4, 0x4, 0x7, 0x100, 0x7, 0x9, 0x0, 0x3, 0x5, 0xa1c00, 0x3, 0x8, 0x8, 0x5, 0x1, 0x1, 0x4, 0x1, 0x4, 0x1, 0x4, 0xc, 0x5, 0x1000000, 0xd, 0xad, 0xffff, 0x2, 0x28, 0x8, 0x80, 0x3, 0x2, 0x6, 0x200, 0x5, 0x9, 0x1, 0x5, 0x4, 0xb27, 0x8, 0x3, 0xc61, 0x7f, 0x5, 0x8, 0x4, 0x1, 0x200, 0xf7, 0xfffffffa, 0xc8, 0x8, 0xe89e, 0x9, 0x6, 0x100, 0xe, 0x173, 0x1, 0x9, 0xa1, 0x101, 0x8, 0x5, 0xd9, 0x2, 0x6, 0x101, 0x8, 0x6, 0x5, 0x6, 0x55f, 0xf, 0x2, 0x9, 0xd, 0x0, 0x5, 0x3, 0xfffffffc, 0x7, 0x3, 0x7, 0x2, 0xd, 0xa2e, 0x5, 0x5, 0x2, 0x400, 0x3, 0x18e4, 0x6, 0x10, 0x1, 0x9, 0x0, 0x2a, 0x4, 0x0, 0xee5b, 0x5, 0x200, 0x4, 0x1, 0x7, 0x0, 0x0, 0xfffffff9, 0xf, 0x2, 0x80000000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x2, 0x101, 0x2, 0x9f0, 0x0, 0xfeac, 0x7fff, 0x5c, 0x6, 0x65d, 0x4, 0x101, 0xffffff00, 0x80, 0x2, 0xd, 0x2, 0x6, 0x9, 0x81, 0x401, 0x6, 0x0, 0x6, 0x58, 0x9, 0x7, 0x2, 0x7, 0x7, 0xc, 0x9, 0x8, 0x3, 0x2, 0x46c9fa, 0x9, 0x1000, 0x5, 0x0, 0x0, 0x2, 0x1, 0xa0d7, 0x8, 0x7, 0x100, 0x10, 0x0, 0x9, 0xfd06, 0x0, 0x4, 0x7ff, 0x7, 0x8, 0x4, 0x4, 0xb7db, 0x7, 0xa, 0x8, 0x8, 0x20, 0x6, 0x7fffffff, 0x7, 0x1ceb, 0x5, 0x4, 0x7, 0xfffffff6, 0x2, 0x0, 0x15e, 0x7f7, 0x401, 0xfc000000, 0xf, 0x7, 0x8, 0x67, 0x6, 0x8, 0x0, 0x3c, 0xfffffffa, 0x7, 0x86, 0x0, 0x401, 0x101, 0x0, 0xc4, 0x11, 0x3, 0x5, 0x9, 0x80005c3, 0x4090, 0x4, 0x8, 0x3, 0x1, 0x4, 0x7, 0x4, 0x0, 0x1, 0x5d9c, 0x4, 0x4, 0x7fff, 0x5, 0x9b7, 0x5, 0x2e4c, 0xcdc8, 0x9, 0xc5, 0x7fffffff, 0x9, 0x4, 0x9, 0x800, 0x7d7, 0x8, 0x1, 0x0, 0x3, 0x5, 0x3e, 0xd, 0x4, 0x5, 0x6, 0xfffffffa, 0x7, 0x400, 0x1, 0x7, 0x80000001, 0x8, 0xfdfc, 0x401, 0xffffffff, 0x4, 0x12b, 0x2, 0x3, 0x6, 0xd28, 0x373, 0x10000, 0x3, 0x1, 0x1, 0x6, 0x9, 0xb, 0x7, 0x0, 0xfa4, 0x7, 0x3, 0xfffffffa, 0x8000, 0x10200, 0x5, 0x4, 0x0, 0x10, 0x7, 0x4, 0x21, 0x9, 0x568, 0x6, 0x400, 0x80000000, 0x8c9a, 0x0, 0x57, 0x0, 0x247d, 0x40, 0x3, 0x4, 0x4, 0xcf, 0x8, 0x3, 0xfffffffa, 0x7f, 0x5, 0x4, 0xb, 0x200, 0xc7a, 0x800, 0x400, 0x3, 0x4, 0x6, 0x2, 0x3, 0xfffffff7, 0xffff, 0x1, 0x6, 0x0, 0x7, 0x9, 0x0, 0x9, 0x8, 0x80000001, 0x8001, 0x1, 0x5, 0x100, 0x100, 0xc3b, 0x6, 0x6, 0x3ff, 0xb, 0x3, 0x5, 0xffffff81, 0xfffffffb, 0x1, 0xe, 0x800, 0x1, 0x33a, 0x3, 0x2caa, 0xaf96, 0x0, 0x100, 0x5, 0x8, 0x1, 0x210f, 0x2980, 0xd, 0xda, 0x667, 0x8, 0x8, 0x754, 0x3, 0x8, 0x8, 0x5, 0x3, 0xfffffff3, 0x1, 0x40, 0x4, 0xfffffffc, 0x8, 0xa10b, 0x5, 0x4, 0x40, 0x181b, 0x4000007, 0xf, 0x4bc9, 0xa9394e7, 0x2, 0x9, 0x80, 0x5, 0x40, 0x7f, 0xfffffffd, 0x1, 0x7ff, 0x3, 0x7, 0x80000000, 0x6, 0x800, 0x71, 0xa, 0x6, 0x7fffffff, 0x9, 0x40, 0x8, 0x3, 0x5, 0x5, 0x4, 0x5, 0x5, 0x71, 0xe, 0x80000000, 0xe, 0x6, 0x7, 0x7, 0x8, 0xa, 0x5, 0x80000001, 0x7, 0x3, 0x1, 0x5, 0x1, 0x4, 0x9f, 0x1, 0xcc7, 0x6, 0x3, 0x5, 0xd0, 0x1, 0xffff, 0x1000, 0x4, 0x1000, 0x9, 0x7ff, 0x8000, 0x0, 0x5, 0x5, 0x4, 0x7, 0xfffffffc, 0x8, 0x9, 0xe65, 0x100, 0x3, 0x40, 0x0, 0xa, 0x4, 0x3ff, 0xfffffff7, 0x7, 0xfffffff4, 0x6, 0x0, 0x63485586, 0x100, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x6, 0x2, 0x800, 0xc, 0x8000, 0x8, 0xfffffff8, 0x1, 0x0, 0x7, 0x9e, 0xffff4400, 0x80000000, 0x10001, 0x7f, 0x7, 0x9, 0x4, 0x5, 0x5, 0x6, 0xf737, 0x3ff, 0x8, 0x8, 0x8, 0x80, 0x620, 0x3, 0x401, 0xe, 0x80000001, 0x3, 0xa2, 0x4, 0xfffffff2, 0x54a862, 0x1ff, 0x3, 0x5, 0x0, 0x0, 0xb, 0x2, 0x7, 0x7fffffff, 0x1, 0x2, 0x8, 0x8, 0x80000001, 0x0, 0x8, 0x80000000, 0xfffffffd, 0x4, 0x0, 0x9f, 0xfffff001, 0x1, 0x101, 0x6, 0xd, 0x7, 0x81, 0xffff7fff, 0x1000, 0x401, 0x1ff, 0xa5f7, 0x2, 0x0, 0x1ff, 0x5c92, 0x2, 0x4, 0x4, 0xf87, 0x2, 0x0, 0x7ff, 0x7ff, 0x24b7, 0x8, 0x1, 0x6, 0x0, 0x6, 0x8, 0x4, 0x9, 0x1, 0xa, 0x2, 0x120, 0xfa, 0x10, 0x3b37, 0xa53, 0x99, 0xccd, 0x2, 0x47, 0x2, 0x8, 0x5, 0x5, 0x2, 0x800, 0x7, 0xfffffff7, 0xffffffff, 0x7d4, 0x8, 0x4, 0x46, 0x1, 0xfffffff9, 0x1000, 0x6, 0x8, 0x56, 0x8, 0x5, 0x8000, 0x7c0, 0x800, 0x9, 0x5a2, 0xb3f6, 0x0, 0xff, 0x79, 0x0, 0x81, 0xc6d, 0xffffffff, 0x3, 0x8, 0x4, 0xcd3, 0x8, 0x794, 0x0, 0x554, 0x3c9f7761, 0x8, 0x5, 0x4c, 0x59047a23, 0x7f, 0x98, 0x1, 0xfffffffa, 0xffffffff, 0x6, 0x8b3, 0x0, 0xb7, 0x9, 0x3, 0x80000001, 0x7, 0x2, 0x858f, 0x5, 0xf5cb, 0x8000, 0x7675, 0x8, 0x1af4, 0x1, 0x1ff, 0x3, 0x1, 0x10000, 0x5, 0xc, 0x6, 0x813, 0x9, 0xc, 0x4, 0x7, 0x200, 0x5, 0xfff, 0xffffffc0, 0x9, 0xffff5054, 0x7, 0x5, 0x8, 0x8, 0x1, 0x6, 0x5, 0x80000001, 0xfff, 0xf, 0x791, 0x1000, 0x5, 0xff, 0x4, 0x7, 0x4, 0x100, 0x621, 0x7, 0x0, 0xfffffff1, 0x4, 0x6, 0x2644, 0x374df45b, 0x3, 0xc805, 0x100, 0x3ff, 0x3, 0x40, 0x9, 0x0, 0x2, 0x9, 0x9, 0xb1a, 0x0, 0x5, 0x6, 0xca8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x6, 0x8, 0x2, 0x0, 0x5, 0x6, 0x5, 0x100, 0xffffffff, 0xf, 0x1, 0x3, 0x5, 0x40, 0xffffffff, 0x7, 0x8, 0xe3, 0x2, 0xc, 0x0, 0x4, 0x4, 0x10000, 0xfff, 0x2, 0x0, 0x71c, 0x2, 0x8a, 0x81, 0x2, 0x8001, 0x0, 0x8, 0x5, 0x2, 0xae2, 0x81, 0xfffffff6, 0xa, 0x7a, 0x5, 0x2, 0x9, 0x3, 0x5, 0xb, 0x9, 0x1, 0xffffff81, 0x4, 0x4, 0xbd, 0x200, 0x2, 0x36, 0x4, 0x54f, 0x4, 0x7c22, 0x2, 0x2, 0x7, 0x9, 0x401, 0x0, 0x5, 0x2b2, 0x8, 0x3, 0x7, 0x1, 0x8, 0xfff, 0x100, 0x1, 0x80000001, 0x100, 0x8ca0, 0x1, 0x4, 0xe, 0xffffffff, 0x6, 0x7, 0x9, 0x9, 0xbe85, 0x2, 0x4e93, 0x1, 0x1, 0x3, 0x8, 0xfffffffa, 0x4, 0x2, 0x0, 0xcbbb, 0x7, 0x2, 0x6, 0x9, 0x2, 0x3, 0xff, 0x0, 0xffff, 0x9, 0x1, 0x9, 0x3, 0xff, 0x1, 0x8ab, 0x1, 0x0, 0x3, 0x7, 0xf6a, 0x3, 0x1ff, 0xfffffffd, 0x7, 0x4, 0x19c0d9d6, 0x8, 0x8, 0x0, 0xffff, 0xe33, 0x1, 0x9, 0x5, 0x4, 0xfffffffa, 0x21, 0x1000, 0x5, 0x72e70f16, 0xc, 0x5, 0xd8c, 0x4f, 0x44, 0xe, 0x0, 0x3, 0x7, 0x4, 0x10001, 0x80000000, 0x6, 0x6, 0x4, 0x6, 0x8000, 0xfffff001, 0x8, 0x101, 0x1, 0x2, 0x0, 0x9585, 0x0, 0xffff, 0x3, 0x5, 0x1, 0xfffffffb, 0x2, 0x5, 0xe, 0x6, 0x3, 0xb2, 0x81, 0x2, 0x33f6, 0xc, 0x0, 0x8, 0xd, 0x80, 0x0, 0xe4, 0x4c67, 0x8000, 0x8, 0xca94, 0x9, 0x2, 0x8, 0x7e4, 0x3ff, 0x47ef, 0x3, 0xaf7, 0x7336, 0x8001, 0xffff0e95, 0x7, 0x5, 0x9, 0x2b, 0x8, 0x1, 0x8000, 0x7, 0x6, 0xffffffff, 0x1, 0x8, 0x9, 0x800, 0x8dfe, 0x265, 0x7, 0x40, 0x3, 0x309, 0x8], 0x0, 0x400, 0x6})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x80c00, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14)

3.67934356s ago: executing program 1 (id=3150):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, 0x0, 0x2248485b15138871)
ioctl$TCSETS(r0, 0x8910, &(0x7f00000000c0)={0xb, 0xe, 0x14, 0x6b3, 0x15, "1a9f0a3f7b52f26ea6fa6a6638d7219c6a5310"})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00'})
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0)

3.376620054s ago: executing program 3 (id=3151):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010001000000000000080003000000000000", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
r3 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x100006, {0x2, 0x0, 0x1}, 0x1}, 0x18)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12014003020000082505a1a44000010203010902"], &(0x7f0000001300)={0x0, 0x0, 0x1b, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f1b001c16"]})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000f0ff6ed7d957fe9abf0008fc0f01010000000000010902240001000000fc0904008d01030000000921"], 0x0)
mbind(&(0x7f0000399000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0xc6e, 0x7e286c8e8fceb80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="0900000000000000a15219"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x84)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5cf}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_usb_connect$uac1(0x6, 0xb9, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0xc, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x1, 0x5, [0x1, 0x0, 0xa, 0x3, 0x1]}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x9ea5, 0x0, "54f90b93e075f4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x6, 0x9, {0x7, 0x25, 0x1, 0x4, 0xb, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0xbaec, 0x2, "b028daee51f1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0xc, 0x5, '68', "1d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc8, 0x16, 0x8, {0x7, 0x25, 0x1, 0x82, 0x7f, 0x6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0xff, 0xb, 0x20, 0x3}, 0x3d, &(0x7f00000001c0)={0x5, 0xf, 0x3d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x30, 0x80, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x7, 0xa67e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xb, 0x4, 0x58, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0x1, 0x6, 0x6, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x8, 0x7}]}, 0x1, [{0x30, &(0x7f0000000240)=@string={0x30, 0x3, "0d1e0bb2033f0d4e5c32be19a18b8f8c5d01e0b3ad9f1704499bd90621df6db0f6423add0b5e0d7947c34dd28f11"}}]})
writev(r5, &(0x7f0000000b80)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000600)="6b5c6fb75f7e241d453eaddd63b9fac273b181e65d669c4a0b460e4d90b2b9330d907a9179e84d146940ab263a0c25e6bf074dc908a5ad1c4549f78a357923f2a7d43f23a35f2d324fc7b65f", 0x4c}, {&(0x7f0000000680)="9b4cc7607a8a38ab35b3e9f718b2361d45c494e2ce4411adfc9fb90e6360e3bb1d0f6617ba791c0c5c1b7ebf7606659250991765a6ae30e06014d78cd2a413147bd2ec43a6c71d003ac9a0804f0668b84ed53dd3ef8776df5027a54ee9fcc75fec95f4b231315512b4e1bcdc6b9861e83078ae56cae6de55cea4b5f85e11e5929c5d61c20d72ad2493339b992ded3a21dce2929b274280b8bc7e54add0f1de18cc2f3e0aee03ef54cda2962e2bd2d72032348314088895e93d0b3d6b26ed480e73892697ea", 0xc5}, {&(0x7f0000000340)="9fd79a12e22374f452b7f41bf8a9", 0xe}, {&(0x7f0000000780)="2c8a647deafe7b7f6da5745c844bc5f14d19a2dc8dc5bbb4eb7921b8305808d2e7fc422f0431992f4b3ae089443690a78b889de652840799e7badcc1b3a2009eb91b46a73893e0dde2a829c871a592d7888bf9db22396f532bc89baaf71cc056067d", 0x62}, {&(0x7f0000000800)="6dd9d3d4f35a612ff218422d", 0xc}, {&(0x7f0000000840)="b0ab239605fd7916b0f51efb8ce5eabcd4d61d20910810537f46c2dc3d3d6d755bb444a360c6178835e97d60dea916f7bfb5d1bb1700f8a6418d2e879c5d8bda260c4a6018d129900a3a13540fb081f33ebf7a0f87fafa702d28139105d49ddfc0ad51a5ccd1a2cc57e877f8df285d20455d5579209532efb21fe954a3312cd5e937d9c00364c221862a9e194c6d91126b67d567bbb611cf5ff41a6bec97994acfe51aab94b3402442163f85c6b4353cf28988db1aacac16053ee0c19a0b5a377fd67e048bbaf13f076954d6e539", 0xce}, {&(0x7f0000000940)="4d477a4b69a039274fec0be5c769d759f2c7ed6e5c3aa3b0bfb9fc1734b134e8471f2e5a7991a450a538069ffe07ebe52f6081a71416fec05d24680ae3e19bef7646705d6578044f5c2bd1e583fe9df2f11ce1b473d655642d4362964ba1ce5917d2530a778091a4424598df9e201c5c51056bd37da7a6d722ed435e293030ed3b881d4d5b78f0ae0a74dcf48fff885cf60d504d5aea81e70d783b3654bd99a6", 0xa0}, {&(0x7f0000000a80)="997e03d4226a9d58b4bc93f5812e8ecd28775f18cd07ee8e0a9c8f3dbb7bd43721c67234ceabbed1b4e69b7e4d8c44b8f956de534f17b198bf99678b29e8b14aea9fa2441496e4e11cf5e0071312bbbc5e2fb435acee7cecff053147808d49072a23a4101e15082c71f81b8974949ffe6f666149f589b21995494553d5d5723493e2b8beef75b00715ba103ffaa4fb0ba87c31c2fc58772003e12e0c1c7e5fabbb889d5b345104b0f0a7ca331ff7102e2a3a262ba74ffae4ed2b2a3630d2cffe8ade3b48fbf704cbed8f27c307c86afd1ba52278ad64994b16940a2c8a3625da5e2edfd698ef64", 0xe7}], 0x9)
syz_usb_control_io(r4, 0x0, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000004c0)={0xf63, 0x2, 0x3, "09cb9d2a95fde2ce292215c298e0a5a5eb1aa1fa92699d950b760c8b5ee1d4d7", 0x494e4f4b})
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "9611e6d6ffc88885163200000000000000000300000000000000010083df00"})
syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x20f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe7, 0x80, 0xa0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0xbd, {0x9, 0x21, 0x3fe, 0xf, 0x1, {0x22, 0xe2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x80, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x5f, 0x2}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0xcf7d027f949b96cc, 0x4, 0xf3, 0x8, 0x10, 0x7f}, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0x1ef00, 0x8, [0xff0000, 0xf, 0x3fd1]}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xd4, &(0x7f0000000500)=@string={0xd4, 0x3, "0a50fcb58a57609a5bf33c565930a6a437c6fad0f93e8dda27c1ab1306f8c052a8486ad4dc8a9130b1b8878c363103704d5706dcc5b84e02d8b18839545b0f7be242fd7b311933081b12ee697a407fb8bce1e4ca36bca8dcc6824de21b5b61a6773a5e45a0261d485a10a2a03a465733660a6c75d0d4c90ef7e8673f79b5adde69303e44cb45bff9c763d9a31ecc19c412c2ee848d2b3da03b68b697f914ca203152db3943e45bcfe98c9407d8f703cba5e62b9485bec773c15f772edccb199d3bbe2f0b9093652f5a272e616e2f4d58b70d"}}]})

1.431722049s ago: executing program 2 (id=3152):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf0000fffffffffffffffd0000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa67dfffeb09b5351f5bde05"], 0x230)

1.309013548s ago: executing program 2 (id=3153):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x18, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={<r1=>0x0}, &(0x7f00000003c0)=0xc)
fcntl$lock(r0, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7, 0x8, r1}) (async)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d60cc7af64ec4630e3b87d1583086744dfdaa1fda3dbf5756f499737fe4f805a745ee0b7176d3d5a89d87d6d1861673923dd9ea02456f55c96fe8c9a166df669b2e0fb48c39755b9bf9b3fbbf5a2f3fd3d5f3a6f8e48a801458f259a59087661cc7a7cbeb8215f646e8c9abd61fda89863296c54a8bf2a11e8eb9cccedf8a552bb4d24bc1ea603d965f3f9afbc69c916dd5d9e092b090796b7f5e8cadd991ecf875e92a980108f0a715850f330888", @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES64=r2, @ANYBLOB=',\x00'])
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000600)={{r3}, 0x0, 0x0, @unused=[0xffffffff, 0x1, 0xffffffff, 0x2], @name="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"}) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={r6, 0x79, "0a25782555338ca11f9a78d5455dbeee33509d0f4c05f5050208ebf578411e0770946eea530a8f2afd5d3a99fdf8734cb0f36bb0bca1809ed2fba44c83025c8108fe278814099f9c6514ef43bb54e3e8e0c7d7d17f3f705dd38bb70d7b666ba89c0d463582c1e8b325e7dd505bab4f471ebf2d4db2670e2f1c"}, &(0x7f0000000340)=0x81)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000440)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x22, 0x2, 0x24)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async)
r9 = userfaultfd(0x801)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) (async)
close_range(r8, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004e000701fefffffffcdbdf25027c05000400428010000180220c4c2a0500000000000000", @ANYRESOCT=r7], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001600)={<r10=>r4, 0x3, 0x30, 0xd296, 0x4}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r10, 0xbc, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0xa902, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e22, 0x729, @private2, 0x2}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x54, @mcast1, 0x8000}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}]}, &(0x7f0000000140)=0x10)

1.218760594s ago: executing program 2 (id=3154):
clock_getres(0x2, &(0x7f00000009c0))
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@rose, @default, @null, @netrom, @bcast, @remote, @null, @netrom]}, &(0x7f0000000380)=0x48)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
setresuid(0xee01, r3, r3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000030c0)=[{{&(0x7f00000003c0)=@ax25={{}, [@default, @default, @bcast, @bcast, @default, @remote, @null, @bcast]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)=""/36, 0x24}, {&(0x7f00000006c0)=""/116, 0x74}], 0x6, &(0x7f00000007c0)=""/58, 0x3a}, 0x8}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/215, 0xd7}], 0x2}, 0x2}, {{&(0x7f0000000a00)=@hci, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000a80)=""/93, 0x5d}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f0000001b00)=""/248, 0xf8}, {&(0x7f0000001c00)=""/241, 0xf1}, {&(0x7f0000001d00)=""/83, 0x53}], 0x6, &(0x7f0000001e00)=""/4, 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/63, 0x3f}, {&(0x7f0000001e80)=""/191, 0xbf}], 0x2}, 0x7}, {{&(0x7f0000001f80)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002000)=""/14, 0xe}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/47, 0x2f}, {&(0x7f00000020c0)=""/80, 0x50}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/68, 0x44}], 0x6, &(0x7f0000002340)=""/187, 0xbb}, 0x7fffffff}, {{&(0x7f0000002400)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002480)=""/221, 0xdd}, {&(0x7f0000002580)=""/251, 0xfb}, {&(0x7f0000002680)=""/224, 0xe0}, {&(0x7f0000002780)=""/137, 0x89}, {&(0x7f0000002840)=""/24, 0x18}, {&(0x7f0000002880)=""/251, 0xfb}], 0x6, &(0x7f0000002a00)=""/245, 0xf5}, 0x1}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b00)=""/172, 0xac}, {&(0x7f0000002bc0)=""/32, 0x20}, {&(0x7f0000002c00)=""/89, 0x59}, {&(0x7f0000002c80)=""/107, 0x6b}], 0x4, &(0x7f0000002d40)=""/157, 0x9d}, 0x8a9c}, {{&(0x7f0000002e00)=@hci, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/141, 0x8d}], 0x1, &(0x7f0000002f80)=""/193, 0xc1}, 0x95e}, {{0x0, 0x0, &(0x7f0000003080)}, 0x1}], 0x9, 0x80, &(0x7f0000003300)={0x77359400})
pselect6(0x40, &(0x7f0000002040)={0xa, 0x400, 0x6, 0x975a, 0xfffffffffffffffd, 0x100000001, 0x9, 0x3}, &(0x7f00000000c0)={0x1, 0x8, 0x3, 0x8000, 0xffffffffffffffaf, 0x4, 0xc, 0x2}, &(0x7f0000000100)={0xfffffffffffffffa, 0xfffffffeffffffff, 0x1, 0xffffffff, 0x60b, 0x1, 0x2765, 0x8}, &(0x7f00000001c0)={r0, r1+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1]}, 0x8})
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
r7 = socket(0x10, 0x80002, 0x0)
r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
read(r8, &(0x7f0000000180)=""/19, 0x13)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000003080))
ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000240))
ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000040)=0xb39)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='ecryptfs\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)

407.650587ms ago: executing program 1 (id=3155):
r0 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$addseals(r0, 0x409, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000002c0)={@val={0x3, 0xf6}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x10, 0x3, 0x0, {0x5, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x4, 0x2f, 0x1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x3e)
pwrite64(r0, &(0x7f0000000000)="48ed6f1f2b49", 0x6, 0x3)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r7, 0x5609, &(0x7f00000001c0)={0x9, 0x1004, 0x7ff})

280.844835ms ago: executing program 3 (id=3156):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005c000000000000000f00e035200000000f22"], 0x5c})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_DISALLOCATE(r3, 0x5608)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000200)={0x0, 0x7})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f06"], 0x0, 0x0, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e9ffff4f000000000000000f080f0866ba2100b0db000000ef450f22c2"], 0x296})
r7 = socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'vlan0\x00', 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0xd5)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000b40)={{0x2, 0x0, 0x80, {0x10000, 0x8080000}}, "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", "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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x3f, 0xae, 0x9c, 0x40, 0x93b, 0xa102, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x36, 0x0, 0x0, 0x50, 0xcd, 0xb7, 0x92}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)

234.454686ms ago: executing program 2 (id=3157):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000ffdd00"}})

0s ago: executing program 2 (id=3158):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='./file0/file1\x00', r2, &(0x7f0000000080)='./file0\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x1)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xda8c}, {&(0x7f0000000340)=""/141, 0x8d}, &(0x7f0000000300), 0x1055, 0x1}}], 0x48, 0x4804}, 0x0)

kernel console output (not intermixed with test programs):

rex 1-1:0.0: USB YUREX #0 now disconnected
[  443.734965][T17543] xt_l2tp: missing protocol rule (udp|l2tpip)
[  443.797413][ T5933] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  443.838059][ T5933] usb 3-1: device descriptor read/8, error -71
[  444.063284][T17556] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2486'.
[  444.088936][ T5933] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  444.119129][ T5933] usb 3-1: device descriptor read/8, error -71
[  444.187561][   T44] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  444.227740][ T5933] usb usb3-port1: unable to enumerate USB device
[  444.338679][   T44] usb 2-1: Using ep0 maxpacket: 16
[  444.346180][   T44] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  444.355669][   T44] usb 2-1: config 0 has no interface number 0
[  444.362207][   T44] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  444.377863][   T44] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  444.394598][T17571] xt_l2tp: missing protocol rule (udp|l2tpip)
[  444.394609][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.412924][   T44] usb 2-1: Product: syz
[  444.417160][   T44] usb 2-1: Manufacturer: syz
[  444.423510][   T44] usb 2-1: SerialNumber: syz
[  444.436817][   T44] usb 2-1: config 0 descriptor??
[  444.644696][   T44] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0
[  444.655698][   T44] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5
[  444.800855][T17578] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  444.869650][T17551] ptrace attach of "./syz-executor exec"[14330] was attempted by ""[17551]
[  444.982418][T17584] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2496'.
[  445.074994][T17588] IPVS: Error connecting to the multicast addr
[  445.230683][ T5183] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1
[  445.238800][ T5183] Bluetooth: hci3: unexpected event for opcode 0x0402
[  445.342709][T17600] xt_l2tp: missing protocol rule (udp|l2tpip)
[  445.541655][T17610] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2506'.
[  445.780926][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'.
[  446.001918][T17638] xt_l2tp: missing protocol rule (udp|l2tpip)
[  446.166642][T17641] lo speed is unknown, defaulting to 1000
[  446.231718][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  446.242871][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  446.319056][T17671] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2516'.
[  446.707822][   T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  446.877154][   T44] IPVS: starting estimator thread 0...
[  446.879046][   T10] usb 1-1: Using ep0 maxpacket: 16
[  446.881136][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.905964][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.918771][   T10] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  446.929003][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.940911][   T10] usb 1-1: config 0 descriptor??
[  446.974154][   T44] usb 2-1: USB disconnect, device number 102
[  446.981813][T17694] IPVS: using max 27 ests per chain, 64800 per kthread
[  447.057666][T17704] xt_l2tp: missing protocol rule (udp|l2tpip)
[  447.152131][T17709] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2526'.
[  447.457503][   T44] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  447.557704][   T10] usbhid 1-1:0.0: can't add hid device: -32
[  447.577577][T17676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.588672][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  447.590970][T17676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.609731][T17735] xt_l2tp: missing protocol rule (udp|l2tpip)
[  447.633597][ T5951] usb 1-1: USB disconnect, device number 100
[  447.646169][   T44] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  447.669162][   T44] usb 2-1: config 0 has no interface number 0
[  447.676993][   T44] usb 2-1: too many endpoints for config 0 interface 223 altsetting 33: 172, using maximum allowed: 30
[  447.719850][   T44] usb 2-1: config 0 interface 223 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 172
[  447.734787][   T44] usb 2-1: config 0 interface 223 has no altsetting 0
[  447.744888][   T44] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  447.756280][ T5870] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  447.764288][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.772530][   T44] usb 2-1: Product: syz
[  447.776975][   T44] usb 2-1: Manufacturer: syz
[  447.782207][   T44] usb 2-1: SerialNumber: syz
[  447.790864][   T44] usb 2-1: config 0 descriptor??
[  447.907687][ T5870] usb 4-1: device descriptor read/64, error -71
[  447.957485][   T10] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  448.018725][   T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  448.032533][   T44] gspca_ov534_9: reg_w failed -71
[  448.119185][   T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  448.127915][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  448.140253][   T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  448.150897][   T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  448.164548][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  448.168094][ T5870] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  448.182785][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  448.207568][   T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  448.217055][   T10] usb 3-1: Product: syz
[  448.223601][   T10] usb 3-1: Manufacturer: syz
[  448.229452][   T10] usb 3-1: SerialNumber: syz
[  448.249496][   T10] usb 3-1: config 0 descriptor??
[  448.268945][T17757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2535'.
[  448.269546][   T10] ldusb 3-1:0.0: Interrupt in endpoint not found
[  448.327674][ T5870] usb 4-1: device descriptor read/64, error -71
[  448.361725][T17762] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2536'.
[  448.447867][ T5870] usb usb4-port1: attempt power cycle
[  448.477270][   T44] gspca_ov534_9: Unknown sensor 0000
[  448.477393][   T44] ov534_9 2-1:0.223: probe with driver ov534_9 failed with error -22
[  448.492456][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.505002][   T44] usb 2-1: USB disconnect, device number 103
[  448.512039][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.544177][   T24] usb 3-1: USB disconnect, device number 117
[  448.731510][T17788] Dead loop on virtual device ip6_vti0, fix it urgently!
[  448.808159][ T5870] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  448.831168][T17793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  448.840972][ T5870] usb 4-1: device descriptor read/8, error -71
[  448.954941][T17802] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2546'.
[  449.097341][ T5870] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  449.147990][ T5870] usb 4-1: device descriptor read/8, error -71
[  449.278153][ T5870] usb usb4-port1: unable to enumerate USB device
[  449.557349][ T5933] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  449.583166][T17842] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2556'.
[  449.734821][ T5933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  449.748895][ T5933] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  449.769551][ T5933] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  449.787766][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.806512][ T5933] usb 3-1: Product: syz
[  449.814768][ T5933] usb 3-1: Manufacturer: syz
[  449.827589][ T5933] usb 3-1: SerialNumber: syz
[  449.851240][ T5933] usb 3-1: config 0 descriptor??
[  449.859114][T17820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  449.867022][T17820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  450.033598][T17870] lo speed is unknown, defaulting to 1000
[  450.092577][T17821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  450.120246][T17821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  450.393264][ T5933] Error reading MAC address
[  450.459004][ T5933] usb 3-1: USB disconnect, device number 118
[  450.515093][T17916] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2569'.
[  450.727785][T17870] syzkaller0: entered promiscuous mode
[  450.734108][T17870] syzkaller0: entered allmulticast mode
[  450.766575][T17870] syzkaller0 (unregistering): left promiscuous mode
[  450.783680][T17870] syzkaller0 (unregistering): left allmulticast mode
[  450.815991][   T30] audit: type=1326 audit(1757199412.362:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17869 comm="syz.1.2565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa181b8ebe9 code=0x0
[  450.962992][T17948] lo speed is unknown, defaulting to 1000
[  451.494439][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'.
[  451.620323][ T5870] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  451.790206][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  451.822966][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.853581][ T5870] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  451.871124][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.894768][ T5870] usb 2-1: config 0 descriptor??
[  451.950307][T18014] sp0: Synchronizing with TNC
[  452.049543][T18020] netlink: 'syz.0.2588': attribute type 12 has an invalid length.
[  452.256052][T18033] Bluetooth: MGMT ver 1.23
[  452.342841][ T5870] usbhid 2-1:0.0: can't add hid device: -32
[  452.363322][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  452.372939][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  452.383192][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  452.887360][ T5870] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  453.049909][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  453.059156][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.070544][ T5870] usb 4-1: config 0 descriptor??
[  453.083062][ T5870] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  453.147376][   T24] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  453.320566][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.331766][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  453.342314][   T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  453.351626][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  453.359761][   T24] usb 1-1: SerialNumber: syz
[  453.482356][ T5870] gspca_stv06xx: I2C: Read error writing address: -71
[  453.504680][ T5870] usb 4-1: USB disconnect, device number 127
[  453.571461][T18063] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2597'.
[  453.580795][T18063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.611729][   T24] usb 1-1: skipping empty audio interface (v1)
[  453.635009][   T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  453.649379][   T24] usb 1-1: USB disconnect, device number 101
[  453.709157][ T7632] udevd[7632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  454.121924][T18114] delete_channel: no stack
[  454.469015][    T9] usb 2-1: USB disconnect, device number 104
[  454.517715][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  454.687498][ T5855] usb 4-1: Using ep0 maxpacket: 8
[  454.695841][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.719421][ T5855] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  454.737150][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.749021][ T5855] usb 4-1: config 0 descriptor??
[  455.037970][ T5933] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  455.178695][ T5855] hid-corsair-void 0003:1B1C:1B25.0017: item fetching failed at offset 0/1
[  455.190029][ T5855] hid-corsair-void 0003:1B1C:1B25.0017: parse failed (reason: -22)
[  455.200283][ T5855] hid-corsair-void 0003:1B1C:1B25.0017: probe with driver hid-corsair-void failed with error -22
[  455.215155][ T5933] usb 3-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config
[  455.244272][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  455.258445][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.266510][ T5933] usb 3-1: Product: syz
[  455.267654][ T5870] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  455.275380][ T5933] usb 3-1: Manufacturer: syz
[  455.286182][ T5933] usb 3-1: SerialNumber: syz
[  455.378566][ T5951] usb 4-1: USB disconnect, device number 2
[  455.443223][ T5870] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  455.453742][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.461869][ T5870] usb 2-1: Product: syz
[  455.466179][ T5870] usb 2-1: Manufacturer: syz
[  455.470869][ T5870] usb 2-1: SerialNumber: syz
[  455.480380][ T5870] usb 2-1: config 0 descriptor??
[  455.511790][ T5933] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  455.521531][ T5933] dvb_usb_af9035 3-1:156.0: probe with driver dvb_usb_af9035 failed with error -22
[  455.536508][ T5933] usb 3-1: USB disconnect, device number 119
[  455.547869][   T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  455.689142][T18184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.699538][T18184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.709072][ T5870] usb 2-1: f81604_read: reg: 105 failed: -EPROTO
[  455.722677][   T24] usb 1-1: Using ep0 maxpacket: 32
[  455.727935][ T5870] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  455.735510][ T5870] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  455.746367][   T24] usb 1-1: config 0 has an invalid interface number: 28 but max is 0
[  455.755084][   T24] usb 1-1: config 0 has no interface number 0
[  455.770477][   T24] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37
[  455.783189][ T5870] usb 2-1: USB disconnect, device number 105
[  455.792756][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.801986][   T24] usb 1-1: Product: syz
[  455.809553][   T24] usb 1-1: Manufacturer: syz
[  455.814445][   T24] usb 1-1: SerialNumber: syz
[  455.828277][   T24] usb 1-1: config 0 descriptor??
[  455.840642][   T24] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  455.847040][   T24] command write [95] error -22
[  456.055139][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'.
[  456.070233][T18206] Bluetooth: MGMT ver 1.23
[  456.100790][ T5933] usb 1-1: USB disconnect, device number 102
[  456.397821][    T9] usb 3-1: new low-speed USB device number 120 using dummy_hcd
[  456.487330][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  456.557354][    T9] usb 3-1: Invalid ep0 maxpacket: 16
[  456.577563][   T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  456.641970][ T5870] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  456.651601][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.663432][ T5870] usb 4-1: config 0 descriptor??
[  456.697911][    T9] usb 3-1: new low-speed USB device number 121 using dummy_hcd
[  456.743672][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  456.754124][   T24] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  456.764738][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[  456.775136][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  456.784333][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.800756][   T24] usb 2-1: Product: syz
[  456.805019][   T24] usb 2-1: Manufacturer: syz
[  456.814494][   T24] usb 2-1: SerialNumber: syz
[  456.862036][    T9] usb 3-1: Invalid ep0 maxpacket: 16
[  456.872756][    T9] usb usb3-port1: attempt power cycle
[  457.034930][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.054759][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.070039][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.091218][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.113408][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.131551][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.143673][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.155436][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.167913][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.183994][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.227776][    T9] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[  457.235968][   T24] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[  457.244754][   T24] usb 2-1: No valid video chain found.
[  457.257643][    T9] usb 3-1: Invalid ep0 maxpacket: 16
[  457.257699][   T24] usb 2-1: USB disconnect, device number 106
[  457.398169][    T9] usb 3-1: new low-speed USB device number 123 using dummy_hcd
[  457.418408][    T9] usb 3-1: Invalid ep0 maxpacket: 16
[  457.425647][    T9] usb usb3-port1: unable to enumerate USB device
[  457.617361][ T5855] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  457.774833][ T5855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  457.785292][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  457.801492][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  457.812044][ T5855] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  457.829279][ T5855] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  457.845574][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.853775][ T5855] usb 1-1: Product: syz
[  457.862366][ T5855] usb 1-1: Manufacturer: syz
[  457.867024][ T5855] usb 1-1: SerialNumber: syz
[  457.878171][ T5855] usb 1-1: config 0 descriptor??
[  457.895677][T18321] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  457.913097][ T5855] usb 1-1: ucan: probing device on interface #0
[  457.920014][ T5855] usb 1-1: ucan: invalid in_ep MaxPacketSize
[  457.926044][ T5855] usb 1-1: ucan: probe failed; try to update the device firmware
[  458.114026][   T44] usb 1-1: USB disconnect, device number 103
[  458.917322][   T44] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  459.098801][ T5870] kaweth 4-1:0.0: Firmware present in device.
[  459.114257][   T44] usb 1-1: Using ep0 maxpacket: 16
[  459.128021][   T44] usb 1-1: config 21 has an invalid descriptor of length 238, skipping remainder of the config
[  459.146406][ T5870] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  459.169661][   T44] usb 1-1: config 21 has 0 interfaces, different from the descriptor's value: 3
[  459.192494][ T5870] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[  459.216434][   T44] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[  459.238403][ T5870] usb 4-1: USB disconnect, device number 3
[  459.246227][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.260191][   T44] usb 1-1: Product: syz
[  459.288979][   T44] usb 1-1: Manufacturer: syz
[  459.293652][   T44] usb 1-1: SerialNumber: syz
[  459.389783][   T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  459.527619][   T24] usb 2-1: device descriptor read/64, error -71
[  459.558183][   T44] usb 1-1: USB disconnect, device number 104
[  459.767559][ T5855] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  459.797515][   T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  459.877585][ T5870] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[  459.922625][ T5855] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  459.931443][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.937332][   T24] usb 2-1: device descriptor read/64, error -71
[  459.942006][ T5855] usb 4-1: config 0 has no interface number 0
[  459.957106][ T5855] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  459.970496][ T5855] usb 4-1: config 0 interface 41 has no altsetting 0
[  459.979703][ T5855] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  459.991546][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.999933][ T5855] usb 4-1: Product: syz
[  460.004144][ T5855] usb 4-1: Manufacturer: syz
[  460.009057][ T5855] usb 4-1: SerialNumber: syz
[  460.015942][ T5855] usb 4-1: config 0 descriptor??
[  460.025057][ T5855] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22
[  460.043828][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short
[  460.054863][ T5870] usb 3-1: not running at top speed; connect to a high speed hub
[  460.068271][   T24] usb usb2-port1: attempt power cycle
[  460.078656][ T5870] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  460.090908][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.100404][ T5870] usb 3-1: Product: syz
[  460.104976][ T5870] usb 3-1: Manufacturer: syz
[  460.110099][ T5870] usb 3-1: SerialNumber: syz
[  460.210846][T18432] netlink: 'syz.0.2654': attribute type 11 has an invalid length.
[  460.326464][ T5870] kalmia 3-1:106.0: probe with driver kalmia failed with error -22
[  460.349499][ T5870] usb 3-1: USB disconnect, device number 124
[  460.428217][   T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  460.450830][   T24] usb 2-1: device descriptor read/8, error -71
[  460.713735][   T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  460.759793][   T24] usb 2-1: device descriptor read/8, error -71
[  460.774965][T18469] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2663'.
[  460.824551][T18471] netlink: 'syz.0.2664': attribute type 1 has an invalid length.
[  460.877632][   T24] usb usb2-port1: unable to enumerate USB device
[  460.911254][T18476] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  461.219563][T18496] netlink: 'syz.0.2671': attribute type 10 has an invalid length.
[  461.228756][T18496] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.238337][T18496] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.557661][ T5914] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  461.716709][ T5914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  461.737431][ T5914] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  461.764205][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.800928][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  461.813405][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.824922][ T5914] usb 3-1: Product: syz
[  461.834068][ T5914] usb 3-1: Manufacturer: syz
[  461.844516][ T5914] usb 3-1: SerialNumber: syz
[  461.863991][ T5914] hub 3-1:1.0: bad descriptor, ignoring hub
[  461.870561][ T5914] hub 3-1:1.0: probe with driver hub failed with error -5
[  462.086103][ T5914] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  462.097500][   T24] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  462.250764][   T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  462.260143][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  462.268473][   T24] usb 1-1: SerialNumber: syz
[  462.275282][   T24] usb 1-1: config 0 descriptor??
[  462.284615][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.295624][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.307395][ T5183] Bluetooth: hci0: command tx timeout
[  462.360008][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.373393][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.398287][ T5914] usb 3-1: USB disconnect, device number 125
[  462.409505][ T5914] usblp0: removed
[  462.417778][ T5933] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  462.559684][   T44] usb 4-1: USB disconnect, device number 4
[  462.580452][ T5933] usb 2-1: Using ep0 maxpacket: 32
[  462.605390][ T5933] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  462.622129][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.633146][ T5933] usb 2-1: Product: syz
[  462.639233][ T5933] usb 2-1: Manufacturer: syz
[  462.643964][ T5933] usb 2-1: SerialNumber: syz
[  462.661197][ T5933] usb 2-1: config 0 descriptor??
[  462.692175][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.722443][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.037431][   T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  463.050807][   T24] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  463.060283][   T24] hackrf 1-1:0.0: Could not detect board
[  463.066072][   T24] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  463.087297][T18530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.108641][   T24] usb 1-1: USB disconnect, device number 105
[  463.147643][T18530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.194832][ T5933] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  463.197469][   T44] usb 4-1: Using ep0 maxpacket: 32
[  463.233700][   T44] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  463.255571][   T44] usb 4-1: config 0 has no interface number 0
[  463.276366][   T44] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  463.304049][ T5933] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  463.306982][   T44] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  463.324494][ T5933] usb 2-1: USB disconnect, device number 111
[  463.354094][   T44] usb 4-1: config 0 interface 48 has no altsetting 0
[  463.367121][   T44] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  463.402263][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.414954][   T44] usb 4-1: Product: syz
[  463.423859][   T44] usb 4-1: Manufacturer: syz
[  463.429197][   T44] usb 4-1: SerialNumber: syz
[  463.443064][   T44] usb 4-1: config 0 descriptor??
[  463.620630][T18630] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  463.706016][T18630] CIFS: Unable to determine destination address
[  463.710834][T18570] overlay: Unknown parameter 'audit'
[  463.772562][   T44] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  463.817330][   T44] gspca_stk1135: reg_w 0x2 err -71
[  463.832228][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.852822][   T44] gspca_stk1135: Sensor write failed
[  463.867701][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.877240][   T44] gspca_stk1135: Sensor write failed
[  463.882860][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.889851][   T44] gspca_stk1135: Sensor read failed
[  463.895306][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.903276][   T44] gspca_stk1135: Sensor read failed
[  463.908187][T18648] netlink: 'syz.1.2694': attribute type 10 has an invalid length.
[  463.909566][   T44] gspca_stk1135: Detected sensor type unknown (0x0)
[  463.923419][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.929899][   T44] gspca_stk1135: Sensor read failed
[  463.935168][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.941892][   T44] gspca_stk1135: Sensor read failed
[  463.947140][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.954799][   T44] gspca_stk1135: Sensor write failed
[  463.965815][   T44] gspca_stk1135: serial bus timeout: status=0x00
[  463.972369][   T44] gspca_stk1135: Sensor write failed
[  463.978680][   T44] stk1135 4-1:0.48: probe with driver stk1135 failed with error -71
[  463.999281][   T44] usb 4-1: USB disconnect, device number 5
[  464.297566][ T5914] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  464.462458][ T5914] usb 2-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 69, changing to 10
[  464.485541][ T5914] usb 2-1: config 1 interface 0 altsetting 62 endpoint 0x2 has an invalid bInterval 93, changing to 10
[  464.507598][ T5914] usb 2-1: config 1 interface 0 has no altsetting 0
[  464.563746][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  464.584059][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.608409][ T5914] usb 2-1: Product: �
[  464.612636][ T5914] usb 2-1: Manufacturer: 〉
[  464.625284][ T5914] usb 2-1: SerialNumber: 방ᨨ઄��㈵㰃虫⤤뵾렙昘ᆪ攢쬂ᜉ尗�⅙�쵅�趡䴅覑齨徚骳﫦�켼��뭦蕙딓ⵢ꺟씷땨鄜Γﴮ촼�훋亷ｔ쫂�䚹��▧슧扚氨槟
[  464.674359][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'.
[  464.921307][T18699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.147373][ T5933] usb 1-1: new low-speed USB device number 107 using dummy_hcd
[  465.187381][   T44] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  465.309471][ T5933] usb 1-1: Invalid ep0 maxpacket: 64
[  465.367364][   T44] usb 3-1: Using ep0 maxpacket: 8
[  465.374775][   T44] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  465.392102][   T44] usb 3-1: config 6 has no interface number 0
[  465.401487][   T44] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  465.412706][   T44] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D
[  465.425942][   T44] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  465.447481][ T5933] usb 1-1: new low-speed USB device number 108 using dummy_hcd
[  465.459445][   T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  465.473734][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.488536][   T44] usb 3-1: Product: syz
[  465.494908][   T44] usb 3-1: Manufacturer: syz
[  465.502187][   T44] usb 3-1: SerialNumber: syz
[  465.515886][   T44] hso 3-1:6.2: Failed to find INT IN ep
[  465.627357][ T5933] usb 1-1: Invalid ep0 maxpacket: 64
[  465.633269][ T5933] usb usb1-port1: attempt power cycle
[  465.727378][ T5855] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  465.880448][ T5855] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  465.888984][ T5855] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  465.899084][ T5855] usb 4-1: config 0 has no interface number 0
[  465.905262][ T5855] usb 4-1: config 0 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  465.926100][ T5855] usb 4-1: string descriptor 0 read error: -22
[  465.932761][ T5855] usb 4-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 6.1d
[  465.943057][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.955406][ T5855] usb 4-1: config 0 descriptor??
[  465.977462][ T5933] usb 1-1: new low-speed USB device number 109 using dummy_hcd
[  465.998258][ T5933] usb 1-1: Invalid ep0 maxpacket: 64
[  466.128458][ T5933] usb 1-1: new low-speed USB device number 110 using dummy_hcd
[  466.148401][ T5933] usb 1-1: Invalid ep0 maxpacket: 64
[  466.154581][ T5933] usb usb1-port1: unable to enumerate USB device
[  466.168678][ T5933] usb 4-1: USB disconnect, device number 6
[  466.402708][   T44] usb 3-1: USB disconnect, device number 126
[  467.032790][ T5914] usbhid 2-1:1.0: can't add hid device: -71
[  467.043717][ T5914] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  467.071009][ T5914] usb 2-1: USB disconnect, device number 112
[  467.137731][   T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  467.183323][T18771] lo speed is unknown, defaulting to 1000
[  467.307034][   T44] usb 4-1: device descriptor read/64, error -71
[  467.569209][   T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  467.707325][   T44] usb 4-1: device descriptor read/64, error -71
[  467.827779][   T44] usb usb4-port1: attempt power cycle
[  468.069556][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'.
[  468.074388][T18840] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.197563][   T44] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  468.217495][   T24] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  468.226173][   T44] usb 4-1: device descriptor read/8, error -71
[  468.367788][   T24] usb 3-1: device descriptor read/64, error -71
[  468.367942][ T5855] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  468.477613][   T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  468.498725][   T44] usb 4-1: device descriptor read/8, error -71
[  468.532283][ T5855] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  468.541736][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.550917][ T5855] usb 1-1: Product: syz
[  468.555117][ T5855] usb 1-1: Manufacturer: syz
[  468.559984][ T5855] usb 1-1: SerialNumber: syz
[  468.567390][  T980] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[  468.570431][ T5855] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  468.604509][ T5914] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  468.609124][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  468.625901][   T44] usb usb4-port1: unable to enumerate USB device
[  468.732902][  T980] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  468.744258][  T980] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  468.760296][  T980] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  468.770590][   T24] usb 3-1: device descriptor read/64, error -71
[  468.777141][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.785450][  T980] usb 2-1: Product: syz
[  468.790243][  T980] usb 2-1: Manufacturer: syz
[  468.795038][  T980] usb 2-1: SerialNumber: syz
[  468.877755][   T24] usb usb3-port1: attempt power cycle
[  469.006520][T18851] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  469.023668][T18852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.037153][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.040060][T18852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.054072][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.069250][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.081585][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.114494][ T5870] usb 1-1: USB disconnect, device number 111
[  469.156535][  T980] cdc_ncm 2-1:1.0: bind() failure
[  469.177774][  T980] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  469.186778][  T980] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  469.196511][  T980] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  469.216702][  T980] usb 2-1: USB disconnect, device number 113
[  469.222946][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  469.261734][   T24] usb 3-1: device descriptor read/8, error -71
[  469.517446][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  469.538802][   T24] usb 3-1: device descriptor read/8, error -71
[  469.647754][   T24] usb usb3-port1: unable to enumerate USB device
[  469.667349][  T980] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  469.667416][ T5914] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  469.686108][ T5914] ath9k_htc: Failed to initialize the device
[  469.695845][ T5870] usb 1-1: ath9k_htc: USB layer deinitialized
[  469.830200][  T980] usb 2-1: not running at top speed; connect to a high speed hub
[  469.841417][  T980] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  469.850492][  T980] usb 2-1: config 0 has no interface number 0
[  469.856822][  T980] usb 2-1: config 0 interface 84 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  469.871164][  T980] usb 2-1: config 0 interface 84 altsetting 15 has a duplicate endpoint with address 0x5, skipping
[  469.883712][  T980] usb 2-1: config 0 interface 84 altsetting 15 has a duplicate endpoint with address 0xA, skipping
[  469.901123][  T980] usb 2-1: config 0 interface 84 altsetting 15 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  469.938852][  T980] usb 2-1: config 0 interface 84 altsetting 15 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  469.952189][  T980] usb 2-1: config 0 interface 84 has no altsetting 0
[  469.970861][  T980] usb 2-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=c8.82
[  469.981176][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.989727][  T980] usb 2-1: Product: 좇
[  469.993951][  T980] usb 2-1: Manufacturer: 
[  470.000839][  T980] usb 2-1: SerialNumber: syz
[  470.009456][  T980] usb 2-1: config 0 descriptor??
[  470.233442][  T980] pl2303 2-1:0.84: required endpoints missing
[  470.247763][  T980] usb 2-1: USB disconnect, device number 114
[  470.288313][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  470.450476][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.461923][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.471921][ T5914] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  470.482201][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.492899][ T5914] usb 4-1: config 0 descriptor??
[  470.917066][ T5914] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  470.935265][ T5914] cp2112 0003:10C4:EA90.0018: item 0 0 0 9 parsing failed
[  470.959179][ T5914] cp2112 0003:10C4:EA90.0018: parse failed
[  470.974035][ T5914] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -22
[  471.115956][ T5914] usb 4-1: USB disconnect, device number 11
[  471.196976][T18962] tipc: Started in network mode
[  471.202261][T18962] tipc: Node identity ac14140f, cluster identity 4711
[  471.210748][T18962] tipc: New replicast peer: 255.255.255.255
[  471.223669][T18962] tipc: Enabled bearer <udp:syz2>, priority 10
[  471.467069][T18973] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  471.485184][T18973] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2744'.
[  471.558454][T18980] xt_l2tp: invalid flags combination: 8
[  471.630613][T18985] FAULT_INJECTION: forcing a failure.
[  471.630613][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.653034][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.1.2747 Not tainted syzkaller #0 PREEMPT(full) 
[  471.653064][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.653077][T18985] Call Trace:
[  471.653086][T18985]  <TASK>
[  471.653096][T18985]  dump_stack_lvl+0x189/0x250
[  471.653123][T18985]  ? __pfx____ratelimit+0x10/0x10
[  471.653155][T18985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.653176][T18985]  ? __pfx__printk+0x10/0x10
[  471.653206][T18985]  ? __might_fault+0xb0/0x130
[  471.653242][T18985]  should_fail_ex+0x414/0x560
[  471.653273][T18985]  _copy_from_user+0x2d/0xb0
[  471.653294][T18985]  ___sys_sendmsg+0x158/0x2a0
[  471.653321][T18985]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.653387][T18985]  ? __fget_files+0x2a/0x420
[  471.653413][T18985]  ? __fget_files+0x3a0/0x420
[  471.653453][T18985]  __x64_sys_sendmsg+0x19b/0x260
[  471.653479][T18985]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  471.653514][T18985]  ? __pfx_ksys_write+0x10/0x10
[  471.653544][T18985]  ? do_syscall_64+0xbe/0xfa0
[  471.653568][T18985]  do_syscall_64+0xfa/0xfa0
[  471.653586][T18985]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.653606][T18985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.653627][T18985]  ? clear_bhb_loop+0x60/0xb0
[  471.653652][T18985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.653672][T18985] RIP: 0033:0x7fa181b8ebe9
[  471.653693][T18985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.653711][T18985] RSP: 002b:00007fa182ab8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.653735][T18985] RAX: ffffffffffffffda RBX: 00007fa181dc5fa0 RCX: 00007fa181b8ebe9
[  471.653751][T18985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  471.653764][T18985] RBP: 00007fa182ab8090 R08: 0000000000000000 R09: 0000000000000000
[  471.653777][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.653790][T18985] R13: 00007fa181dc6038 R14: 00007fa181dc5fa0 R15: 00007fffe2ff2998
[  471.653826][T18985]  </TASK>
[  471.655557][T18982] program syz.2.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.017585][   T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  472.203822][   T24] usb 2-1: Using ep0 maxpacket: 32
[  472.217896][   T24] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  472.246469][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  472.266199][   T24] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40
[  472.278004][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.307837][   T24] usb 2-1: Product: П
[  472.313311][   T24] usb 2-1: Manufacturer: ꌯ풾깛䚯䮇�빢谂黩♰ꅇ泠ೢ哢�峟�옡
[  472.327470][    T9] tipc: Node number set to 2886997007
[  472.348969][   T24] usb 2-1: SerialNumber: 㘄
[  472.584194][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.600920][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.696306][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  472.712590][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  472.752765][   T24] usb 2-1: USB disconnect, device number 115
[  472.814514][T19034] xt_l2tp: invalid flags combination: 8
[  472.901141][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  472.907459][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  472.911309][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  472.926417][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.936934][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.948297][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.999905][T19037] lo speed is unknown, defaulting to 1000
[  473.068032][    T9] usb 3-1: Using ep0 maxpacket: 8
[  473.092150][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  473.098332][ T1167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.112287][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.112328][    T9] usb 3-1: Product: syz
[  473.112345][    T9] usb 3-1: Manufacturer: syz
[  473.112362][    T9] usb 3-1: SerialNumber: syz
[  473.129100][    T9] usb 3-1: config 0 descriptor??
[  473.150194][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  473.267119][ T1167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.346328][T19018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.373904][T19018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.412330][ T1167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.557535][   T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  473.603459][ T1167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.646019][T19037] chnl_net:caif_netlink_parms(): no params data found
[  473.682646][T19169] netlink: 'syz.0.2763': attribute type 2 has an invalid length.
[  473.691831][T19169] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2763'.
[  473.712057][   T24] usb 2-1: Using ep0 maxpacket: 8
[  473.722212][   T24] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  473.737292][   T24] usb 2-1: config 0 has no interface number 0
[  473.748449][   T24] usb 2-1: config 0 interface 49 has no altsetting 0
[  473.766928][   T24] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=79.63
[  473.793422][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.803591][   T24] usb 2-1: Product: syz
[  473.813520][T19091] ALSA: mixer_oss: invalid OSS volume '^'
[  473.823958][   T24] usb 2-1: Manufacturer: syz
[  473.832035][   T24] usb 2-1: SerialNumber: syz
[  473.845598][T19185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.848541][   T24] usb 2-1: config 0 descriptor??
[  473.866365][T19195] No control pipe specified
[  473.869874][T19185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.984043][    T9] gspca_sonixj: reg_r err -71
[  473.989353][    T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  474.000723][    T9] usb 3-1: USB disconnect, device number 5
[  474.009361][T19224] xt_l2tp: invalid flags combination: 8
[  474.023786][T19037] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.047106][T19037] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.055978][T19037] bridge_slave_0: entered allmulticast mode
[  474.066815][T19037] bridge_slave_0: entered promiscuous mode
[  474.096684][   T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  474.113503][T19037] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.124983][   T24] gspca_m5602: Failed to find a sensor
[  474.126130][T19037] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.143129][T19037] bridge_slave_1: entered allmulticast mode
[  474.148464][   T24] ALi m5602 2-1:0.49: ALi m5602 webcam failed
[  474.153189][T19037] bridge_slave_1: entered promiscuous mode
[  474.168011][   T24] usb 2-1: USB disconnect, device number 116
[  474.333785][T19037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.349152][T19037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.464547][ T1167] bridge_slave_1: left allmulticast mode
[  474.479549][ T1167] bridge_slave_1: left promiscuous mode
[  474.485922][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.506815][ T1167] bridge_slave_0: left allmulticast mode
[  474.525534][ T1167] bridge_slave_0: left promiscuous mode
[  474.536657][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.032015][ T5183] Bluetooth: hci3: command tx timeout
[  475.204470][T19349] xt_l2tp: invalid flags combination: 8
[  475.396402][  T980] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  475.561243][  T980] usb 3-1: Using ep0 maxpacket: 8
[  475.594348][ T5914] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  475.599179][  T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  475.612183][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.620654][  T980] usb 3-1: Product: syz
[  475.625110][  T980] usb 3-1: Manufacturer: syz
[  475.634977][  T980] usb 3-1: SerialNumber: syz
[  475.654758][  T980] usb 3-1: config 0 descriptor??
[  475.683065][  T980] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  475.716884][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.732215][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  475.743125][ T1167] bond0 (unregistering): Released all slaves
[  475.751240][ T5914] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  475.766210][ T5914] usb 2-1: config 0 has no interface number 0
[  475.767907][T19037] team0: Port device team_slave_0 added
[  475.785396][ T5914] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  475.795896][ T5914] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  475.821239][ T5914] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  475.824925][T19037] team0: Port device team_slave_1 added
[  475.834434][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.846267][ T5914] usb 2-1: Product: syz
[  475.851038][ T5914] usb 2-1: Manufacturer: syz
[  475.857932][ T5914] usb 2-1: SerialNumber: syz
[  475.882625][  T980] gspca_sonixj: reg_w1 err -71
[  475.889329][  T980] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  475.898967][ T5914] usb 2-1: config 0 descriptor??
[  475.904920][T19355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  475.950174][  T980] usb 3-1: USB disconnect, device number 6
[  475.971520][ T5914] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  476.031407][ T5914] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  476.127565][T19037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.141498][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.153480][T19355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.180113][T19037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.188003][T19355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.212369][T19037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.219666][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.230644][T19405] xt_l2tp: invalid flags combination: 8
[  476.246480][T19037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.477885][T19355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.503099][T19355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.540478][  T980] usb 2-1: USB disconnect, device number 117
[  476.579493][  T980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  476.631982][  T980] cyberjack 2-1:0.69: device disconnected
[  476.688773][T19037] hsr_slave_0: entered promiscuous mode
[  476.700350][T19037] hsr_slave_1: entered promiscuous mode
[  476.726332][T19037] debugfs: 'hsr0' already exists in 'hsr'
[  476.746089][T19037] Cannot create hsr debugfs directory
[  476.825033][ T1167] hsr_slave_0: left promiscuous mode
[  476.849706][ T1167] hsr_slave_1: left promiscuous mode
[  476.856049][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.874094][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.895195][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.913280][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.955395][ T1167] veth1_macvtap: left promiscuous mode
[  476.966621][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2783'.
[  476.976751][ T1167] veth0_macvtap: left promiscuous mode
[  476.983716][ T1167] veth1_vlan: left promiscuous mode
[  476.989381][ T1167] veth0_vlan: left promiscuous mode
[  477.107755][ T5183] Bluetooth: hci3: command tx timeout
[  477.865454][ T1167] team0 (unregistering): Port device team_slave_1 removed
[  477.946893][ T1167] team0 (unregistering): Port device team_slave_0 removed
[  477.954328][T19488] xt_l2tp: invalid flags combination: 8
[  478.050760][T19491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.063936][T19491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.292595][  T980] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  478.439007][  T980] usb 2-1: device descriptor read/64, error -71
[  478.679155][ T5855] lo speed is unknown, defaulting to 1000
[  478.698752][  T980] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  478.702445][ T5855] infiniband syz0: ib_query_port failed (-19)
[  478.857467][  T980] usb 2-1: device descriptor read/64, error -71
[  478.989230][  T980] usb usb2-port1: attempt power cycle
[  479.047340][   T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  479.187438][ T5183] Bluetooth: hci3: command tx timeout
[  479.229986][   T24] usb 3-1: config index 0 descriptor too short (expected 35872, got 36)
[  479.260506][   T24] usb 3-1: config 252 has too many interfaces: 207, using maximum allowed: 32
[  479.289855][   T24] usb 3-1: config 252 has an invalid descriptor of length 126, skipping remainder of the config
[  479.308068][   T24] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 207
[  479.328374][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice=ed.08
[  479.354379][   T24] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0
[  479.363048][  T980] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  479.371428][   T24] usb 3-1: Manufacturer: syz
[  479.399814][  T980] usb 2-1: device descriptor read/8, error -71
[  479.623945][   T24] usb 3-1: USB disconnect, device number 7
[  479.658669][  T980] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  479.698297][  T980] usb 2-1: device descriptor read/8, error -71
[  479.770823][T19037] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  479.789943][T19037] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  479.806213][T19037] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  479.818039][  T980] usb usb2-port1: unable to enumerate USB device
[  479.828998][T19037] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  479.965405][T19037] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.001078][T19037] 8021q: adding VLAN 0 to HW filter on device team0
[  480.016844][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.024337][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.052655][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.060121][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.557158][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2797'.
[  480.626186][T19037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.728256][ T5855] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  480.775121][T19037] veth0_vlan: entered promiscuous mode
[  480.793787][T19037] veth1_vlan: entered promiscuous mode
[  480.861767][T19037] veth0_macvtap: entered promiscuous mode
[  480.887633][T19037] veth1_macvtap: entered promiscuous mode
[  480.897565][ T5855] usb 3-1: Using ep0 maxpacket: 8
[  480.907391][ T5855] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  480.935657][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  480.964133][ T5855] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  480.975963][T19037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.984441][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.995412][ T5855] usb 3-1: Product: syz
[  481.013913][T19037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.021895][ T5855] usb 3-1: Manufacturer: syz
[  481.028505][ T5855] usb 3-1: SerialNumber: syz
[  481.052584][ T5855] usb 3-1: config 0 descriptor??
[  481.065998][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.073904][ T5855] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  481.104749][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.135147][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.170751][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.267645][ T5183] Bluetooth: hci3: command tx timeout
[  481.471608][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.503217][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.508047][T19675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.565183][T19675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.613818][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.659983][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.744631][ T5855] usb 3-1: USB disconnect, device number 8
[  481.948378][T19714] xt_l2tp: invalid flags combination: 8
[  482.031205][T19716] syzkaller1: entered promiscuous mode
[  482.057306][T19716] syzkaller1: entered allmulticast mode
[  482.095467][T19725] batadv_slave_1: entered promiscuous mode
[  482.388169][T19713] batadv_slave_1: left promiscuous mode
[  483.491377][T19794] xt_l2tp: invalid flags combination: 8
[  483.647837][T19805] binder: 19790:19805 ioctl c0306201 200000000080 returned -14
[  484.003403][T19820] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2826'.
[  485.490478][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  485.617865][   T44] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  485.681183][   T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  485.692536][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  485.723681][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  485.736516][   T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  485.746452][   T24] usb 3-1: Product: syz
[  485.751994][   T24] usb 3-1: Manufacturer: syz
[  485.765429][   T24] usb 3-1: SerialNumber: syz
[  485.784825][   T24] usb 3-1: config 0 descriptor??
[  485.807768][   T24] usb 3-1: selecting invalid altsetting 0
[  485.820083][   T44] usb 4-1: unable to get BOS descriptor or descriptor too short
[  485.842315][   T44] usb 4-1: not running at top speed; connect to a high speed hub
[  485.896807][   T44] usb 4-1: config 4 has an invalid interface number: 32 but max is 0
[  485.909514][   T44] usb 4-1: config 4 has no interface number 0
[  485.937350][   T44] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  485.946637][T19914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2843'.
[  485.950523][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.976899][   T44] usb 4-1: Product: syz
[  485.985645][   T44] usb 4-1: Manufacturer: syz
[  485.991506][   T44] usb 4-1: SerialNumber: syz
[  486.107134][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.116972][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.142732][ T5914] usb 3-1: USB disconnect, device number 9
[  486.290943][   T44] usb 4-1: Found UVC 0.02 device syz (17dc:0202)
[  486.304536][   T44] usb 4-1: No valid video chain found.
[  486.324852][   T44] usb 4-1: USB disconnect, device number 12
[  486.902344][T19950] xt_l2tp: invalid flags combination: 8
[  487.194178][T19969] xt_l2tp: invalid flags combination: 8
[  488.733448][T19985] xt_l2tp: invalid flags combination: 8
[  489.003905][  T980] IPVS: starting estimator thread 0...
[  489.012415][T20006] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  489.022548][T20009] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  489.110811][T20010] IPVS: using max 22 ests per chain, 52800 per kthread
[  489.157102][T20020] netlink: 'syz.0.2866': attribute type 1 has an invalid length.
[  489.165462][  T980] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  489.181669][T20020] xt_l2tp: invalid flags combination: 8
[  489.267467][ T5914] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  489.327478][  T980] usb 3-1: device descriptor read/64, error -71
[  489.354893][T20033] xt_l2tp: invalid flags combination: 8
[  489.402204][T20035] 9pnet: p9_errstr2errno: server reported unknown error Ü°K‰<‰
[  489.427695][ T5914] usb 2-1: Using ep0 maxpacket: 8
[  489.445290][ T5914] usb 2-1: config 0 has an invalid interface number: 56 but max is 0
[  489.454899][ T5914] usb 2-1: config 0 has no interface number 0
[  489.469738][ T5914] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  489.484434][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.492994][ T5914] usb 2-1: Product: syz
[  489.501323][ T5914] usb 2-1: Manufacturer: syz
[  489.505976][ T5914] usb 2-1: SerialNumber: syz
[  489.521914][ T5914] usb 2-1: config 0 descriptor??
[  489.535059][ T5914] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  489.545864][ T5914] pctv452e: pctv452e_power_ctrl: 1
[  489.545864][ T5914] 
[  489.554599][ T5914] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  489.554599][ T5914] 
[  489.565236][ T5914] dvb-usb: bulk message failed: -22 (5/0)
[  489.578480][  T980] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  489.582493][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  489.600631][ T5914] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  489.610146][ T5914] usb 2-1: media controller created
[  489.616231][ T5914] dvb-usb: bulk message failed: -22 (8/0)
[  489.628555][ T5914] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  489.637090][ T5914] dvb-usb: MAC address reading failed.
[  489.676789][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.707455][  T980] usb 3-1: device descriptor read/64, error -71
[  489.760650][ T5914] DVB: Unable to find symbol stb0899_attach()
[  489.766942][ T5914] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  489.829571][  T980] usb usb3-port1: attempt power cycle
[  489.859092][ T5914] rc_core: IR keymap rc-tt-1500 not found
[  489.865001][ T5914] Registered IR keymap rc-empty
[  489.872408][ T5914] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  489.888266][ T5914] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input46
[  489.905918][ T5914] dvb-usb: schedule remote query interval to 100 msecs.
[  489.914958][ T5914] pctv452e: pctv452e_power_ctrl: 0
[  489.914958][ T5914] 
[  489.923313][ T5914] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  490.020001][ T5914] dvb-usb: bulk message failed: -22 (4/0)
[  490.047371][ T5914] dvb-usb: error -22 while querying for an remote control event.
[  490.157341][ T5914] dvb-usb: bulk message failed: -22 (4/0)
[  490.163346][ T5914] dvb-usb: error -22 while querying for an remote control event.
[  490.193051][  T980] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  490.239939][  T980] usb 3-1: device descriptor read/8, error -71
[  490.289297][ T5914] dvb-usb: bulk message failed: -22 (4/0)
[  490.312741][ T5914] dvb-usb: error -22 while querying for an remote control event.
[  490.348086][ T5914] usb 2-1: USB disconnect, device number 122
[  490.466359][T20072] netlink: 'syz.0.2876': attribute type 29 has an invalid length.
[  490.500077][  T980] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  490.548424][  T980] usb 3-1: device descriptor read/8, error -71
[  490.662801][ T5914] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  490.681219][  T980] usb usb3-port1: unable to enumerate USB device
[  491.277798][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  491.407336][    T9] usb 2-1: device descriptor read/64, error -71
[  491.557728][  T980] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  491.647462][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  491.730264][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.740288][  T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  491.753588][  T980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  491.763765][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.775877][  T980] usb 4-1: config 0 descriptor??
[  491.787386][    T9] usb 2-1: device descriptor read/64, error -71
[  491.898616][    T9] usb usb2-port1: attempt power cycle
[  492.196923][  T980] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0
[  492.212951][  T980] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0
[  492.220358][  T980] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0
[  492.231395][  T980] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0
[  492.240006][    T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  492.250908][  T980] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0
[  492.266945][  T980] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  492.278869][    T9] usb 2-1: device descriptor read/8, error -71
[  492.317566][ T5914] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  492.479919][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.491140][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.503368][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  492.513855][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.522105][    T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  492.542758][ T5914] usb 3-1: config 0 descriptor??
[  492.551370][    T9] usb 2-1: device descriptor read/8, error -71
[  492.667824][    T9] usb usb2-port1: unable to enumerate USB device
[  492.763251][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.774090][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.003769][  T980] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device
[  493.025986][  T980] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse
[  493.032492][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.046220][  T980] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -71
[  493.050257][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.062381][  T980] usb 4-1: USB disconnect, device number 13
[  493.085931][ T5878] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  493.184864][T20180] sctp: [Deprecated]: syz.0.2897 (pid 20180) Use of int in max_burst socket option.
[  493.184864][T20180] Use struct sctp_assoc_value instead
[  493.307639][ T5914] logitech 0003:046D:C294.001A: unknown main item tag 0x0
[  493.315918][ T5914] logitech 0003:046D:C294.001A: unknown main item tag 0x0
[  493.323562][ T5914] logitech 0003:046D:C294.001A: unknown main item tag 0x0
[  493.331092][ T5914] logitech 0003:046D:C294.001A: unknown main item tag 0x0
[  493.339367][ T5914] logitech 0003:046D:C294.001A: unknown main item tag 0x0
[  493.351360][ T5914] logitech 0003:046D:C294.001A: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0
[  493.363398][ T5914] logitech 0003:046D:C294.001A: no inputs found
[  493.506368][ T5914] usb 3-1: USB disconnect, device number 14
[  493.792551][T20204] xt_l2tp: invalid flags combination: 8
[  493.817484][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  493.844313][T20206] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2901'.
[  493.858296][   T30] audit: type=1800 audit(1757199455.402:46): pid=20206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2901" name="bus" dev="tmpfs" ino=2538 res=0 errno=0
[  493.977499][    T9] usb 4-1: Using ep0 maxpacket: 16
[  493.992392][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  494.004705][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  494.022136][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  494.094405][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.106766][    T9] usb 4-1: Product: syz
[  494.112106][    T9] usb 4-1: Manufacturer: syz
[  494.116948][    T9] usb 4-1: SerialNumber: syz
[  494.148067][    T9] usb 4-1: config 0 descriptor??
[  494.158657][    T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  494.169266][    T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  494.317956][T20227] overlayfs: unescaped trailing colons in lowerdir mount option.
[  494.392090][ T5878] Bluetooth: hci2: command 0x0406 tx timeout
[  494.454486][T20237] netlink: 'syz.0.2909': attribute type 83 has an invalid length.
[  494.477589][ T5933] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  494.567323][ T5914] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  494.629966][ T5933] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  494.640751][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.658677][ T5933] usb 2-1: config 0 descriptor??
[  494.684129][ T5933] gspca_main: spca508-2.14.0 probing 8086:0110
[  494.720914][ T5914] usb 3-1: not running at top speed; connect to a high speed hub
[  494.735658][ T5914] usb 3-1: config 8 has an invalid interface number: 226 but max is 3
[  494.745024][ T5914] usb 3-1: config 8 has an invalid interface number: 154 but max is 3
[  494.758350][ T5914] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  494.770028][    T9] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  494.777667][ T5914] usb 3-1: config 8 has an invalid interface number: 239 but max is 3
[  494.786143][    T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  494.795665][ T5914] usb 3-1: config 8 has an invalid interface number: 53 but max is 3
[  494.806002][ T5914] usb 3-1: config 8 has an invalid interface number: 184 but max is 3
[  494.815904][ T5914] usb 3-1: config 8 has 5 interfaces, different from the descriptor's value: 4
[  494.825804][ T5914] usb 3-1: config 8 has no interface number 0
[  494.832562][ T5914] usb 3-1: config 8 has no interface number 1
[  494.839261][ T5914] usb 3-1: config 8 has no interface number 2
[  494.845435][ T5914] usb 3-1: config 8 has no interface number 3
[  494.852133][ T5914] usb 3-1: config 8 has no interface number 4
[  494.859076][ T5914] usb 3-1: config 8 interface 226 altsetting 106 has an invalid descriptor for endpoint zero, skipping
[  494.871366][ T5914] usb 3-1: config 8 interface 226 altsetting 106 has an invalid descriptor for endpoint zero, skipping
[  494.883054][ T5933] gspca_spca508: reg_read err -32
[  494.888793][ T5914] usb 3-1: config 8 interface 226 altsetting 106 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  494.903447][ T5933] gspca_spca508: reg_read err -32
[  494.909039][ T5914] usb 3-1: config 8 interface 154 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  494.924165][ T5933] gspca_spca508: reg_read err -32
[  494.932756][ T5914] usb 3-1: config 8 interface 154 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  494.950534][ T5914] usb 3-1: config 8 interface 154 altsetting 0 endpoint 0xE has an invalid bInterval 32, changing to 4
[  494.963754][ T5914] usb 3-1: config 8 interface 154 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  494.975943][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'.
[  494.979513][ T5914] usb 3-1: config 8 interface 154 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  494.996116][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  494.998329][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'.
[  495.010138][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  495.028292][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  495.039572][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  495.051410][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  495.062777][ T5914] usb 3-1: config 8 interface 239 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  495.074001][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  495.085378][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0x1, skipping
[  495.096912][ T5914] usb 3-1: config 8 interface 239 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[  495.109633][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0xC, skipping
[  495.120918][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0xE, skipping
[  495.132155][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has an invalid descriptor for endpoint zero, skipping
[  495.143325][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0x7, skipping
[  495.154588][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has an invalid descriptor for endpoint zero, skipping
[  495.165947][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0x5, skipping
[  495.177341][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0xD, skipping
[  495.188649][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0x6, skipping
[  495.199662][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0x7, skipping
[  495.211615][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has a duplicate endpoint with address 0x8, skipping
[  495.222516][ T5914] usb 3-1: config 8 interface 53 altsetting 121 has 12 endpoint descriptors, different from the interface descriptor's value: 15
[  495.236221][ T5914] usb 3-1: too many endpoints for config 8 interface 184 altsetting 199: 179, using maximum allowed: 30
[  495.247722][ T5914] usb 3-1: config 8 interface 184 altsetting 199 has a duplicate endpoint with address 0xC, skipping
[  495.258994][ T5914] usb 3-1: config 8 interface 184 altsetting 199 has a duplicate endpoint with address 0xB, skipping
[  495.270133][ T5914] usb 3-1: config 8 interface 184 altsetting 199 has a duplicate endpoint with address 0x1, skipping
[  495.281371][ T5914] usb 3-1: config 8 interface 184 altsetting 199 has 3 endpoint descriptors, different from the interface descriptor's value: 179
[  495.295163][ T5914] usb 3-1: config 8 interface 226 has no altsetting 0
[  495.302260][ T5914] usb 3-1: config 8 interface 239 has no altsetting 0
[  495.309198][ T5914] usb 3-1: config 8 interface 53 has no altsetting 0
[  495.316786][ T5914] usb 3-1: config 8 interface 184 has no altsetting 0
[  495.330998][ T5914] usb 3-1: Dual-Role OTG device on HNP port
[  495.337706][ T5914] usb 3-1: New USB device found, idVendor=1822, idProduct=3201, bcdDevice=e5.31
[  495.346883][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.355387][ T5933] gspca_spca508: reg write: error -71
[  495.361302][ T5933] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  495.371994][ T5914] usb 3-1: Product: �
[  495.376224][ T5914] usb 3-1: Manufacturer: ��둿⹜轑瀸㫔辎㎓�톘�ꘇ�⚿鼲織㙱᳋㠙藽�ᦟ밷긟�뱔亩꟒ᾦଙוֹӚ⋼뙖磼⼼☢㧑砊뱢ꇛ茣ꞷ欽
[  495.398049][ T5933] usb 2-1: USB disconnect, device number 127
[  495.404899][ T5914] usb 3-1: SerialNumber: 䀊
[  495.436611][T20229] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  495.436647][    T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  495.661531][ T5914] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in cold state, will try to load a firmware
[  495.676510][ T5914] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2
[  495.686747][ T5914] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw
[  495.962289][T20279] xt_l2tp: invalid flags combination: 8
[  496.118560][T20289] overlay: ./file1 is not a directory
[  496.188008][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.304704][T20299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.346438][T20300] sit0: entered promiscuous mode
[  496.357729][T20300] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  496.365613][T20300] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2925'.
[  496.449093][ T5855] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  496.462523][T20299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.555812][T20299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.598985][ T5855] usb 2-1: device descriptor read/64, error -71
[  496.630301][T20299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.761421][   T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.786002][   T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.813063][   T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.833577][   T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.857424][ T5855] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  496.954464][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  496.962010][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  496.975006][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  496.983274][    T9] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  497.017305][ T5855] usb 2-1: device descriptor read/64, error -71
[  497.147657][ T5855] usb usb2-port1: attempt power cycle
[  497.226966][T20340] netlink: 'syz.0.2931': attribute type 4 has an invalid length.
[  497.255734][    T9] usb 4-1: USB disconnect, device number 14
[  497.527943][ T5855] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  497.561161][ T5855] usb 2-1: device descriptor read/8, error -71
[  497.595198][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.609376][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.619455][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.629351][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.639335][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.649902][T20373] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2938'.
[  497.807389][ T5855] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  497.827543][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  497.838003][ T5855] usb 2-1: device descriptor read/8, error -71
[  497.933684][T20388] netlink: 'syz.0.2943': attribute type 1 has an invalid length.
[  497.958245][ T5855] usb usb2-port1: unable to enumerate USB device
[  497.989550][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  498.003545][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.027318][    T9] pwc: Logitech ViewPort AV 100 webcam detected.
[  498.094145][T20396] netlink: 'syz.0.2946': attribute type 2 has an invalid length.
[  498.238255][    T9] pwc: Failed to set LED on/off time (-71)
[  498.246765][    T9] pwc: send_video_command error -71
[  498.252912][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  498.261938][    T9] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71
[  498.278429][    T9] usb 4-1: USB disconnect, device number 15
[  498.931727][T20416] __nla_validate_parse: 29 callbacks suppressed
[  498.931750][T20416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2949'.
[  499.177590][T20425] tipc: Started in network mode
[  499.182639][T20425] tipc: Node identity ee78bb2c38a2, cluster identity 4711
[  499.208957][T20425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.224455][T20425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2952'.
[  499.567461][    T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  499.731324][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  499.739494][    T9] usb 2-1: config 0 has no interface number 0
[  499.745609][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  499.757021][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  499.768314][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  499.777490][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.788019][    T9] usb 2-1: config 0 descriptor??
[  499.794127][T20442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  499.807847][    T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  499.960718][T20435] tipc: Resetting bearer <eth:syzkaller0>
[  500.063073][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.086208][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.251771][  T980] tipc: Node number set to 3604658988
[  502.420446][   T44] usb 2-1: USB disconnect, device number 6
[  502.808779][T20435] tipc: Disabling bearer <eth:syzkaller0>
[  502.915482][T20507] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2967'.
[  502.940554][T20513] xt_l2tp: invalid flags combination: 8
[  503.324572][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  503.354613][  T980] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  503.476636][    T9] usb 4-1: config 0 has an invalid interface number: 135 but max is 0
[  503.485103][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.495818][    T9] usb 4-1: config 0 has no interface number 0
[  503.502675][    T9] usb 4-1: config 0 interface 135 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  503.504303][  T980] usb 2-1: device descriptor read/64, error -71
[  503.512907][    T9] usb 4-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  503.536609][    T9] usb 4-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00
[  503.545981][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.554080][    T9] usb 4-1: Product: syz
[  503.558523][    T9] usb 4-1: Manufacturer: syz
[  503.563144][    T9] usb 4-1: SerialNumber: syz
[  503.570273][    T9] usb 4-1: config 0 descriptor??
[  503.577814][    T9] usb-storage 4-1:0.135: USB Mass Storage device detected
[  503.589845][    T9] usb-storage 4-1:0.135: Quirks match for vid 0482 pid 0101: 8
[  503.754622][  T980] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  503.790366][    T9] usb 4-1: USB disconnect, device number 16
[  503.904136][  T980] usb 2-1: device descriptor read/64, error -71
[  504.014140][  T980] usb usb2-port1: attempt power cycle
[  504.373467][  T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  504.425456][  T980] usb 2-1: device descriptor read/8, error -71
[  504.650179][  T886] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  504.687412][  T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  504.698781][T20568] overlayfs: failed to resolve './file0': -2
[  504.714758][  T980] usb 2-1: device descriptor read/8, error -71
[  504.804997][  T886] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  504.814849][  T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.825562][  T886] usb 4-1: config 0 descriptor??
[  504.835295][  T980] usb usb2-port1: unable to enumerate USB device
[  505.086848][  T886] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  505.140238][  T886] asix 4-1:0.0: probe with driver asix failed with error -71
[  505.161873][T20588] netlink: 'syz.0.2985': attribute type 27 has an invalid length.
[  505.179736][T20588] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2985'.
[  505.199877][  T886] usb 4-1: USB disconnect, device number 17
[  505.892226][T20614] overlayfs: failed to clone lowerpath
[  506.017270][T20624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2992'.
[  506.028683][T20624] tipc: Invalid UDP bearer configuration
[  506.028754][T20624] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  506.388858][T20642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2996'.
[  506.400070][T20642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2996'.
[  506.413294][T20642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2996'.
[  506.423534][T20642] xt_l2tp: invalid flags combination: 8
[  506.921191][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  507.071052][    T9] usb 4-1: Using ep0 maxpacket: 32
[  507.078133][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  507.087825][    T9] usb 4-1: config 0 has no interface number 0
[  507.094912][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[  507.104613][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  507.113970][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.122449][    T9] usb 4-1: Product: syz
[  507.126641][    T9] usb 4-1: Manufacturer: syz
[  507.131854][    T9] usb 4-1: SerialNumber: syz
[  507.141815][    T9] usb 4-1: config 0 descriptor??
[  507.152433][    T9] smsc75xx v1.0.0
[  507.156166][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  507.189458][    T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[  507.218683][T20670] program syz.1.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  507.351977][T20657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.361805][T20657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.371491][   T44] usb 4-1: USB disconnect, device number 18
[  507.663737][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  507.675105][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  507.869234][T20697] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  508.229825][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  508.389583][    T9] usb 4-1: Using ep0 maxpacket: 16
[  508.409887][    T9] usb 4-1: config 0 has an invalid interface number: 142 but max is 0
[  508.429399][    T9] usb 4-1: config 0 has no interface number 0
[  508.441903][    T9] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  508.451457][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.469570][    T9] usb 4-1: Product: syz
[  508.473784][    T9] usb 4-1: Manufacturer: syz
[  508.478395][    T9] usb 4-1: SerialNumber: syz
[  508.502846][    T9] usb 4-1: config 0 descriptor??
[  508.715234][    T9] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40)
[  508.739422][    T9] usb 4-1: Forcing UVC version to 1.0a
[  508.744968][    T9] usb 4-1: No valid video chain found.
[  508.755431][T20703] overlayfs: missing 'lowerdir'
[  508.768954][    T9] usb 4-1: USB disconnect, device number 19
[  509.310708][T20756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.324791][T20756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.406106][T20768] xt_policy: too many policy elements
[  509.414841][T20768] netlink: 'syz.3.3029': attribute type 10 has an invalid length.
[  509.424079][T20768] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.431569][T20768] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.447365][T20768] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.454648][T20768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.462547][T20768] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.466908][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'.
[  509.469870][T20768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.489539][T20768] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  509.499902][T20769] bridge_slave_1: left allmulticast mode
[  509.505697][T20769] bridge_slave_1: left promiscuous mode
[  509.512640][T20769] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.522912][T20769] bridge_slave_0: left allmulticast mode
[  509.528760][T20769] bridge_slave_0: left promiscuous mode
[  509.534637][T20769] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.542674][   T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  509.568325][T20769] bond0: (slave bridge0): Releasing backup interface
[  509.710488][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.723554][   T44] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  509.732817][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.748716][   T44] usb 2-1: config 0 descriptor??
[  509.757114][   T44] pwc: Askey VC010 type 2 USB webcam detected.
[  509.948269][    T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  509.987579][T20756] batadv_slave_1: entered promiscuous mode
[  510.111069][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  510.131836][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.143124][    T9] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  510.154157][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.176963][    T9] usb 4-1: config 0 descriptor??
[  510.194727][   T44] pwc: recv_control_msg error -32 req 02 val 2b00
[  510.429151][T20755] batadv_slave_1: left promiscuous mode
[  510.491938][   T44] pwc: recv_control_msg error -71 req 02 val 2c00
[  510.501990][   T44] pwc: recv_control_msg error -71 req 04 val 1000
[  510.509294][   T44] pwc: recv_control_msg error -71 req 04 val 1300
[  510.516614][   T44] pwc: recv_control_msg error -71 req 04 val 1400
[  510.523776][   T44] pwc: recv_control_msg error -71 req 02 val 2000
[  510.531513][   T44] pwc: recv_control_msg error -71 req 02 val 2100
[  510.540230][   T44] pwc: recv_control_msg error -71 req 04 val 1500
[  510.547509][   T44] pwc: recv_control_msg error -71 req 02 val 2500
[  510.554573][   T44] pwc: recv_control_msg error -71 req 02 val 2400
[  510.564384][   T44] pwc: recv_control_msg error -71 req 02 val 2600
[  510.571565][   T44] pwc: recv_control_msg error -71 req 02 val 2900
[  510.579252][   T44] pwc: recv_control_msg error -71 req 02 val 2800
[  510.586239][   T44] pwc: recv_control_msg error -71 req 04 val 1100
[  510.593862][   T44] pwc: recv_control_msg error -71 req 04 val 1200
[  510.604313][   T44] pwc: Registered as video103.
[  510.619839][   T44] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47
[  510.638773][    T9] glorious 0003:258A:0036.001B: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0
[  510.656511][   T44] usb 2-1: USB disconnect, device number 11
[  510.805593][  T886] usb 4-1: USB disconnect, device number 20
[  511.349745][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  511.506965][ T5855] usb 2-1: Using ep0 maxpacket: 16
[  511.514283][ T5855] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  511.523169][ T5855] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  511.533290][ T5855] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  511.541691][ T5855] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  511.550088][ T5855] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  511.559064][ T5855] usb 2-1: config 0 has no interface number 0
[  511.565278][ T5855] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  511.576567][ T5855] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  511.587470][ T5855] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  511.598176][ T5855] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  511.611335][ T5855] usb 2-1: config 0 interface 125 has no altsetting 0
[  511.619099][ T5855] usb 2-1: config 0 interface 125 has no altsetting 2
[  511.629021][ T5855] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  511.638433][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.646693][ T5855] usb 2-1: Product: syz
[  511.650884][ T5855] usb 2-1: Manufacturer: syz
[  511.655561][ T5855] usb 2-1: SerialNumber: syz
[  511.660556][  T886] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  511.671931][ T5855] usb 2-1: config 0 descriptor??
[  511.685407][ T5855] usb 2-1: selecting invalid altsetting 2
[  511.818653][  T886] usb 4-1: Using ep0 maxpacket: 16
[  511.825936][  T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.837767][  T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.847626][  T886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  511.860855][  T886] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  511.869987][  T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.881339][  T886] usb 4-1: config 0 descriptor??
[  511.948842][T20904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.103485][T20894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.116134][T20894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.129900][T20894] tmpfs: Bad value for 'mpol'
[  512.182395][T20916] netlink: 'syz.0.3053': attribute type 12 has an invalid length.
[  512.347348][  T886] hid_parser_main: 2 callbacks suppressed
[  512.347376][  T886] shield 0003:0955:7214.001C: unknown main item tag 0x0
[  512.361672][  T886] shield 0003:0955:7214.001C: unknown main item tag 0x0
[  512.368840][  T886] shield 0003:0955:7214.001C: unknown main item tag 0x0
[  512.377536][  T886] shield 0003:0955:7214.001C: unknown main item tag 0x0
[  512.384651][  T886] shield 0003:0955:7214.001C: unknown main item tag 0x0
[  512.395417][  T886] input: HID 0955:7214 Haptics as /devices/virtual/input/input48
[  512.460925][  T886] shield 0003:0955:7214.001C: Registered Thunderstrike controller
[  512.472813][  T886] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  512.540349][T20894] random: crng reseeded on system resumption
[  512.582687][  T886] usb 4-1: USB disconnect, device number 21
[  512.588867][ T5855] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  512.615863][ T5855] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  512.630378][ T5855] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  512.653401][ T5855] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  512.784839][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'.
[  512.799968][T20951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.811059][T20951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.873869][ T5870] usb 2-1: USB disconnect, device number 12
[  512.971405][T20968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.980982][T20968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.305102][ T5870] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  513.384084][   T30] audit: type=1326 audit(1757202052.942:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.3063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7af78ebe9 code=0x0
[  513.425384][   T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  513.464746][ T5870] usb 2-1: device descriptor read/64, error -71
[  513.584907][   T44] usb 4-1: Using ep0 maxpacket: 16
[  513.592444][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.602722][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  513.613775][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  513.623772][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  513.635068][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  513.652318][   T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  513.661845][   T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  513.671147][   T44] usb 4-1: Manufacturer: syz
[  513.679250][   T44] usb 4-1: config 0 descriptor??
[  513.724809][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  513.864510][ T5870] usb 2-1: device descriptor read/64, error -71
[  513.944278][   T44] rc_core: IR keymap rc-hauppauge not found
[  513.950395][   T44] Registered IR keymap rc-empty
[  513.955785][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  513.981437][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  513.989264][ T5870] usb usb2-port1: attempt power cycle
[  514.015262][   T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  514.030958][   T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49
[  514.062162][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.084251][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.114365][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.144215][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.165571][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.184135][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.214205][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.234300][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.254222][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.284873][   T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  514.311549][   T44] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  514.335892][   T44] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  514.354020][ T5870] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  514.384819][   T44] usb 4-1: USB disconnect, device number 22
[  514.397221][ T5870] usb 2-1: device descriptor read/8, error -71
[  514.643925][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  514.684840][ T5870] usb 2-1: device descriptor read/8, error -71
[  514.794023][ T5870] usb usb2-port1: unable to enumerate USB device
[  514.863894][ T5878] Bluetooth: hci0: command 0x0406 tx timeout
[  515.183207][ T5870] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  515.343039][ T5870] usb 4-1: Using ep0 maxpacket: 8
[  515.350211][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  515.360788][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  515.372201][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  515.386933][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  515.400209][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  515.409329][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.628740][T21050] openvswitch: netlink: Message has -1 unknown bytes.
[  515.637462][ T5870] usb 4-1: GET_CAPABILITIES returned 0
[  515.644755][ T5870] usbtmc 4-1:16.0: can't read capabilities
[  515.840880][T21050] netlink: 'syz.3.3071': attribute type 4 has an invalid length.
[  515.851417][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.866975][ T5855] usb 4-1: USB disconnect, device number 23
[  516.113857][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'.
[  516.428937][T21081] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  517.321675][ T5855] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  517.481043][ T5855] usb 2-1: Using ep0 maxpacket: 32
[  517.498066][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  517.521241][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  517.550940][ T5855] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  517.573504][ T5855] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  517.594856][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  517.623796][ T5855] usb 2-1: Product: syz
[  517.628114][ T5855] usb 2-1: Manufacturer: syz
[  517.650852][ T5855] usb 2-1: SerialNumber: syz
[  517.677799][ T5855] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input51
[  517.930651][T21085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.960597][T21085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.029739][   T44] usb 2-1: USB disconnect, device number 17
[  518.061776][   T44] appletouch 2-1:1.0: input: appletouch disconnected
[  518.433073][T21151] loop6: detected capacity change from 0 to 7
[  518.445101][ T7632] Dev loop6: unable to read RDB block 7
[  518.451774][ T7632]  loop6: unable to read partition table
[  518.457635][ T7632] loop6: partition table beyond EOD, truncated
[  518.466609][T21151] Dev loop6: unable to read RDB block 7
[  518.472559][T21151]  loop6: unable to read partition table
[  518.478942][T21151] loop6: partition table beyond EOD, truncated
[  518.486589][T21151] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  518.625295][T21159] loop6: detected capacity change from 0 to 524287999
[  518.635861][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.666773][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.727513][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.744899][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.763184][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.789896][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.798106][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.812600][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.821701][ T7632] ldm_validate_partition_table(): Disk read failed.
[  518.829355][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.842887][ T7632] Buffer I/O error on dev loop6, logical block 0, async page read
[  518.863263][ T7632] Dev loop6: unable to read RDB block 0
[  518.871166][ T7632]  loop6: unable to read partition table
[  518.890994][T21159] ldm_validate_partition_table(): Disk read failed.
[  518.906503][T21159] Dev loop6: unable to read RDB block 0
[  518.924007][T21159]  loop6: unable to read partition table
[  518.945340][T21159] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  518.959256][T21166] ldm_validate_partition_table(): Disk read failed.
[  518.980566][T21166] Dev loop6: unable to read RDB block 0
[  518.989279][T21166]  loop6: unable to read partition table
[  519.000436][T21166] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  519.359303][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'.
[  519.838809][  T886] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  519.926549][T21225] netlink: 'syz.0.3101': attribute type 10 has an invalid length.
[  519.975718][T21225] bond0: (slave team0): Enslaving as an active interface with an up link
[  519.998748][  T886] usb 4-1: Using ep0 maxpacket: 8
[  520.024607][  T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.038653][ T5933] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  520.054081][  T886] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  520.065616][  T886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.087702][  T886] usb 4-1: config 0 descriptor??
[  520.216686][ T5933] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  520.238817][ T5933] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  520.259902][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  520.284030][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  520.296435][ T5933] usb 2-1: SerialNumber: syz
[  520.521301][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.542554][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.556791][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.564763][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.576088][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.583445][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.593067][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.600225][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.607306][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.614612][  T886] a4tech 0003:09DA:000A.001D: unknown main item tag 0x0
[  520.629886][  T886] a4tech 0003:09DA:000A.001D: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0
[  520.740533][ T5870] usb 2-1: USB disconnect, device number 18
[  521.557044][   T44] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  521.726954][   T44] usb 2-1: Using ep0 maxpacket: 8
[  521.734024][   T44] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  521.742892][   T44] usb 2-1: config 0 has no interface number 0
[  521.749507][   T44] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  521.758872][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.770250][   T44] usb 2-1: config 0 descriptor??
[  521.888734][   T44] viperboard 2-1:0.143: version 0.00 found at bus 002 address 019
[  521.920293][   T44] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  521.930445][   T44] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  521.980086][   T44] usb 2-1: USB disconnect, device number 19
[  522.568903][ T5933] usb 4-1: USB disconnect, device number 24
[  522.809029][T21312] 9pnet: Could not find request transport: uni™
[  522.938257][T21328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.949238][T21328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.013271][T21328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.026313][T21332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.038676][T21328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.049239][T21332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.075709][  T886] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  523.166384][ T5933] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  523.235629][  T886] usb 2-1: Using ep0 maxpacket: 32
[  523.253656][  T886] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  523.267632][  T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.277656][  T886] usb 2-1: Product: syz
[  523.282082][  T886] usb 2-1: Manufacturer: syz
[  523.290094][  T886] usb 2-1: SerialNumber: syz
[  523.299137][  T886] usb 2-1: config 0 descriptor??
[  523.320989][  T886] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  523.327540][ T5933] usb 4-1: Using ep0 maxpacket: 32
[  523.335844][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  523.351130][ T5933] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  523.361106][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.369313][ T5933] usb 4-1: Product: syz
[  523.373534][ T5933] usb 4-1: Manufacturer: syz
[  523.378297][ T5933] usb 4-1: SerialNumber: syz
[  523.386009][ T5933] usb 4-1: config 0 descriptor??
[  523.595645][   T44] usb 4-1: USB disconnect, device number 25
[  523.731201][  T886] gspca_stk1135: reg_w 0x0 err -71
[  523.738340][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.745339][  T886] gspca_stk1135: Sensor write failed
[  523.750734][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.759360][  T886] gspca_stk1135: Sensor write failed
[  523.764708][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.771339][  T886] gspca_stk1135: Sensor read failed
[  523.776826][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.783304][  T886] gspca_stk1135: Sensor read failed
[  523.788954][  T886] gspca_stk1135: Detected sensor type unknown (0x0)
[  523.795933][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.802307][  T886] gspca_stk1135: Sensor read failed
[  523.807814][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.814346][  T886] gspca_stk1135: Sensor read failed
[  523.819856][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.828481][  T886] gspca_stk1135: Sensor write failed
[  523.833828][  T886] gspca_stk1135: serial bus timeout: status=0x00
[  523.840276][  T886] gspca_stk1135: Sensor write failed
[  523.846052][  T886] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  523.859508][  T886] usb 2-1: USB disconnect, device number 20
[  524.512376][T21380] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  524.625009][   T44] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  524.796180][   T44] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.814177][   T44] usb 4-1: config 0 interface 0 has no altsetting 0
[  524.821041][   T44] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  524.840434][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.857322][   T44] usb 4-1: config 0 descriptor??
[  524.924200][  T886] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  525.089206][  T886] usb 2-1: unable to get BOS descriptor or descriptor too short
[  525.097935][  T886] usb 2-1: not running at top speed; connect to a high speed hub
[  525.107018][  T886] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  525.120446][  T886] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  525.129648][  T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.137961][  T886] usb 2-1: Product: syz
[  525.142240][  T886] usb 2-1: Manufacturer: syz
[  525.146997][  T886] usb 2-1: SerialNumber: syz
[  525.289781][   T44] elecom 0003:056E:00FD.001E: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0
[  525.367446][  T886] cypress_m8 2-1:5.0: DeLorme Earthmate USB converter detected
[  525.382024][  T886] earthmate ttyUSB0: required endpoint is missing
[  525.395411][  T886] usb 2-1: USB disconnect, device number 21
[  525.413261][  T886] cypress_m8 2-1:5.0: device disconnected
[  526.087432][T21437] netlink: 'syz.0.3131': attribute type 1 has an invalid length.
[  526.328697][T21452] netlink: 'syz.1.3135': attribute type 10 has an invalid length.
[  526.338187][T21452] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3135'.
[  526.685716][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.699558][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.709658][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.720430][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.731937][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.750503][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.780847][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.802708][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.813385][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'.
[  527.259735][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  527.269367][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  527.283697][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  527.294560][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  527.303798][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  527.343658][   T24] usb 4-1: USB disconnect, device number 26
[  527.480873][ T1153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.552318][   T36] tipc: Resetting bearer <ib:wg1>
[  527.587457][ T1153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.673736][ T1153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.844601][ T1153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.861869][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  528.034027][   T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  528.049632][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.096286][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.116587][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  528.124894][T21491] chnl_net:caif_netlink_parms(): no params data found
[  528.146798][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  528.163995][   T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  528.203723][   T24] usb 4-1: Manufacturer: syz
[  528.223295][   T24] usb 4-1: config 0 descriptor??
[  528.273579][ T1153] bridge_slave_1: left allmulticast mode
[  528.281014][ T1153] bridge_slave_1: left promiscuous mode
[  528.287445][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.303792][ T1153] bridge_slave_0: left allmulticast mode
[  528.319955][ T1153] bridge_slave_0: left promiscuous mode
[  528.327626][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.422602][ T5933] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  528.439716][   T24] hid_parser_main: 8 callbacks suppressed
[  528.439744][   T24] appleir 0003:05AC:8243.001F: unknown main item tag 0x0
[  528.552181][ T5870] libceph: connect (1)[c::]:6789 error -101
[  528.561052][   T24] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  528.590380][ T5870] libceph: mon0 (1)[c::]:6789 connect error
[  528.591553][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  528.607568][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.622104][T21662] ceph: No mds server is up or the cluster is laggy
[  528.635131][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.645835][ T5933] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  528.686480][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.714344][ T5933] usb 2-1: config 0 descriptor??
[  529.187055][T21636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.206329][T21636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.233254][ T5933] usbhid 2-1:0.0: can't add hid device: -71
[  529.244895][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  529.266591][ T5933] usb 2-1: USB disconnect, device number 22
[  529.353492][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  529.364297][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  529.376708][ T1153] bond0 (unregistering): (slave team0): Releasing backup interface
[  529.387651][ T1153] bond0 (unregistering): Released all slaves
[  529.400566][ T5183] Bluetooth: hci2: command tx timeout
[  529.509674][ T1153] tipc: Disabling bearer <ib:wg1>
[  529.526434][ T1153] tipc: Left network mode
[  529.594395][   T24] usb 4-1: USB disconnect, device number 27
[  529.718724][T21491] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.751578][T21491] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.758927][T21491] bridge_slave_0: entered allmulticast mode
[  529.776806][T21491] bridge_slave_0: entered promiscuous mode
[  529.832879][T21491] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.850354][T21491] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.857654][T21491] bridge_slave_1: entered allmulticast mode
[  529.878021][T21491] bridge_slave_1: entered promiscuous mode
[  530.076741][T21491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.092406][T21491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.211351][   T44] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  530.273255][ T1153] hsr_slave_0: left promiscuous mode
[  530.285736][ T1153] hsr_slave_1: left promiscuous mode
[  530.293788][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.307020][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.317512][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.325474][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.355589][ T1153] veth1_macvtap: left promiscuous mode
[  530.364742][ T1153] veth0_macvtap: left promiscuous mode
[  530.372164][   T44] usb 2-1: device descriptor read/64, error -71
[  530.373930][ T1153] veth1_vlan: left promiscuous mode
[  530.387310][ T1153] veth0_vlan: left promiscuous mode
[  530.429035][ T5870] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  530.506605][ T1153] pimreg (unregistering): left allmulticast mode
[  530.590522][ T5870] usb 4-1: device descriptor read/64, error -71
[  530.628868][   T44] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  530.774133][   T44] usb 2-1: device descriptor read/64, error -71
[  530.847193][ T5870] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  530.896170][   T44] usb usb2-port1: attempt power cycle
[  530.988522][ T5870] usb 4-1: device descriptor read/64, error -71
[  531.035357][ T1153] team0 (unregistering): Port device team_slave_1 removed
[  531.091869][ T1153] team0 (unregistering): Port device team_slave_0 removed
[  531.113412][ T5870] usb usb4-port1: attempt power cycle
[  531.245567][   T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  531.278501][   T44] usb 2-1: device descriptor read/8, error -71
[  531.468072][ T5870] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  531.484732][ T5183] Bluetooth: hci2: command tx timeout
[  531.506138][ T5870] usb 4-1: device descriptor read/8, error -71
[  531.543549][   T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  531.574610][   T44] usb 2-1: device descriptor read/8, error -71
[  531.690297][   T44] usb usb2-port1: unable to enumerate USB device
[  531.716733][T21491] team0: Port device team_slave_0 added
[  531.732791][T21491] team0: Port device team_slave_1 added
[  531.767716][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  531.804508][T21491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.814385][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.845565][T21491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.857015][ T5870] usb 4-1: device descriptor read/8, error -71
[  531.863529][T21491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.871401][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.898447][T21491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.968262][ T5870] usb usb4-port1: unable to enumerate USB device
[  532.047907][T21491] hsr_slave_0: entered promiscuous mode
[  532.055456][T21491] hsr_slave_1: entered promiscuous mode
[  532.066452][T21491] debugfs: 'hsr0' already exists in 'hsr'
[  532.075696][T21491] Cannot create hsr debugfs directory
[  532.409822][T21945] Device name cannot be null; rc = [-22]
[  532.959130][T21491] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  532.995832][T21491] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  533.015659][T21491] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  533.030638][T21491] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  533.120020][T22012] syzkaller1: entered promiscuous mode
[  533.125575][T22012] syzkaller1: entered allmulticast mode
[  533.213193][T21491] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.307937][T21491] 8021q: adding VLAN 0 to HW filter on device team0
[  533.363996][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.371360][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.403374][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.410692][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.471864][T22012] 
[  533.474253][T22012] ======================================================
[  533.481319][T22012] WARNING: possible circular locking dependency detected
[  533.488540][T22012] syzkaller #0 Not tainted
[  533.493004][T22012] ------------------------------------------------------
[  533.500224][T22012] syz.1.3155/22012 is trying to acquire lock:
[  533.506318][T22012] ffffffff8e642920 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  533.516121][T22012] 
[  533.516121][T22012] but task is already holding lock:
[  533.523594][T22012] ffff888148f1d568 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_start_creating+0x98/0x1e0
[  533.534294][T22012] 
[  533.534294][T22012] which lock already depends on the new lock.
[  533.534294][T22012] 
[  533.544965][T22012] 
[  533.544965][T22012] the existing dependency chain (in reverse order) is:
[  533.554104][T22012] 
[  533.554104][T22012] -> #9 (&sb->s_type->i_mutex_key#3){++++}-{4:4}:
[  533.562808][T22012]        lock_acquire+0x120/0x360
[  533.567931][T22012]        down_write+0x96/0x1f0
[  533.572710][T22012]        simple_start_creating+0x98/0x1e0
[  533.578626][T22012]        start_creating+0x10f/0x180
[  533.583935][T22012]        __debugfs_create_file+0x79/0x4f0
[  533.589673][T22012]        debugfs_create_file_full+0x3f/0x60
[  533.595580][T22012]        relay_open_buf+0x56e/0xe50
[  533.600784][T22012]        relay_open+0x427/0x920
[  533.605642][T22012]        do_blk_trace_setup+0x561/0x980
[  533.611203][T22012]        blk_trace_setup+0x116/0x1f0
[  533.616490][T22012]        sg_ioctl+0xaf3/0x2230
[  533.621259][T22012]        __se_sys_ioctl+0xf9/0x170
[  533.626371][T22012]        do_syscall_64+0xfa/0xfa0
[  533.631414][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.637941][T22012] 
[  533.637941][T22012] -> #8 (relay_channels_mutex){+.+.}-{4:4}:
[  533.646045][T22012]        lock_acquire+0x120/0x360
[  533.651164][T22012]        __mutex_lock+0x187/0x1350
[  533.656278][T22012]        relay_prepare_cpu+0x29/0x200
[  533.661747][T22012]        cpuhp_invoke_callback+0x442/0x860
[  533.667559][T22012]        _cpu_up+0x2c9/0x580
[  533.672187][T22012]        cpu_up+0x1d2/0x220
[  533.676694][T22012]        cpuhp_bringup_mask+0xb2/0x1a0
[  533.682205][T22012]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  533.689070][T22012]        bringup_nonboot_cpus+0x17/0x30
[  533.694836][T22012]        smp_init+0x32/0x110
[  533.699473][T22012]        kernel_init_freeable+0x316/0x4b0
[  533.705301][T22012]        kernel_init+0x1d/0x1d0
[  533.710161][T22012]        ret_from_fork+0x47c/0x820
[  533.715309][T22012]        ret_from_fork_asm+0x1a/0x30
[  533.720596][T22012] 
[  533.720596][T22012] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  533.728359][T22012]        lock_acquire+0x120/0x360
[  533.733432][T22012]        cpus_read_lock+0x42/0x160
[  533.738572][T22012]        static_key_slow_inc+0x12/0x30
[  533.744171][T22012]        tcp_md5_do_add+0x21f/0x3a0
[  533.749576][T22012]        tcp_v4_parse_md5_keys+0x412/0x600
[  533.755388][T22012]        do_tcp_setsockopt+0x11dc/0x1f20
[  533.761027][T22012]        do_sock_setsockopt+0x179/0x1b0
[  533.766846][T22012]        __x64_sys_setsockopt+0x13f/0x1b0
[  533.772564][T22012]        do_syscall_64+0xfa/0xfa0
[  533.777598][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.784039][T22012] 
[  533.784039][T22012] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  533.791701][T22012]        lock_acquire+0x120/0x360
[  533.797003][T22012]        lock_sock_nested+0x48/0x100
[  533.802300][T22012]        tcp_sendmsg+0x21/0x50
[  533.807073][T22012]        __sock_sendmsg+0x19c/0x270
[  533.812366][T22012]        sock_sendmsg+0x158/0x230
[  533.817407][T22012]        __sock_xmit+0x1c1/0x470
[  533.822352][T22012]        nbd_send_cmd+0x863/0x1ba0
[  533.827546][T22012]        nbd_queue_rq+0xcdb/0xf10
[  533.832573][T22012]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  533.838733][T22012]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  533.845596][T22012]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  533.852128][T22012]        blk_mq_run_hw_queue+0x348/0x4f0
[  533.857856][T22012]        blk_mq_dispatch_list+0xd0c/0xe00
[  533.863586][T22012]        blk_mq_flush_plug_list+0x469/0x550
[  533.869487][T22012]        __blk_flush_plug+0x3d3/0x4b0
[  533.874874][T22012]        __submit_bio+0x2d3/0x5a0
[  533.880157][T22012]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  533.886336][T22012]        __bread_gfp+0x216/0x3c0
[  533.891306][T22012]        udf_load_vrs+0x365/0xf20
[  533.896379][T22012]        udf_fill_super+0x5ad/0x17a0
[  533.901700][T22012]        get_tree_bdev_flags+0x40b/0x4d0
[  533.907371][T22012]        vfs_get_tree+0x8f/0x2b0
[  533.912330][T22012]        do_new_mount+0x302/0xa10
[  533.917366][T22012]        __se_sys_mount+0x313/0x410
[  533.922574][T22012]        do_syscall_64+0xfa/0xfa0
[  533.927598][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.934023][T22012] 
[  533.934023][T22012] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  533.941732][T22012]        lock_acquire+0x120/0x360
[  533.946863][T22012]        __mutex_lock+0x187/0x1350
[  533.952068][T22012]        nbd_queue_rq+0x257/0xf10
[  533.957111][T22012]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  533.963196][T22012]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  533.970054][T22012]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  533.976653][T22012]        blk_mq_run_hw_queue+0x348/0x4f0
[  533.982326][T22012]        blk_mq_dispatch_list+0xd0c/0xe00
[  533.988281][T22012]        blk_mq_flush_plug_list+0x469/0x550
[  533.994183][T22012]        __blk_flush_plug+0x3d3/0x4b0
[  533.999670][T22012]        __submit_bio+0x2d3/0x5a0
[  534.004782][T22012]        submit_bio_noacct_nocheck+0x4ab/0xb50
[  534.011029][T22012]        __bread_gfp+0x216/0x3c0
[  534.016323][T22012]        udf_load_vrs+0x365/0xf20
[  534.021360][T22012]        udf_fill_super+0x5ad/0x17a0
[  534.026659][T22012]        get_tree_bdev_flags+0x40b/0x4d0
[  534.032298][T22012]        vfs_get_tree+0x8f/0x2b0
[  534.037252][T22012]        do_new_mount+0x302/0xa10
[  534.042362][T22012]        __se_sys_mount+0x313/0x410
[  534.047570][T22012]        do_syscall_64+0xfa/0xfa0
[  534.052697][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.059120][T22012] 
[  534.059120][T22012] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  534.066511][T22012]        lock_acquire+0x120/0x360
[  534.071550][T22012]        __mutex_lock+0x187/0x1350
[  534.076674][T22012]        nbd_queue_rq+0xc8/0xf10
[  534.081630][T22012]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  534.087974][T22012]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  534.095030][T22012]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  534.101552][T22012]        blk_mq_run_hw_queue+0x348/0x4f0
[  534.107281][T22012]        blk_mq_dispatch_list+0xd0c/0xe00
[  534.113109][T22012]        blk_mq_flush_plug_list+0x469/0x550
[  534.119482][T22012]        __blk_flush_plug+0x3d3/0x4b0
[  534.125070][T22012]        blk_finish_plug+0x5e/0x90
[  534.130314][T22012]        xfs_buf_submit+0x83f/0xc10
[  534.135884][T22012]        xfs_buf_read_uncached+0x131/0x1d0
[  534.141806][T22012]        xfs_readsb+0xf7/0x690
[  534.146592][T22012]        xfs_fs_fill_super+0x6d3/0x1600
[  534.152154][T22012]        get_tree_bdev_flags+0x40b/0x4d0
[  534.157789][T22012]        vfs_get_tree+0x8f/0x2b0
[  534.162747][T22012]        do_new_mount+0x302/0xa10
[  534.167781][T22012]        __se_sys_mount+0x313/0x410
[  534.172987][T22012]        do_syscall_64+0xfa/0xfa0
[  534.178098][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.184719][T22012] 
[  534.184719][T22012] -> #3 (set->srcu){.+.+}-{0:0}:
[  534.191849][T22012]        lock_sync+0xba/0x160
[  534.196531][T22012]        __synchronize_srcu+0x96/0x3a0
[  534.202164][T22012]        elevator_switch+0x12b/0x640
[  534.207469][T22012]        elevator_change+0x2d4/0x450
[  534.212764][T22012]        elevator_set_default+0x186/0x260
[  534.218491][T22012]        blk_register_queue+0x34e/0x3f0
[  534.224038][T22012]        __add_disk+0x677/0xd50
[  534.228977][T22012]        add_disk_fwnode+0xfc/0x480
[  534.234172][T22012]        nbd_dev_add+0x717/0xae0
[  534.239396][T22012]        nbd_init+0x168/0x1f0
[  534.244088][T22012]        do_one_initcall+0x233/0x820
[  534.249491][T22012]        do_initcall_level+0x104/0x190
[  534.255061][T22012]        do_initcalls+0x59/0xa0
[  534.260020][T22012]        kernel_init_freeable+0x334/0x4b0
[  534.265755][T22012]        kernel_init+0x1d/0x1d0
[  534.270613][T22012]        ret_from_fork+0x47c/0x820
[  534.275736][T22012]        ret_from_fork_asm+0x1a/0x30
[  534.281121][T22012] 
[  534.281121][T22012] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  534.289119][T22012]        lock_acquire+0x120/0x360
[  534.294175][T22012]        __mutex_lock+0x187/0x1350
[  534.299289][T22012]        elevator_change+0x19b/0x450
[  534.304584][T22012]        elevator_set_none+0x42/0xb0
[  534.310061][T22012]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[  534.316398][T22012]        nbd_start_device+0x17f/0xb10
[  534.321771][T22012]        nbd_genl_connect+0x135b/0x18f0
[  534.327343][T22012]        genl_family_rcv_msg_doit+0x212/0x300
[  534.333692][T22012]        genl_rcv_msg+0x60e/0x790
[  534.338804][T22012]        netlink_rcv_skb+0x208/0x470
[  534.344100][T22012]        genl_rcv+0x28/0x40
[  534.348621][T22012]        netlink_unicast+0x82c/0x9e0
[  534.353918][T22012]        netlink_sendmsg+0x805/0xb30
[  534.359303][T22012]        __sock_sendmsg+0x219/0x270
[  534.364520][T22012]        ____sys_sendmsg+0x505/0x830
[  534.369847][T22012]        ___sys_sendmsg+0x21f/0x2a0
[  534.375071][T22012]        __x64_sys_sendmsg+0x19b/0x260
[  534.380549][T22012]        do_syscall_64+0xfa/0xfa0
[  534.385615][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.392096][T22012] 
[  534.392096][T22012] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  534.400711][T22012]        lock_acquire+0x120/0x360
[  534.405863][T22012]        blk_alloc_queue+0x538/0x620
[  534.411161][T22012]        __blk_mq_alloc_disk+0x15c/0x340
[  534.416811][T22012]        nbd_dev_add+0x46c/0xae0
[  534.421757][T22012]        nbd_init+0x168/0x1f0
[  534.426444][T22012]        do_one_initcall+0x233/0x820
[  534.431748][T22012]        do_initcall_level+0x104/0x190
[  534.437237][T22012]        do_initcalls+0x59/0xa0
[  534.442105][T22012]        kernel_init_freeable+0x334/0x4b0
[  534.447927][T22012]        kernel_init+0x1d/0x1d0
[  534.452961][T22012]        ret_from_fork+0x47c/0x820
[  534.458074][T22012]        ret_from_fork_asm+0x1a/0x30
[  534.463478][T22012] 
[  534.463478][T22012] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  534.470717][T22012]        validate_chain+0xb9b/0x2140
[  534.476114][T22012]        __lock_acquire+0xab9/0xd20
[  534.481424][T22012]        lock_acquire+0x120/0x360
[  534.486533][T22012]        fs_reclaim_acquire+0x72/0x100
[  534.492003][T22012]        kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  534.498243][T22012]        __d_alloc+0x36/0x7a0
[  534.502942][T22012]        d_alloc_parallel+0xe5/0x15e0
[  534.508317][T22012]        __lookup_slow+0x116/0x3d0
[  534.513453][T22012]        simple_start_creating+0xfd/0x1e0
[  534.519211][T22012]        start_creating+0x10f/0x180
[  534.524415][T22012]        debugfs_create_dir+0x28/0x420
[  534.529876][T22012]        nbd_start_device+0x32a/0xb10
[  534.535249][T22012]        nbd_genl_connect+0x135b/0x18f0
[  534.540804][T22012]        genl_family_rcv_msg_doit+0x212/0x300
[  534.546877][T22012]        genl_rcv_msg+0x60e/0x790
[  534.551904][T22012]        netlink_rcv_skb+0x208/0x470
[  534.557194][T22012]        genl_rcv+0x28/0x40
[  534.561715][T22012]        netlink_unicast+0x82c/0x9e0
[  534.567085][T22012]        netlink_sendmsg+0x805/0xb30
[  534.572382][T22012]        __sock_sendmsg+0x219/0x270
[  534.577596][T22012]        ____sys_sendmsg+0x505/0x830
[  534.582886][T22012]        ___sys_sendmsg+0x21f/0x2a0
[  534.588097][T22012]        __x64_sys_sendmsg+0x19b/0x260
[  534.593555][T22012]        do_syscall_64+0xfa/0xfa0
[  534.598590][T22012]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.605195][T22012] 
[  534.605195][T22012] other info that might help us debug this:
[  534.605195][T22012] 
[  534.615434][T22012] Chain exists of:
[  534.615434][T22012]   fs_reclaim --> relay_channels_mutex --> &sb->s_type->i_mutex_key#3
[  534.615434][T22012] 
[  534.629616][T22012]  Possible unsafe locking scenario:
[  534.629616][T22012] 
[  534.637066][T22012]        CPU0                    CPU1
[  534.642425][T22012]        ----                    ----
[  534.647788][T22012]   lock(&sb->s_type->i_mutex_key#3);
[  534.653170][T22012]                                lock(relay_channels_mutex);
[  534.660544][T22012]                                lock(&sb->s_type->i_mutex_key#3);
[  534.668446][T22012]   lock(fs_reclaim);
[  534.672436][T22012] 
[  534.672436][T22012]  *** DEADLOCK ***
[  534.672436][T22012] 
[  534.680590][T22012] 4 locks held by syz.1.3155/22012:
[  534.685801][T22012]  #0: ffffffff8f9b8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.694003][T22012]  #1: ffffffff8f9b8c68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  534.703508][T22012]  #2: ffff888025849230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10
[  534.713469][T22012]  #3: ffff888148f1d568 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_start_creating+0x98/0x1e0
[  534.724653][T22012] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  534.724653][T22012] stack backtrace:
[  534.730747][T22012] CPU: 1 UID: 0 PID: 22012 Comm: syz.1.3155 Not tainted syzkaller #0 PREEMPT(full) 
[  534.730774][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  534.730785][T22012] Call Trace:
[  534.730796][T22012]  <TASK>
[  534.730804][T22012]  dump_stack_lvl+0x189/0x250
[  534.730828][T22012]  ? __pfx_dump_stack_lvl+0x10/0x10
[  534.730842][T22012]  ? __pfx__printk+0x10/0x10
[  534.730866][T22012]  ? print_lock_name+0xde/0x100
[  534.730889][T22012]  print_circular_bug+0x2ee/0x310
[  534.730913][T22012]  check_noncircular+0x134/0x160
[  534.730936][T22012]  validate_chain+0xb9b/0x2140
[  534.730956][T22012]  ? unwind_next_frame+0xa5/0x2390
[  534.730976][T22012]  ? __kasan_check_byte+0x12/0x40
[  534.730996][T22012]  ? rcu_is_watching+0x15/0xb0
[  534.731015][T22012]  ? __kasan_check_byte+0x12/0x40
[  534.731034][T22012]  ? rcu_is_watching+0x15/0xb0
[  534.731053][T22012]  ? lock_release+0x4b/0x3e0
[  534.731069][T22012]  ? lock_release+0x4b/0x3e0
[  534.731086][T22012]  __lock_acquire+0xab9/0xd20
[  534.731105][T22012]  ? kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  534.731121][T22012]  lock_acquire+0x120/0x360
[  534.731138][T22012]  ? kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  534.731154][T22012]  ? __bfs+0x151/0x2a0
[  534.731171][T22012]  ? __pfx_hlock_conflict+0x10/0x10
[  534.731194][T22012]  fs_reclaim_acquire+0x72/0x100
[  534.731213][T22012]  ? kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  534.731228][T22012]  kmem_cache_alloc_lru_noprof+0x4a/0x6d0
[  534.731244][T22012]  ? __d_alloc+0x36/0x7a0
[  534.731269][T22012]  __d_alloc+0x36/0x7a0
[  534.731294][T22012]  d_alloc_parallel+0xe5/0x15e0
[  534.731313][T22012]  ? __lock_acquire+0xab9/0xd20
[  534.731332][T22012]  ? __pfx_d_alloc_parallel+0x10/0x10
[  534.731348][T22012]  ? __raw_spin_lock_init+0x45/0x100
[  534.731372][T22012]  ? __init_waitqueue_head+0xa9/0x150
[  534.731404][T22012]  __lookup_slow+0x116/0x3d0
[  534.731420][T22012]  ? __pfx___lookup_slow+0x10/0x10
[  534.731437][T22012]  ? d_lookup+0x8a/0xa0
[  534.731452][T22012]  ? lookup_noperm+0x112/0x220
[  534.731467][T22012]  simple_start_creating+0xfd/0x1e0
[  534.731490][T22012]  ? __pfx_simple_start_creating+0x10/0x10
[  534.731513][T22012]  ? mntput+0x65/0xc0
[  534.731530][T22012]  start_creating+0x10f/0x180
[  534.731553][T22012]  debugfs_create_dir+0x28/0x420
[  534.731574][T22012]  ? device_create_file+0xf4/0x1c0
[  534.731591][T22012]  nbd_start_device+0x32a/0xb10
[  534.731608][T22012]  ? device_create_file+0xf4/0x1c0
[  534.731624][T22012]  nbd_genl_connect+0x135b/0x18f0
[  534.731652][T22012]  ? __pfx_nbd_genl_connect+0x10/0x10
[  534.731677][T22012]  ? rcu_is_watching+0x15/0xb0
[  534.731699][T22012]  ? __nla_parse+0x40/0x60
[  534.731722][T22012]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  534.731746][T22012]  genl_family_rcv_msg_doit+0x212/0x300
[  534.731767][T22012]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  534.731792][T22012]  ? stack_trace_save+0x9c/0xe0
[  534.731816][T22012]  genl_rcv_msg+0x60e/0x790
[  534.731837][T22012]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.731856][T22012]  ? __pfx_nbd_genl_connect+0x10/0x10
[  534.731883][T22012]  netlink_rcv_skb+0x208/0x470
[  534.731906][T22012]  ? __lock_acquire+0xab9/0xd20
[  534.731923][T22012]  ? __pfx_genl_rcv_msg+0x10/0x10
[  534.731942][T22012]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  534.731972][T22012]  ? down_read+0x1ad/0x2e0
[  534.731990][T22012]  genl_rcv+0x28/0x40
[  534.732007][T22012]  netlink_unicast+0x82c/0x9e0
[  534.732032][T22012]  ? __pfx_netlink_unicast+0x10/0x10
[  534.732054][T22012]  ? netlink_sendmsg+0x642/0xb30
[  534.732068][T22012]  ? skb_put+0x11b/0x210
[  534.732085][T22012]  netlink_sendmsg+0x805/0xb30
[  534.732102][T22012]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.732118][T22012]  ? aa_sock_msg_perm+0xf1/0x1d0
[  534.732143][T22012]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  534.732165][T22012]  ? __pfx_netlink_sendmsg+0x10/0x10
[  534.732180][T22012]  __sock_sendmsg+0x219/0x270
[  534.732202][T22012]  ____sys_sendmsg+0x505/0x830
[  534.732222][T22012]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.732242][T22012]  ? import_iovec+0x74/0xa0
[  534.732258][T22012]  ___sys_sendmsg+0x21f/0x2a0
[  534.732275][T22012]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.732303][T22012]  ? __fget_files+0x2a/0x420
[  534.732323][T22012]  ? __fget_files+0x3a0/0x420
[  534.732347][T22012]  __x64_sys_sendmsg+0x19b/0x260
[  534.732376][T22012]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  534.732406][T22012]  ? do_syscall_64+0xbe/0xfa0
[  534.732421][T22012]  do_syscall_64+0xfa/0xfa0
[  534.732436][T22012]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.732450][T22012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.732467][T22012]  ? clear_bhb_loop+0x60/0xb0
[  534.732485][T22012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.732501][T22012] RIP: 0033:0x7fa181b8ebe9
[  534.732516][T22012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.732531][T22012] RSP: 002b:00007fa182ab8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.732550][T22012] RAX: ffffffffffffffda RBX: 00007fa181dc5fa0 RCX: 00007fa181b8ebe9
[  534.732563][T22012] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  534.732574][T22012] RBP: 00007fa181c11e19 R08: 0000000000000000 R09: 0000000000000000
[  534.732585][T22012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.732595][T22012] R13: 00007fa181dc6038 R14: 00007fa181dc5fa0 R15: 00007fffe2ff2998
[  534.732612][T22012]  </TASK>
[  534.745299][ T5183] Bluetooth: hci2: command tx timeout
[  534.872627][T21491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  534.934652][ T5933] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  534.969675][T21491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  535.257494][ T5933] usb 4-1: device descriptor read/64, error -71
[  535.332410][ T5878] block nbd1: Receive control failed (result -32)
[  535.361688][ T5183] block nbd1: Receive control failed (result -32)
[  535.364403][T22012] nbd1: detected capacity change from 0 to 127
[  535.425338][ T7632] block nbd1: Dead connection, failed to find a fallback
[  535.432443][ T7632] block nbd1: shutting down sockets
[  535.454217][ T7632] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.463454][ T7632] buffer_io_error: 39 callbacks suppressed
[  535.463472][ T7632] Buffer I/O error on dev nbd1, logical block 0, async page read
[  535.545354][ T7632] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.564063][ T7632] Buffer I/O error on dev nbd1, logical block 1, async page read
[  535.584194][ T7632] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.593302][ T7632] Buffer I/O error on dev nbd1, logical block 2, async page read
[  535.654404][ T7632] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.663606][ T7632] Buffer I/O error on dev nbd1, logical block 3, async page read
[  535.709271][ T7632] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.761818][ T7632] Buffer I/O error on dev nbd1, logical block 0, async page read
[  535.784192][ T7632] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.808211][ T7632] Buffer I/O error on dev nbd1, logical block 1, async page read
[  535.834680][ T7632] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.860780][ T7632] Buffer I/O error on dev nbd1, logical block 2, async page read
[  535.874509][ T7632] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.898517][ T7632] Buffer I/O error on dev nbd1, logical block 3, async page read
[  535.910915][ T7632] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.927153][ T7632] Buffer I/O error on dev nbd1, logical block 0, async page read
[  535.937641][ T7632] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  535.957796][ T7632] Buffer I/O error on dev nbd1, logical block 1, async page read
[  535.979242][ T7632] ldm_validate_partition_table(): Disk read failed.
[  535.995357][ T7632] Dev nbd1: unable to read RDB block 0
[  536.002431][ T7632]  nbd1: unable to read partition table
[  536.027508][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.058765][ T7632] ldm_validate_partition_table(): Disk read failed.
[  536.097358][ T7632] Dev nbd1: unable to read RDB block 0
[  536.109278][ T7632]  nbd1: unable to read partition table
[  536.141056][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.246913][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.319509][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.591088][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.606557][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.620438][   T36] bond0 (unregistering): Released all slaves
[  536.690129][   T36] tipc: Left network mode
[  536.864058][   T36] hsr_slave_0: left promiscuous mode
[  536.874019][   T36] hsr_slave_1: left promiscuous mode
[  536.879985][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.910662][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.919419][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.932098][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.957345][   T36] veth1_macvtap: left promiscuous mode
[  536.973326][   T36] veth0_macvtap: left promiscuous mode
[  536.978987][   T36] veth1_vlan: left promiscuous mode
[  536.993147][   T36] veth0_vlan: left promiscuous mode
[  537.236311][   T36] team0 (unregistering): Port device team_slave_1 removed
[  537.268471][   T36] team0 (unregistering): Port device team_slave_0 removed
[  537.579551][   T36] IPVS: stop unused estimator thread 0...
[  537.855880][   T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.897575][   T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.954659][   T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.007093][   T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.109031][   T36] bridge_slave_1: left allmulticast mode
[  538.114976][   T36] bridge_slave_1: left promiscuous mode
[  538.120903][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.130218][   T36] bridge_slave_0: left allmulticast mode
[  538.136484][   T36] bridge_slave_0: left promiscuous mode
[  538.142570][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.157370][   T36] bridge_slave_1: left allmulticast mode
[  538.163648][   T36] bridge_slave_1: left promiscuous mode
[  538.169457][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.181403][   T36] bridge_slave_0: left allmulticast mode
[  538.187401][   T36] bridge_slave_0: left promiscuous mode
[  538.194258][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.338444][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.350792][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.362447][   T36] bond0 (unregistering): Released all slaves
[  538.447317][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.457950][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.468177][   T36] bond0 (unregistering): Released all slaves
[  538.712882][   T36] hsr_slave_0: left promiscuous mode
[  538.719211][   T36] hsr_slave_1: left promiscuous mode
[  538.725386][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.738766][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.749978][   T36] hsr_slave_0: left promiscuous mode
[  538.756192][   T36] hsr_slave_1: left promiscuous mode
[  538.762338][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.770109][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.779293][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.788422][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.799514][   T36] veth1_macvtap: left promiscuous mode
[  538.805340][   T36] veth0_macvtap: left promiscuous mode
[  538.811340][   T36] veth1_vlan: left promiscuous mode
[  538.816933][   T36] veth0_vlan: left promiscuous mode
[  538.957423][   T36] team0 (unregistering): Port device team_slave_1 removed
[  538.987604][   T36] team0 (unregistering): Port device team_slave_0 removed
[  539.185842][   T36] team0 (unregistering): Port device team_slave_1 removed
[  539.198588][   T36] team0 (unregistering): Port device team_slave_0 removed
[  539.705931][   T36] IPVS: stop unused estimator thread 0...