last executing test programs:

36.937314957s ago: executing program 1 (id=445):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, &(0x7f0000000580)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="000be9000000e90ae2357040a9f771dfc8d6bd4d7509123a319c551ac6ffe42f918355bc15876a8d436c527cefa0508df2a080ca1b86d9c803895f6a94bc5442de34075873a0380f67d47447aed87d6746bf36bde63ce40f50f1cd7f85e2347db37d71c69ac0279cc833e936b2b00d1064fc253093c05c3a57957599efd94cdef61ff630a8e1c20c0b4c09eaab9f04968eab1f16ce0f2cf2b3d18928a798fd0000e97c44b6ba21ccd4a3d5b082ef3b418ed3c9f5905099d915f04b849613173eac83a70a01ff74357fc6729be511bddc12c4605a96bd23c6a8920ca5ec30c7e38b7076bb2c7f456eedb0083b2dab"], &(0x7f00000004c0)={0x0, 0x3, 0x86, @string={0x86, 0x3, "4a39001e6a52e25d9a42a24f3e84f1ced104cb77efe45cfad0c3fc96a2965e63ae0ee442570a36f07e67f4a87db5d45072980617fc97768c8438bb4ed3fccb34b6f16ee78a9964bd64a399f709db18e9f52a32818223636645a725c4b07a7249394e9f8b8323d4300005ae04c741098aaa59f87c19a1eac19000a6ad005209affe1feabb"}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000005c0)={0x0, 0x17, 0x42, "aac36bfca36878d6eb4a0d860b817a2fbfda708da72465a1201d232094b519ed8e3bde5b7492db8d90171ea893a01d395e720e96de95c76ec7c598ab5f54f123b6cd"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000640)={0x21, 0x0, 0x1, "f2"}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00')
syz_fuse_handle_req(r5, &(0x7f0000000980)="5214aadb6fea8708350708a7000bf8ebc55438f6a2297ad81aaef475eac323c480be3bbbfa4d8c8f214f2bba038e4fa8460f7f043442b554b74b41a68625d393ac5e65253057bf16312727cfd8e93204bc2d56a68814d424ea5e3d3f31429f301e4119c89e7f250f0ebce73245292c6b3e37990e6274a4e9c9a0afa65e160825a4daf0256c5bbd5d8ff39ee07932f889e0a688e7b3f8186502f084c4f743d4ecf65210ab0eac0ff866b6fd98eb7ab12fc5cf8d4c43ee02b05fd1dbcbeb54bfa3751f370493982aa6b9d9be6f1772d52157d481f9ccfd29fdd0d7c0733fd57c0a45a1a9280e8c85dd758a8d0953758ff7e4e715a940762fc798e6c986dd2e4e70f537d1b3c40ae17a470fdbbf1b52212c08653536ab824d0cd53e4752c238753e15c90d60287aa63068549f2ab32b7b45e2fd1c538ff44617d55ae5526d5bccc7e482cebe9e6abdcf307aac46ff7cdd7f84328b46e5d96c0629fe775c5bf9770f9528f854563c2dd09dd33262efedbb22421e4e8695279877a50194d190b67b75761ef0e65fe98d6ce26e390a4979cf05932f42325f9af4f4297bfa31413b34f1de0931d981e34dc45fc4aec756ea32f84a69ecc357267d4d8392a2698788bd5b333331c7b8a41415cd28f5f7b820daf797b6236b51a32bc3b6ab729567ddbc27cd937418196bdd2824edfa7c72a5bc3ce40f26be559472b2d4ede2c148311a3d77b697b5c8d2825c0fa5f9cb0e460cb482932220cb325815f9f67103ec337eefa93412f4aab67c2a353e0578c5e43064bffe3412d4d354b7d2d6f07cc489f34544bbf0ce7dff75b7a8c3d9bbadbb01204269cf4ad84217071b837fab1660852f932e0efb306ce1a10e31a5786754e53c64ce1f9a7dd114477f91481c2513b23be17eda48d422b7bac6d1bc9860e05ec184f6222529153d44b82414c02f1d0c7b64f85473891eb1251b514ad31b7440f01f34afb9ee560838239d04df09f61b503964318a427d368c0a6bc5e792b4f3fb92cd41943b5d8ddeb67ccf540dc1457fd288db8fc60f00bbb6548cebc860679cce557a271131d0df18a9b1f1c04692b28ff4bb346b648dd969d286ce3bfa60df0c0502daa3ca83e12eea70e520cde982d4b998b6b9f6d911efb7658875c155d6c32a2ddff1d4b34c01f6b1454e42ee76056826429f5ab0ca4260e044f25380d82c5a643044adc70e9d714ab6e9fc2cf757131c9454b9bd5f17f6429bfe378d8d95c965ba7d7d79b6e0568468b0dc92fb06712e481424017d9c1ebcfb47a0589438fed1693d1b398c14ac2329f32ca7434353b5c18fe6e56ebf646a133c0d9d90aef03f3a4cf625da2492ada6cd9283d519178905f51b26a50c55fff3cdc5185e6f88ebc6b2dbf4db8d9f3c569d0e296a1a83b4a17dc9ca704cf08719cdddc7d9af15ba3a2aba032a36b186ce27fc5245a5ff2ffc0b5ff630a3c77007dcf23fdc1b7cb8125be8b2116c0b3b0e57f95594133eccbb7eb8e0500923e22905fac58139f725e959e5b98fbd614dcd6532e922693843474acefcd83afb7224eb0a7fd2862b267bd7120c85b8242229750c90f78ec30f2d03c609d6b3973d58fdf5b0ae8a7a34e8c6adcfb65688fa2ece7d2636c2a8bd0f70f9a7aff5e5cf4a4ce14051f93b84021b69dbd4548c9b81843be59d5028cc4f69b2d2e250ed67d0e5f54deaac129e8e04a6ee01f13e108073c13d30bfbceb6fa72d97330cc90b14fab2cfe7a439b207d70a63a637547225077f00fadc49d1bfe86995bbac4a379d36fccfae613da9ddb7bb0e829460b0b636d9582bd204884359dbe01f7b8184a14267ed727a54b81d52149719cda7a77afdf74379414d07fa909175bd7c31f2cec24bf5e86254d208180c9797cdd977f0ea4b7a98091487ecf95aa070e44a4d152ecccfb778e36054781bae1581ebed326b7dbd0fc7416092e065eb75583ef35e23d5ec9dfc909db3f886a837c0237c5d26e67884682330eedea0bfbe6ebb1170f02353ea61f087afe42346a9a5a62b1e8c3a5746b91f7e235dcc331e3535d08ed4051312f7b55911fc30c070539aa450cc12eca5fec9a6f348c10605f834d90fb7014fd2fa247669ed20e4778a9031bbf18daed659d281c72bd987ffc4f450b9c65f1438f9aeb20edb22f6a967cf742bcade3f120217fe38c39d29cde7fe74edc4d36a061b113ed4397eb604b229285134c63d0689035aad3879baa36fcd9b743f1655b2012c13bad6846d035cb9878fdcecb60f6c16f650d1e37ce38754f245cdb12529adc34fb1a6fc85d7226a187411801274b6a7df6bb36f4b52dcf2f3ca25aa5ad98b7f54bb7a93775781934d4a57786affdbc94b1b6cd8d7b15ba24c8258ec67b17b8d0c89d3982f7d1fbb8977a3d946bd22a437d17ee0fb80a517cb16280b0dde71e09b55366951eb42575e469b65fda2d507e35cd80606740790f3a1467cc0771f33b16da017775c8ef263a78dde37127ab834e66295cfd95d59da7e9c32dea711ddd59d3007aedb8c6075d4f4abfd6561c5fe1bc0ad044697ce9f5a2117c8ec25a0a503dfb29e1b0bf87fe8af01042ac20781e502d1b1c3cebd3e230403aee13f3c0a32b89c1ff1f8e1f2a2f43f1132fbd2ecfc236b3f194d9457be8bab9b174c15f3ae0bdf651144380b291f26ddf72e3606a88d871b0059a70c5bdcfef28cc96ec4327f4b8919f9836cf0c168249b26937ae44def50f38973620f954c61cc54aed164280370a58bd39237cdd28470c5037905e3730914c76dd0b8447290bea082f9b0ec2cf57c6c934a3693e61ad41fd1727cbb22dfa92a36b5811b8702fa3273badbe2803dc79784ee1988be01299a4f218f0d60d5e518a06353cbe1c9980301671809a93f7580887767b8f47898c78f0132696425e3115cee4ada08bef41abad7fa4b811d58e03c1f6c6c0dbcc7b5cc93edc4e5b79650e40837e9ffd3ff4e39706f06e6493b5300782fb0b2da07b4c103360b3f9be4e6489bb80209780ae0aee0c71f1915a6e8c2bf219ccbbe9d2f4b4eb74b35ac4d10b826cffd8a2cf9096c0b4026448ccd2a81f9402119057c90241cfdab39eef8e695f8ac07161b26c83a4d5068baf2acad11033ffc4c5ccee34afea247a4e6f7fa7d1860e9f2fc323415b42002684b2b7fdfe2e23956e6476580eeac1f387ed26f5f5d6fe1eebfa654748ded0f327a603d77800dfa8686dec37e8f27b4ba32986ae4064605f06f7db7a7d9f4273dddf5a1a117062d119eeb3d3ad2e6f90529e48d4b9fa073c6d2ea7963e5379cbb4f683b6fa289afd7aa93fbfd17af0052f525e9d3dd65e92d84dbfa663a34043c414689b38c951520114db7831fd305d6bfa7952e7e15618f5aebe4895e333db91b27445c1d9064ff6edacfdecaa1752460ad75881ce03865b7e43ed44e2d69e951b7468fa1d5d002b4ef008a520d11d8075a8b68a5fd44cffa44b99b57d499ca2be7dad938ecec184816f8b53671bca8d3404004cf8eeb9764a9e3d6f90a81adb62a3005a73886c6ea2a693bbe42a81e69a4d28b3abee12ce3b0b629b26ef8a8517855db501ed8058ae63ace58dadd5f2603d4a08716595c53da8c94e2b72a245fbd6bfd1cd3198a61358030adbd683151a462725a5b78bed03e6e36eabf12ee829678d78133868e9af2bcebdfa0597c657a9ef0f1be11b2d1dd07b6d9f92f3e198da9d7ed6623ea561f2b1bf54794da2259e6ec075876deb9154f1f9c297c444b402f0c95370ada27217be5bcc897639d2c8433a6f79922f48995a6d91623937c40e994f588eef52d6cb0d2c113132180a19c4fc68ad4a401032971fa58f45b145b5a039855b01ed6ae06bcd1631435af122f75913af5642229c5d97d568bd14ebc0200266c5aa93593f4318d443f2dfbc7e356d5a4c2b3bff397747be48634ec9426cccc5cd7e6a973d5d3275ea7e6a1380d4d885835f32c5220871fc194d00cd414d7df8362b62a36258a372a5c111b593a845d05c615bc954b3551af26b35cd084445493b25f0535bf5ce30af791c0f1f5d54762214634ef6649d9efd3d4dda3f21ffdeb459790945b96de8db461d68372af1df35693680dc604101d8572cfc3fbfef3346a14caf64f2205952ea629d88bcfac09fddcc4a085611d5983e7cbd89c27bd56ce43b6f087ac56da6819b86514c7fadeb573d027d2eb07c64f5467095529e4dcabe6f2b8864844ff2fb302a989d819fae50b0abb3864ef0f1c305cf46e4c06f53a643ff208907bf27aeb7ec4451ee15ed1118e7367435ff62e91e54156842ba6a676a3c07ee9818dbd8e8e77fccbca102bd22b620e2da8c029d3cd7b11453a74707e0a250757f9db6968114dd8e466ca1bc75f0d0d1e94b8d7123b4b5fe1bce3cbb14025d00978facd8f582f5cbf0336bf9510bc5f72cadbb3490916cd46f41f68ab2c6fbdbf24b74ff9d7b1437a35574898721c293e4d08b1141e42808e83367db7c9e93e73c1794ed7173235555a6bf33a53392c3ae11884b03ca1b00c02339798cf808c640277d5e8626ac98de6ce09a021bda760a6851881a6623c022d1ec90b92fb43c8339ca071ae4ef65c825bbb65fb41d82371c0437bf332b51f1023d40c2c86a0f42c8773ba5ce12815439f182eedd499e1a69e86f72c68583aa7cf54ff7e3f4629567218af3282901d0e004aa779cc32784276e8d1e9e97a94217a2f0280321ee090bcf5d8e5fdf1a38030d993a7cffe84ad84adb825134eff50c074505a533f9b63d4e6d2d91fa235867e978ba5d89a4beefe2eb9237efb281bda1d6809e68f86d072c255811764559e2a1294fe4df7dd81b8875bcdec8923fd980e72cf97a76068a919cd6d59c7dd934a4c3a4c141e9023e72caba79b778ae90ccbf86f12960f45d9aa45a13277f76f2379cb8736ca6654d54bb38c5489c7792b6699357c5385ee5ae7ef0519115af583b13218580054e6b80e6f35aa4de991ec70865b4b63deb89f666c537f0162280d0099adb2e8be4db06f3f92f908e56c12e2ce1e7480efbc0eb83e5d412f52195c422426512a4defa5c77fb888ac75fabae73d60001477777229eb7a73c2948e06853abdb9970ef0acec52cc5449f799ba941886af5f7a77286f2b7c6a322f5d22d202c4c2979e929165cc1430a3cddb2cf53a4c23c21cd9ab8dbd30204ac63947ac49cb17133747f9468fd0935d9ec90ea81cb906a4f0b8eb2198a9a6d0efee195f6d80dcb53c1940bc5519cd3b83c15ffb8d5f1d1e968af07784da045a7ac1a8a1dbb4cf8561ebf822b35c6e786c16d8cfa63b45f5ee1da3cf2265cfcebf1fc1c4d8b65ebba18da06e053185a89591723a7b1b57ccc1cd358f25a26affa7558426c4bf888645f63d50a30e048c0395c0a6cf193a16ea352399d1a95c86eeb475b3048bc6d52675d4905fa19a435c71e268d5206a195de9901775ceaee42ed1b61fe37e39238637bbed1d1d3093d2b76213b2c15eadc39663674933f4698d97b1e982ec1f910619fd209c94d5a5d9ffb22150410aebed11aa40984fa54eb2ce26d46f067e9c0492c17d77a7abb46b4069492d7be9f8a3f43dd22c8dc236ddcfa2a250ecb88b527465a346acf7a521b06369bac1bf771810ff139675bb02c20258eba065fa680c95b8aa9b03d62d7654de11aac1445655d4ad4da4cbc0c31696296dcdf3322277a7a5ff9d0feef3cc582d34936f5ebe244ba76ddc5ff9633cdfdeac878f3ae7efa9fae037c119f5e8b3207c96d75698cb1ea082f1d586fbfb270f8c2d05e4a16ac080d625263323001a1b0fe880df4bc3805cc39678b2f438e02214812d21bfff15f8004c1f1b98751a423c7b2ee217dc269e28409d1f92bce0b8fbc164a91dfb7405a2fa423bdad5a0798008f76c0f4d14d13c7dddc328be3642d648a26c58db92d829f920fb1b496cb563356f1bf51377bcadf8eb69404372c6a407e612f8e850e0909e80d6bacf9864bb28004c33027be49120b1df26034383662e7c585e09aa76cc27c71889deeff79337c4271642b82376dbbb4d9c66bd0127dcc2d47b9d4f1a3c1e37285f8d253f4526d39822db62c83ea843e0dee1e5b89ab470259ad76407fd87a99b7c259bdb6b0ca4add071df207ebb3c1c93b69155fc31655cb783c34154df5f4df212d4f6b6c773fbd2be0e8fa33bf4f5f243c1def3c5463c80d863ef62f51b204886ab1a9d30d8f9e28c34a51ea2b71fc2edf94106fc03b4280e1a764236452923287c868715fb7b94521e0dd74c56c92a8f4b537d0bcecc928522a530dd17202099a19f17f7b3bbc9416baa4df8a8052aecff8c98e26e93a22dcf64daca287f3bf8a68579656694d68f4cb72ac393ea64518181e6a74891524c009b8025f557b926b565d3a83867456fb4eb0f1bcd15cb5705c36799b6602ca804359a1d8770b8ddd0072ea3c6bb786fdb2146cae16e062e30c78f31df5eea9740050feba0e9028e444f725b74e83eaad7779e7243ac5d7f7e877cd1070dba662a8abb81926992e794a200be76bbb28c3011e5209f2364883b41c4aaf9957279640d2db32ae7c14b70f57263230560cc80d1cbc2ee7f5c276458a22d6abfe98b8615dcdfbbac08760e76d7dd539c7f47ae9d6717bd40254a3809b38df99ce654d2f532fd807ac944ab5a3bfeeb198f13e1e63ba9900c5900bcb620451872bbde3a6bf66d13407b442e3c07c7c58670c8ccf7a577e9bb3b1bb0a247de0f838f4a94efb16cff6ec004cb018add1458df671e3d185de91e15f0688cad76149142d847dde43016e85e380d68f9d7b5ac74a365b12d8586c7b32aa4740e15b5bfa4c8506bc0c6a09b3e9f92ebf08f7d1261657cd225c1cac7ed4511aa7deeb4d2f2e821a39f658bcd8b4c7711be40f81d4f7289a06577ce2ecf50e9bc7fc392f25901a66d2f1d49feb089c7806897421b70d442a2b6719308c9a7030ba9e389beddc5d47d59755d6ba4f803d06546db3a31c8ac05d018fc4e6399cc0aa83d390a1f4388037cc765af52f941eed02689cc5bf4e4763127f273bd8a229f20823b6cf2f30243dc57cad892051b5ae6f93ffbfef084580dad8dd62e758635380b7ced948a3f0e2eeaa00ce3b8a138b74259a3d5ae586c3c08352afe0b57490d58aaa7dd010c4e1b2f7e0ab8b78f7f846031ddd3ad8295d58d3540d45ec4a54b686a58da43073f7c5604c2bf59b01dda75a98b4ef07f7a2f54b004edbf2179923821d05f6200fcf71b1883eda3abe552b656f941a6d330be6c7a56249010deab75a125c653a824beede7870ca057175f457e0a613523ed37108b4f2de05157b247f62db3b1da528d565a95970df776671dcbc768b43c72f09c22bbea237f7fa16c5495a15b53678762828e36f83cccc81ff9eb9650546e231bebc9378d3b0598c9bcfb46bf0211295b0fb4be2e80950244879c3872c4ce05cbd72600f65dbe8850b8288785056037c95a954c3ceb5e128ba7fc344328a726eb2ac5571bc155c6b1df40f7a8a48a6abc82fe6ea9659248f8713ababee748f8ab3bd70a746dafc49dd2edbc0d197903e9cdb085039acc6d11eedb20a73badb6651140de70fbf7fce9f939d6e2e030e72fc27109b8c0ab56a79001377d9f195ae13a2e73552f585b664798d28984b860d554d98e31f90ab5612215c92b05d5aa45b49ab2b014662c150423d3b2a1e3b4d8acc9eec0cc41e7305a57932f83ff13581e48dba8b874641bf0beaf8a58dbd77b6aad0762343ebf9a8aa4072bfcb9de559151df20b4bb905b1153ed3dbe848b6c1a9c52ff0ea39ddbe52dd08962b882bd63d85cc1392a788c0265610cf01d4463367b1f03c7c205638be9f1338bd6793418bd2f1847949b4c96c740bd46a46e8b9b7dbf980a917c4f7e3b35dc1fd5b25d2f4089914886148365632dbd02c49fc284cddd26cf54a90398d1dd4065262690bffc250c38d3d7eafe826660b66a975772f5f980a8b33a568ccee82e4f1c381d59c17c6001cd03014e6d0343ccba48d9ebf2e503d4b4b98d441a46541f5a459616293753d7447220b9fd59d16a812cae0874f463ceeedbd6a15214522dd13765dd998810395f790900b9b9942c7b1b2bdb0beb868e0a2bbb14326583bb174852d18f3d1840dfb461bf50f8af4fbaa6c6dd9df1363714010f667388102af59517bc487ca457c1eb930898deaadbef0fdd52fbe65337a04844536b199d7fe0ba661e219e9e82682f59f82c45449a1239fbc34eb56ce510b394382d18952c6abf5a54d30bfa9ea35b394ac4fb37ed4830c111ed6e09274bca9c1f9dd6f28b088f76e984c43ae457a5622b1f57e3a19def81260c39116a4b5e7fe633c58e07dc55c21dca11bbd56e651a9684778cb9b9d9bb1cc86ae2f34ac6743b082ceb8cc46684b1f66653b399518c7a002760ce224313479c2cd11f455560fbdaa4957e21e73defe6e4f05acad7d40f7735f4831501fad6e65149bb90060a0a383759ad875c55594f601adfea717354e7bbe93b1bed9c2c60c13622f540d677897cfd85f9005b618f4e069c6429063239252af4dece42e0ab0849e53ef246eb9cc862aaef472d252ea49ec79cbb380302f57279575b24132683d3dd4202b9fdff5741fd7968ca4da26f6a28756bc4e7266bd619b7d6daf6a7d21a9e3b7e41661b4d5df07005949a6dafa8349fd7cc0181aac710cf6bc5f208878bfde9ba304b1c52e2b91bd1083e562580a60597f54626f10c327668f03fdc631b4d52bee355cb6096616b1608fba65ab36808cd2bd869c62eaf2c86ea518e1d35a75c9ce95e58408d86f5b303106da865a4f72f54e3623a5bff15785a32e9668da4952064a3f8a68511bc325bbc52465317be9154770d7b0314f56048473f5335cf9877b58e9a3cda4381b203c564b3987b9415fad4d15ae67eb1a808d055f21cf4783bca59468b53fb2b43abdb69bb42a85f47f3ffa430f4ddc51b233810b432a9f357d06a6886b089c2aa2db3503ec3b391a3c209f6afa7fca43f45683fd8a67e2a84d238703695cbafcf9322734b29db89cf87d945c5294dff4d588f80c0e7487ce42b371b1f29a7ca368ae791a70af42d43b25d9161edf5f2179457f4c20a905a9ad0235fbb1d76f2d0bdc34bd701bea88b09a850034edf922d27f66aaf81ff32a4edc9af5b52373ea36f6f16c9018d4cbec809b53be22a7676da0f497e12b003761588a9f0413755d7952443a43cfc09afb7e91b845f3eea774f2327343a9ddd33cd5da4f808c77a79123fae9206cf2024f2b6b6fa0afd8794f9a0f236d3ded1f511d47866d80866ef97efb5464de7cc4d4b428f3a0f68fc2619922db376d2ae69522b36fedd7c3a1b7473992b941d1b66abb72651c1cc765ed68d748760b9f3681a4b85f334a0fc00a1d5b746750ba730b60b5d9a2a749af1b03e2bbc3168cecfba24a2a76f19952d7286331f888404b4e72d2c8d998103ef49b06a64854cf7e640b2b5d25f675dbd6436c65eeb80fc1f82f68e35d5d54dcdc6649665753d3de9f124f6aef3bee527c795a612e421d7ffa66e73766b22a3049577f7a2c6eb477d0ae55c98f5fdfb7eb53035ca251848f9bd3c79b623b7a0461772875ff18ebaed05824ab2e6cb54f373f57dda9d426b090b3623d2a7344d65cba05ce43a626c0a824bf64381ffb08aa5664858dbca0d25d9730ed366ed80c022805542eae20831f143e8144ccb9b57e26cd980ca346403e160a73912d3dc8263b4c6cffa2c95d1f446f40195437e7a243b400d02f5cfee3ceca56c72e64804d0f6c7d43bee467189fd97b19556b846cc19f96d6490afc1cf5f5496843534b966833b66c97bdcd51f4fb4dd175b2b30a39aee2e1816f0b9f037615cce03a7a326a40f6cdc1505ce57f32d240184a4e1f039b0c041ff0cc5c336e920fbf30b3db648568e5b60050236c28d9d1e36582deb271f0196f32efada9b464a8de8148fd5a9f3405b7fb3191c1cf8972d16885d0a624a891e991ac3965585989179f87ceadea5ffdad0e758d2bb92760ae6d7bdd4e2695e71872134143886d86df8768b9aeee55b08df4123ae83644f0bbbc516e56525923ff492bf1b0cc748523642ea7b09a1131ea86831608558af018c4deec11246cd9e1b518787aa41fefe1cd8781a177114ecd3ebe1c2b5527e74d9d5e0f4853d15bb083b91b41837a619927dd1d8facd704013fa01ec065d3212be51a92c00afd083e4e2888d45a175a98db902be18214fe80b7f0b05762a96fdca034878ddea84788446bcdab48d57989b76541f1bf5e1280fcfc6ea65de593990207ec4ea67de126014ed306350261f2225a1dd568ca44e8dda6fac906da5b1eba679c69b08dfc0579e350faa51cd6c7be34ec2a0c7bfc65c830ce78c04795676a0c01290f08920b2cf8dc74632fd98adea6d35cb843049b9042b1970d17cd668772bbbd0b90a7451d8fe6027398707ab01dc886dc51621fae2974165bfae14a72ab6dff9e43e5589b17467845800e34ff2198f1ef6812f0a25d4d37deec3feafa77dde636f4cdefaf9c555d089b86bf599f76149c827f8c3392dd49c2d8371b5e95f3eb17b97a5a416db6194406f05ef41b45df3cfaafc19b5d6ce814636b92808de3dff262345b8fabcf7abe39d7c45cfd43f40b12672bff6cfb9716623ad50e1436e19895a72d8d19f253efc628f6d4986020051315aef35343ce44167824a53c93bcc85a4bb3e47caa60dec3ca8588ecc1ed508e4f4c526f5283cce5252105cd388726109bfd2224743d1acff6c62b45708681e4ce926b5065055e45134f1dad59454cd1b2478b3dfc65fbb5e65eaf84dd5af10148a276af41b58bf679d90090c3ed2f6e3b03bbd78edc7fd50270d24149484f8bf0e3ce2842ffafa62e7bb0cc6fbf87c6808513f3a0c59565bbb743a426bc4bf782b1f1ea748b9209474300b7e5d86dc071c8b8254399ce57fbab49f6569dfc4993f0dd57761ba4341fc53de03c7a4c06ec64da13c811080455391a022f6af1312f73099bc724a2958765126c35a7c556c2eae50aae8f0187fb52b22b93d3b8ac96d6cdabda582710f20e0167686b2d0d5153c77c379de5aeaf53b4d11e15d1c6db03b4a4d41d1a4ea06aca106a9085981693a8200aab69467eec8657cef7e5489188e990cad212be68f8ce07941704731acfe13e66aa07c03735992b82c21f91ba9fee85f7034056c490b63bee9de8ed06c285d7a9f6d262be281decbac0692bd403347a505f14154c7c7cd37a4840e1871ddcaaaca61f7930fd12841928029c6210d7c58abddd62cc433a0f61325ce33c9041e7ecf82412840760c94ec229cfd02fe22c4baf94bfa27e46a7f5e4e1d1923f1813dfbb9bb2791ee6c6d21bd25f079ec2174ba6fd37ef5fb0e7e8565fcf10cf0f5ee8cfb02954d1048880d22a44d3067db254715748a349f8a606bb8d22f6d84483c51e6f277ff62957469565ccdeeca134644c0151312fd1a8a1007806225aaf742f9246e202fd681e0465a2ecb405f0a3b7210da42b7d00bd39578d8c661ea2dbe4baa83ba53d912e37993a1a220e23250cbab07fe4ec623ce85b1c5b45af1c98e6d5c70aec5d7d78193f1c28396921e86b66ebf", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x9, 0xc, {0xc, 0x6, "fae5ab86a6108fa6712f"}}, &(0x7f0000000080)={0x0, 0x3, 0x98, @string={0x98, 0x3, "0c42938e2d720681af40bbcbc96ce26c1e9ff028338a64fe8b6e09fd29ab7b4874cb17a0d5110a4e687dfc1c696c3e89b0c5b8606952de3180b85b75627e8e11665ceae01ad4ee48ea4e9e1c91d73d8f1b087849144d58a229428216e3a14caf1f1a6297277b1fca2f8be4f528deb459fa729313ad08204b07f36dc8035dd64457c18c4e1be7880bccf4d6fe358acb90cd4957f978bb"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x16, 0x7e, "75677d1a2261ce6f5345a899ca0177da2d3792a44226cd8a68ae8cc761f707850d622346fc44088ae0db5e9a083e32a9f586a79bd1a76fb43aa40c291bd1b0a12ea78f3ae490d802feabaeb63e2f88e4120b4444bee359f322bf2192af3b468add23300f6e0001a722844860628c6d914d8f93b7857ccfb0944d87072b4c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000002c0)={0xc0, 0x5, 0x3, "394ffe"}, &(0x7f0000000340)={0x40, 0x5, 0x5, "16d0657be1"}})

36.276911653s ago: executing program 1 (id=449):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0xf, 0x5, "a1ac9d1f78"}, 0x0, 0x0}) (async)
syz_usb_connect(0x3, 0x3b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x27, 0xe6, 0x60, 0x40, 0x1199, 0xc080, 0xc64c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x6, 0xff, 0xf0, 0x88, [{{0x9, 0x4, 0x18, 0x8, 0x0, 0x94, 0x65, 0x3f, 0x4c, [@generic={0x17, 0x11, "cd95e560fecc8a0ac47533dc0a2bc2ec528ceee4df"}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9c, &(0x7f0000000100)=@string={0x9c, 0x3, "1349fcf2c514ccde9026ed30ea7285f44a28b4bdeeccb98188323f16d2705422cfd7ee83a53512bbe216eed11ea5149e0c0fb0591a16ef8f8d626b9719aa78abea76f0fb3bef71ed4bab54c8a066580a2b117b5e940c959dedbb16f315452bfb28544428c3fb26465d508a65508c2fd5e972dc17678cf6d2b9b176b990b3c0bc6af89a56e269eb59f5c06a0a00448522d30db1cc0d703ab714b5"}}]})

35.679064377s ago: executing program 1 (id=453):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000140)=0x14dd)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcf6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x22000020)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x40601)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0b45545, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240080008362fe25032c0d28e7ce153205a47c141627e1783d47a323c0a46a14553f83a0484cf5c484892e462d6058cd7536ce56cdfccfe0edfbab92aa124e7cc7e51006acc64148c9d7f5bd74f2e049ef72403c59357dddaa7851f35e2327c58486107162fa70940107ec97a0e75932ef6e814a508b6e311336908c575964cf601d0d432b1400264e6253b6f5429c0bad83e088a2607f970a3400fbe9f3b1d00b31a6b275c9d49e2805423c1c59d953b8daa3fe28fad4f9c805048dc8b494d97c6c7cee22996fe3244d58f019caac31df10fd21de51723593cb2df190f5174553d723257c", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x2000)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000300)={0xe, @win={{0x0, 0x78aa, 0x0, 0x6}, 0x4, 0xffff77ab, &(0x7f00000000c0)={{0x80000000, 0x40f069e, 0x6ce0, 0x6}, &(0x7f0000000080)={{0x0, 0x15dc, 0x7fff, 0x400}, &(0x7f0000000040)={{0x80000001, 0x0, 0x47c68597, 0x10}}}}, 0x8001, &(0x7f0000000180)="589e4d9d09ced01f3bbe359d004bd94b0a683988f651c5d6400b4ab3d78d1721509e701e439b6afbb37fca29b9ddfd0eb716bf542fa790ede990d16aefaf99c990a4a903246bd888cdbe5c8a079fc3249484d10d1ec79bf128e0dacd185041dca12c111b0f6eaea35b9e5e726be1de9d644c6bfd8d0bcebb4c450e0ae87e34639542b093b0bc513b55fb834fac280cf5be663ade7a195e9ac7d4ed7b99ea71c335638956", 0xfa}})

35.58751622s ago: executing program 1 (id=455):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000000)={0x3c, "59e99883df33215e5152253aa58fd5d0aebaf7742d05b65372f5a90abd56aba79008d9000fa0b7a266d1b1de4a08665c486cbc257101d3543b9fb2d8a536f541a27c382b81578bde42c5088f4d02f2b85d1c041575f19ce0f8b735e8678a1bd2c6b87cc8c38f09d150ed604dec21effd9de5394fef241ca2bf6e50c0d1a0c61a"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x188)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x4, {0xfff, 0x0, 0x4, 0x27}})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x3, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "ffbcd89c0aba5177"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
r7 = syz_socket_connect_nvme_tcp()
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xf, r8, 0x40, &(0x7f0000000440)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf79c5e823f2753c5fd76724828ef53f31805205c3dceb44cc4c7b3664e29fb0000")
ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0})
sendto(r7, &(0x7f0000000200)="63ba785ce8ffa99c7b28e18623206884d2a188e985f559a7f3f60e872ddda495c708b9fdbaab1a6a58eb3c371e5f09e3d8990369c17cf17e3408abf9c1ff7f2674ee9be13351b1c06ed4d3057c1473b6bb84856b23767bdef1061ed4196805eeeabd3c7130164421635d8899ec1dd46e15f3d32249cfbbd9641f5c2b8ef956f0d7bbd80ea1cbebe677226ca0c7d61f69cb93b52574b5da51df92a19cc295d01edb1e2baa9409f7a5ae19a71c4505b7adbb", 0xb1, 0x40081, &(0x7f00000002c0)=@llc={0x1a, 0x338, 0xff, 0x7c, 0x7, 0x1, @random="80c26fadb968"}, 0x80)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x411}}, {0x85, &(0x7f0000000100)=@string={0x85, 0x3, "1ca6ee9f8e62e76c3685afbf70a943f82144d67e69344840ad62b9a356c75067058f49d15560cd822f115509d3ba10c1fe9eee04042cc240a8f5ee3a189c6b641b898fda704015cefbafa34afc96443001264fd4e4d54590029e62c0ba1d27ad4c7a05744729ada8f500b112660752237effebe01f6dcd18bba7df3b81c8e4f7cf5e95"}}]})

34.864876245s ago: executing program 1 (id=456):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @vbi={0x0, 0x0, 0x59455247}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000002})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r7 = accept$alg(r6, 0x0, 0x0)
recvmsg(r7, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x1}, 0x40000102)
sendmmsg$alg(r7, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844)
sendmmsg$inet(r7, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b27975", 0x2e}], 0x2}}], 0x1, 0x8058)
syz_usb_connect(0x3, 0x54, &(0x7f0000000200)=ANY=[@ANYBLOB="120140012f818940a90541261b1c010203010902420011008040020904c708000e0100c905240600010524009fec0d240f017f800000080007000706241a8000000800a8070007"], 0x0)
syz_usb_connect$cdc_ncm(0x1, 0xd8, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x2, 0x1, 0x6, 0xb0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ace565bc2d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x8, 0x3, 0x80}, {0x6, 0x24, 0x1a, 0x3, 0x20}, [@acm={0x4, 0x24, 0x2, 0xc}, @obex={0x5, 0x24, 0x15, 0xab8}, @mdlm_detail={0x5c, 0x24, 0x13, 0x3, "4618cfa16a33750c86ac9f2563cc996098496e91669008791482663fa2e94129bb5869655761bbff6abf3ab5d1ea2efbfbc87e674fca1cae060856f7945bf0fe0525619b5ac04547a955b13494384d0057d992c266b41d16"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc1, 0x81, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x15, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8b, 0x10, 0x2, 0x8, 0x1}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0x37, &(0x7f0000000380)=@string={0x37, 0x3, "91f8083c559a2c540638dccd91edfbb54a70d4da5acdb32cb294922fcde8aba5868440b1b6d05c091ca7899d4009a05b1b74953532"}}, {0x4, &(0x7f00000003c0)=@string={0x4, 0x3, "001a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x7c, &(0x7f0000000480)=@string={0x7c, 0x3, "270775b3d2e9eacc8ce80d76ec201840d7e6778d65b454e786010709069e9fbe931b34c378c730125eb0b4d7db3e83f4a90d42fadcf960d9bb4e36c84976b5296382e206be9456985b502c90f8e9aa10a6cbd9981e39e79498976e340712429eef35ea861318f814a0929a43335f3203bb6e23be62821f7a0c8a"}}, {0x3e, &(0x7f0000000500)=@string={0x3e, 0x3, "7524206c61c07bf6481ebc9aaeacc241ceb4f6d2488f97899db96014176563a4b311698944439161a0b098fbefc9d9deb911af6e360f8901fce717d1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x440a}}]})

34.18438252s ago: executing program 1 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000000086009078008bffffff000000000000000000ee3f000000002b03"], 0xfdef)

33.863593458s ago: executing program 32 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000000086009078008bffffff000000000000000000ee3f000000002b03"], 0xfdef)

5.376850776s ago: executing program 4 (id=584):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000a00000000000000000000000ee3f000000002b03"], 0xfdef)

5.178435436s ago: executing program 4 (id=586):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x1c}}, 0x8840)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001"], 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
sync()
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0x5, 0xf5, 0x0, 0x5, 0x5, 0x0, [{0x60000000000000, 0x2, 0x4, '\x00', 0x800}, {0x8a, 0x8, 0x3, '\x00', 0x1201}, {0x7fffffffffffffff, 0x40, 0x2, '\x00', 0x1880}, {0x9, 0x8000000000000000, 0xffffffffffffffff, '\x00', 0xe05}, {0x675, 0x7, 0xaf1, '\x00', 0x508}]})
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33)

3.836365353s ago: executing program 2 (id=591):
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x121, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x121, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0xa)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000280)=0x2) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000280)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="a2c61fed536a98ad4bcd0dffa6e5a9b082804426a53e6f4ee7d5b33f5ce0d84da8", 0x21}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a"], 0x1c}], 0x1}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a"], 0x1c}], 0x1}, 0x0)

3.754981312s ago: executing program 2 (id=593):
syz_usb_connect(0x1, 0x64f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x88, 0x44, 0xa0, 0x8, 0x16d8, 0x7001, 0x37cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63d, 0x2, 0x4, 0x22, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0xa, 0x6a, 0xa8, 0x60, 0x7f, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3ccc}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x6dc, 0xbe}, {0x6, 0x24, 0x1a, 0x5, 0x29}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4b}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0xa, 0x2}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @obex={0x5, 0x24, 0x15, 0xff00}, @mbim_extended={0x8, 0x24, 0x1c, 0xb, 0x10, 0x1000}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, @uac_control={{0xa, 0x24, 0x1, 0x1000, 0x7}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x3, 0x5, [0x6, 0x4, 0x9, 0x1, 0x4], 0xc}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0xbb, "438632"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x4, 0x3, [0x4, 0x5, 0x2], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x4, 0x5, 0x4, 0x7, 0x4], 0x1e}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x5, 0x6, "7888dd15e086"}]}], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}, @generic={0xf, 0xe, "c15ff9cde71ebaf704cf48afc7"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x9, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x5, 0xe}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0xa, 0x10, [@generic={0xfa, 0x31, "baf18dd062284ab0b2bad1d2970cf3bf238d3e468d32b9df896415f5f84beee915f8f5a68c6f508927d1e5fc8fc80b7bcfbeb0fe046a498025fa2b6b3bcdb5f34401f1b723ca282c133787237492395a6a3d75046e5cf168130cf9a6336f313cdf798a82bc6fdc360fd0fb6fe449f5e61f4ff96810510f9686960f09e5d4546a8581a18b60fc49082b17b9f7085201e01a46b8ebe8813a4cdc117fef19732daf3e65accacabfc8162ea6d17e65c5821b5fd6be711f342e3ac616b0587f155bd00d9f3ecb9569e52a8a83946b41da9859613b2b7757aca6935d7d5100e584cf9eef03ba97cf98e719c278d6efa365ecf8b7ba970f3638d434"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7e, 0x4}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x8, 0xbc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xd, 0x1, 0x90, [@generic={0xcb, 0xc, "29a23ecd1afb606c2d985eee7dd446586e8bf07cd4bbdc1e46762c1ae8ac465fdff91aad5deb7ee4fafa29ca8ff46174fb4c3b666d469c0862ed26fd20e8dfff39f4bad87908011abd79fac660fcf9febcaf5c1630df0d1f5a5b7ba609c722b4ba3e835c748873ca617d091a49e0ce27a46b47fe28c8b67b364a75ca5c3b3287d9d5a2f30a872d0434910086d841276f09582f91b400e032cdf372ae9cbf86c68fed402ec3c4083129f4514ea667e837f9a302a7cc630a94ea6301286724644f247df8b1d33278c2f9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x5, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x1, 0x7, 0x1, [@generic={0xa8, 0x24, "439bd35716ea1fc8af1d0e90e61997c675677aa4cdbf7df42780675e5ee46d96e523eb8601a84d2cab37a5da867cbb2b8b932601db7c03a35161c658c18bc50b4e1ae20a977caf35d2749fca815987a0b54f293f82ad83894b55e5a2f41e6f5b10eed01b061d1da8beb0c43eeef139c92045c05bd25f9892768e0d727df7e6c31b7bf4d97560b03e4f215b45a5b4cc62892d3150f776d6c5fc5b89a24fdba7d0248c0f518379"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xe, 0x8, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8d, 0x10, 0x400, 0x7, 0x1d, 0x2, [@generic={0xbc, 0x22, "0e0cb8a085dfb9ab0661ee9276d9006169003f7da6c3062295c547e49aaa866c3ec5a12d122a3389f6d235c496186e1fadbe3daaa196df5125cd7a2cba13398055302738366920900467a3d6deb95898022a6d4a1f1361b2f5e7cb2ec04b905896bc2a29b049c42e133c55b70aa804097487df898a90dae7cd9df2c14ee298757371b1f33d927201f81e9a3138fb3cc9a90ea1ebdc826db7a8e2b33e6714555f8158254c73c594f2991dc0bdd73f0c19992a2a21eb1cd9959fa9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0xc0, 0x3, 0xd, 0x4d, 0x94, 0x27, 0x10, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "a7e1d358"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x200, 0x7ff, 0x9}, {0x6, 0x24, 0x1a, 0x7}, [@obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xe, 0x7, 0xb5}}, {{0x9, 0x5, 0x4, 0x18, 0x8, 0x76, 0xc8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfe, 0x4}, @generic={0x92, 0x10, "db9a85c03794491a5a7260c959c84862791952abd69b439ffc8b54c571a5e7f16997b7580e67da6e7f4a70871d980f4fc26e4e66af9f079f598a03646fdf02d133cc1c9752a3441c97683b08726b8a195b8c6b1fe895549303895f9aa7b70631850a5bb6f8a3d857ed52ef379ac2a04aa013c706a1a9de398907d4da304c59798b8a4adca95811f2be54f84b84e732e9"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x85, 0x0, 0xff, [@generic={0x58, 0x2, "3fe41febe5ef242e898d3c0da32456909aa87c9343cf0f4bb0df73242fbb27f76d6b0227bb2f0c6a5a012b2843a47e8e780873213ead8d45840b90b740ccfd2f8a64892e5a2b0c1297f8a30029b8f1f8f950395c2ff9"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x27, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x45, 0xb}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x3, 0xf8}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xd, 0xfe, 0x4, [@generic={0xe, 0x9, "1b2a3ab1a47fc5fe50decf42"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0xe, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x3, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x0, 0x39, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd9, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x50, 0xd, 0xc}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0xe, 0x1, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x40, 0x5, 0x5, 0x8, 0x5f}, 0x55, &(0x7f0000000800)={0x5, 0xf, 0x55, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x2, 0x0, 0x1ff, [0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x2, 0x4, 0x6, 0x55}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x2, 0x5, 0xffff, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0xd4, 0x5, 0xd83d, 0xff00, 0x7f, [0xffc030, 0x3f00, 0x1f40, 0x0, 0xff3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x0, 0x881}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2810}}]})

3.716260617s ago: executing program 4 (id=594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000a10000000000000000000000ee3f000000002b03"], 0xfdef)

3.599568948s ago: executing program 0 (id=596):
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r0=>0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r0, 0x7}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x0, 0x75d, 0x7}, 0xffffff21)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xd6, 0xb4, 0x59, 0x20, 0x12d1, 0x534f, 0x6c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0x80, 0x9, [{{0x9, 0x4, 0xa8, 0x4, 0x0, 0xff, 0x3, 0x65, 0xea}}]}}]}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3.573308431s ago: executing program 4 (id=597):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040))
syz_usb_ep_write(r0, 0x9, 0xe9, &(0x7f00000000c0)="8bc99667d97298ce1cf527f04a4911a0acfe6f5551fdbb542ed2792e71e8e30600ea0725c7f3c67e1816624cb827a9dd6de8de89c99b751e715a5e2cec7dcf2636debe7ad00e470959c4a51ea834be39a940448c619484283a189912ca95b4f9036e84dfa009dbcd182cd7f515b5cff0459a1a4981717e1d1a262ffc73dd53321fd39b0f6a70d1d86817f8bef5b7080fe510aa5bab452da95c7de0fb312cb76dfb8e63ed4e21ea2be7099858b801e5fd2d83f4d3be64b8e8c5bccb2f683d956288553facb000912643a1440bb917f8be72fe5a84bb6eb7e2830df0bc26ca296f9d7c0bd119f9d13a52")
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)=ANY=[])
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r3, &(0x7f00000000c0)=""/177, 0xb1)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000380)={0x14, &(0x7f0000000080)={0x20, 0x5, 0x3a, {0x3a, 0x24, "e7e8fbbc9e845aedc117b5d77cd5be38d731d0013ea6282459ba8078d467fc9c417aba3cd5495e67ea0ca844cb23afc2d6fffc8142932532"}}, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000940)={0x1c, &(0x7f00000003c0)={0x40, 0x8, 0xd0, "f9bf5ab66e0201cb6278709593ed0ddaa9df98543a4479235ff88cdc131df36c2bc2e262dfa10efe05482ddaf84ca1248056657dc01df25ea34236f510c801e43147c8510292eafa81a06fd08abf39724db143bdd8a258babba16e13365d0101380d3c82d29a5b343839d7cd1244d89f00192b7079f25c5cfffca963c9f3a26b8cc88860cfb30fe361fa860729961c2c32e997933ed0add2a9a6ec824f613e5b0ad952e35ce36384500bc29e16e6eb6e2e75e244e71678f1c24da20e10e5ec6281c3ea23d1251594d4e66e73cbe18b3a"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000980)=ANY=[]})
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) (async)
syz_usb_ep_write(r0, 0x9, 0xe9, &(0x7f00000000c0)="8bc99667d97298ce1cf527f04a4911a0acfe6f5551fdbb542ed2792e71e8e30600ea0725c7f3c67e1816624cb827a9dd6de8de89c99b751e715a5e2cec7dcf2636debe7ad00e470959c4a51ea834be39a940448c619484283a189912ca95b4f9036e84dfa009dbcd182cd7f515b5cff0459a1a4981717e1d1a262ffc73dd53321fd39b0f6a70d1d86817f8bef5b7080fe510aa5bab452da95c7de0fb312cb76dfb8e63ed4e21ea2be7099858b801e5fd2d83f4d3be64b8e8c5bccb2f683d956288553facb000912643a1440bb917f8be72fe5a84bb6eb7e2830df0bc26ca296f9d7c0bd119f9d13a52") (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) (async)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)=ANY=[]) (async)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read(r3, &(0x7f00000000c0)=""/177, 0xb1) (async)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000380)={0x14, &(0x7f0000000080)={0x20, 0x5, 0x3a, {0x3a, 0x24, "e7e8fbbc9e845aedc117b5d77cd5be38d731d0013ea6282459ba8078d467fc9c417aba3cd5495e67ea0ca844cb23afc2d6fffc8142932532"}}, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000940)={0x1c, &(0x7f00000003c0)={0x40, 0x8, 0xd0, "f9bf5ab66e0201cb6278709593ed0ddaa9df98543a4479235ff88cdc131df36c2bc2e262dfa10efe05482ddaf84ca1248056657dc01df25ea34236f510c801e43147c8510292eafa81a06fd08abf39724db143bdd8a258babba16e13365d0101380d3c82d29a5b343839d7cd1244d89f00192b7079f25c5cfffca963c9f3a26b8cc88860cfb30fe361fa860729961c2c32e997933ed0add2a9a6ec824f613e5b0ad952e35ce36384500bc29e16e6eb6e2e75e244e71678f1c24da20e10e5ec6281c3ea23d1251594d4e66e73cbe18b3a"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000980)=ANY=[]}) (async)

3.343755716s ago: executing program 3 (id=600):
socket(0x1e, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10a, 0x0, 0x6}]})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

3.186750394s ago: executing program 3 (id=601):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}], 0x2, 0x5, 0x2, 0x3)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r4=>0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x14e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x25000, 0xffffffff, 0xe, 0xf1, 0x3, 0xfd, 0xd4, 0xd4, 0x0, 0xb, 0xf7, 0x4f}, {0x0, 0x2, 0xd, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0xf, 0x3, 0xd}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x89, 0x5, 0x96, 0xc4, 0x5}, {0x26000, 0x80a0000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0x30000, 0x9, 0x1, 0x7, 0x9, 0xd, 0x6, 0x5, 0x9, 0xff, 0x4b}, {0x6000, 0xeeee0000, 0xa, 0x0, 0x3, 0x1, 0x1, 0x83, 0x4, 0x90, 0x1, 0xfc}, {0xeeee0000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x1, 0x7, 0x43, 0xf9}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0xf7, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0xffffffffffff7248, 0xc5]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001})
ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999})
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000080)=0xd8, 0x9, 0x0)
io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

3.055874396s ago: executing program 0 (id=602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000880) (async, rerun: 32)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe45) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380)="ab1d4c6cab102413f85d6a9aeda37924d44b2fc87b3273eb070d60fce379cfe6e54eba484e53305cba3658413c315082994565898596d418e21c57292ea985c2a113eb0b8ec7b8daa7c668ea4a4315e574be94d4a4fe712323db21ec2377291093341eebf89175e8eb51531412c145d9c782ccb7948ba4526bbc7b5d1462a3307e6255da4e6eae5c0b6c4fde3a237caab7fec9ae27aa5d265f6fdd606f71c2f9fed1e62607959deca48aa5187e7a5a3bf7730dca34fc44ee3c5d36101fa45ca4073279b7d16a50f9", 0xc8, r2}, 0x68) (async)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xffffffff, 0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffede, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000050004000000000005000400000000000900020073797a30000000000c00078008000640fffff53905000500020000000500ab532c0f4a8bd46301000600000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 32)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async)
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r3, r3) (async, rerun: 32)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32)
chdir(&(0x7f0000000140)='./bus\x00')
setpgid(0x0, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[@nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x648f, 0x2, 0xff}}, @wr_crn={0x67, 0x20, {0x2, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x70})
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000090601030000000000000000050000020900020073797a310000000005000100070000000900020073797a31000000000500168008000140ac14143e100007800900130073797a31000000000c00078005000700840000000c00078006001d40000800000c000780050007003f000000100007800c00148008000140e00000011c0007801800148014000240fe880000000000000000000000000001100007800900120073797a30000000000c000780060005404e2200000c00078008000a40000002000900020073797a30000000000900020073797a31000000000800094000000004"], 0xf8}, 0x1, 0x0, 0x0, 0xc800}, 0x4000001)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r6, 0x1, 0xb, 0x6, @multicast}, 0x14) (async)
sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) (async, rerun: 64)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)={0x4f8, 0x13, 0x200, 0x70bd2a, 0x25dfdbfb, {0x9, 0x20, 0x1, 0x9, {0x4e24, 0x4e24, [0x5, 0x3, 0x2, 0x9], [0x699, 0x0, 0x4, 0xee], r6, [0x400, 0x7]}, 0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "57d423b74fba8bf28ea9621f79"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "7b094d8b062d3000591d401df904625cd02f18776a72715a493f4d7c9409ae4e2f0d9eb43915b3b447c2f3142189ccd7869c448df29fe05693fb1fca9850c02ebaaed080890d21f4bbe6f25d62a0b0ced93ebc9ca50047fdf53e1191aa77a08c8e5cb29d590fcdd948075afa1cd86c87d838bfcb18f67de548902bcb2fd6668d75f1fb21bf7e1377d8c60d1d774632e49ce135b81bf04a331137fc36424e5c6cbd94585e080886389b84a3e7dedc7078c55feccdadcfcaf2ce201dd55d35c1fa200ce6bb33337d8f17d2868f45646edc9b7e7f0cc227ff45e7729b33a9400960d82b194d5fed37482a547d"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "83a0c186824b90e71048c856fb535b30fa83d157484eaf0737dad705ad51df5bc6993ebbd5e507cd3262850e39c73af4ad7e457c93b645a6f832d483458c41bb1131f79cf12569177ae96eaa28b699"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "9f2749479733b7af710262fadacf6eff6cd5555e1394ee7ce46fac7b0fc796b61af3ffa9f8f48e782309af3deb558f6605331445780d22fd95bacb29cc59ebaa84608a39276d4d1a30c4796aeacb2a0e4a132bbaef8b5a405b01ba0ef6601012bd14bd86bebb65b3eaac4c0646a61a45b17435b447552d25"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "050199838106267717a487cf73ba558b372d42ac60c3704c213bd2af8f127364339afdd61c9d84181123fad19563276cc2bd741f3a4f4d3972bf0b396326e41bad7e49b487dee7068c94f6eb0e7cb1e9b55ca19650d5079184a437f6caf947ffdffb0d2a873554903c307d2f2910a2430beb719cd4c4b438b5e1fa86dd2b2730c927c61b025dd6f7c67f4b6ee89e5c1849acdabfa14cbfa6c97e9bec0caf85e1fd9effc6f2967b0d9850d8b59fc5f37a3a081163324d258dfe3cc653164ef2246a421b"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "efd51c570fb7bff8cc01175baa04bfbd0e49eb724aeb73d84c0306fa1d17512c0b0f354077aa9b60580fb353ce17693205407909ffa49fb5e71ff97b90af642d9aad271d323139b983e6e214add1564e7e32fcc16fdc140a4ba41a736de0e892541f6f90c4cb8e557ece0e0e19d3c7666d8fb866edc1307548f510a4de372b16e337d0984ff491ea777017d4a5b4443c4e8e17f8f537e5"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "644cf6f381d37449060a26de40f59d2268fdd14691555a435e023143349bf0527c99c4c4904a0a7decadb314b7ad2b4a262cf319da7c686c6fb461985be2f77b24c4541b5df6b2a6ee41b6e2a5cdf9551b8a46608bcc631d0a700ef04eb85b6521a9d38b7e826548458e168fab32c7df7604c14d89b8ed7ec9ba3898f34b5ff3ddbb6f2e10ace54d1a5972452159650db206cd107abbb0503f41527b4c0f5c4bc3a5e2560ff0b6f4543306bb1a333ff49ed261c3557851ea8c1ce43ee4711c3b1a1f707f42ab67ab3b0722555fcfd462f93a28ee56da7d"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "8b94cdd4397a511adbbfac93db7526bd2bc5ec33655165c9ab36b913fa9384fbf21dfb1dcce9c31d02d24d806f125fdf4c7bd8238687c9a210e6e8ae39a523b55d92213a7920cb1727b881af20c0a6626eeb3d8cef59cffef471ef99992cfcc93f8c1351b2c0e905e9f81a552510032eabb7fe0da8698b1128f0faa5cd3cc40d2d024de558bac38fb4dd0661165b7f8d227d"}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x24008081}, 0x90) (rerun: 64)

2.956002471s ago: executing program 0 (id=603):
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000086e051c014000010203010902b7bf0d9166f4b13124bd31e5398b5ae82d0001010009040025011e3477629c731b13dd1b94610886795e41dfb852d6dc3ca4e4df11fa0e90d3b492f0a78b19799f65be00000000000000"], 0x0) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)

2.897972325s ago: executing program 3 (id=604):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, <r6=>0x0})
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
read$FUSE(r7, &(0x7f0000005140)={0x2020}, 0x2020)
read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x7f, 0x0, 0x3, [], [0x0, 0xfffffffc, 0x9], [0x0, 0x9, 0x2], [0xffffffffffffffff, 0x0, 0x7fff, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000140)={r6})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40)

2.851936753s ago: executing program 3 (id=605):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000f50000000000000000000000ee3f000000002b03"], 0xfdef)

2.712485819s ago: executing program 3 (id=606):
socket$inet(0x2, 0x400000000000000e, 0x7)

2.712338009s ago: executing program 3 (id=607):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="e7282f000000"], 0x0, 0x0, 0x0, 0x0})

1.814927542s ago: executing program 0 (id=608):
syz_usb_connect(0x5, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021a000100000000090400", @ANYRES32, @ANYRES32], 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x10, 0xb, 0x5778, 0x8, {0x401, 0x40, 0x7f, 0x400f, 0x6, 0xfffe, 0x6, 0x6, 0x0, 0x9cea, 0x2, 0xfff, 0x783b, 0x0, "df3230788dc8efa0c04d638ab166b1dd4b9c2285c738c8fd8939bec8e0613e1c"}})
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086603, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x6d, 0x2, 0x80, "fd7e60d31c3c3c987a511afeaef249013f1bcd5a9121073ff6c88d6446a0d67c", 0x41414270})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x12})

665.12544ms ago: executing program 2 (id=609):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x20000000, &(0x7f0000000200))
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x90b, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="4c494e4520274c6931303030303030303030303030303030300a564f4c554d450a4c494e4520274c699f45bc11e32431cd1e2efc006e652043617074757265272030303030303030303030303030303030303030300a414c5450434d20274d617374657220506c61796261636b20566f6c756d652722"], 0x8c)
close(r8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x802, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
inotify_init()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

527.693093ms ago: executing program 0 (id=610):
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r0=>0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r0, 0x7}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x0, 0x75d, 0x7}, 0xffffff21)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
syz_usb_connect(0x6, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xd6, 0xb4, 0x59, 0x20, 0x12d1, 0x534f, 0x6c12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0x80, 0x9, [{{0x9, 0x4, 0xa8, 0x4, 0x0, 0xff, 0x3, 0x65, 0xea}}]}}]}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

526.315113ms ago: executing program 2 (id=611):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x215, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) (async, rerun: 32)
r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (rerun: 32)
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async)
truncate(&(0x7f0000001580)='./file1\x00', 0xd4) (async)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5)
r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (async, rerun: 64)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000040)={0x7, 0x1000000}) (async, rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (rerun: 64)
r9 = fsmount(r7, 0x1, 0x18)
ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000440)=0xdb)
symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') (async)
openat2(r9, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) (async)
syz_clone(0x400, &(0x7f00000001c0)="4aefb04306ba6cdfac1e00f985d8c50d2e28bb72553f3182529f3a2feed36714a17cd903dbbd214b33061ca5fbd09e6d840927885815796aafa5ff1b907f876fbd7825d898e3f28421eab6", 0x4b, &(0x7f0000000400), &(0x7f0000000580), &(0x7f0000000480)="c72d3e8f37b56e4edcafc8da4b27ffa6256d255377b874c4ed222328a8a4707ac2db06c8a3bef32bba305a346c76af220a857662bfc7728b9c6ba9fa8f84ee698f6775147eb704c7837ea6145d672374e1f7cb896e0c0ce842e723237bb48afa8fd2a220b5ac49415deb7a1d21bb0fa536105e521cc9c48af7037d37c40b5f21924fa147955c26b4d0b63fd5d2d4f6ee5f5afef688a6d3cd4fc2a8325f5e4ce4baebd4eda5e8d0cae6673e2bb127ca43e4c012b3a73b9cd0402afddf54600d062a3e51ab311ca6b93a068798dbf4f6d95b2b5a5ab457bf960dce7d8a7ad8ca132a2a37d3c6ad1726113d36f8658b5a5ba0b2cfd4513d3ddc54")
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10)
sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x14, r11, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffc888)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090025bd7000fddbdf25060000000800320100030000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

509.662156ms ago: executing program 4 (id=612):
r0 = socket(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\xdb\xc9:t\vt,)\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd6\f\xfe\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95\t\x00\x00\x00\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\x02\xe8rP>R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\xed\xceH\x891\x9e\v4Q\xee]\x96W\xb9(<\xd1\xbb\x94\xc8\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xe8\'\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00d\xeex\xb3\xc3J\xc7\x1f\xe33\x14\x16T\x1bb\xc0\x9c\x12\x00'/378)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)='/dev/kvm\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_eee={0x44, 0xfffffff8, 0x3, 0x9, 0xf940, 0x10003, 0xfffffff7, 0x5, [0x800, 0x10003]}})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x2, 0x0, 0xddffb000, 0x1000, &(0x7f0000ffb000/0x1000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000002c0)='team_slave_0\x00')
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$inet6(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5e54e56d2a6e28b26d51623590ebc674da93883e8c628a600b17cb0700d2e73c68141965f3fbcf0e", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b00f9f000000c4b0000000077e91c020583a359434a7f06f9b68ca19fb5068753f95a292acca73debe6c7da7f877eb4ce0cfe22f85bbd8ef754bf290390282048472e02ddbde059075139ccb77d"], 0x18}}], 0x2, 0x30044080)

426.083301ms ago: executing program 2 (id=613):
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x204401)
read$hidraw(r0, &(0x7f0000000040)=""/240, 0xf0)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000140))
close_range(r0, r0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', <r3=>0x0, 0x10, 0x40, 0x0, 0x4, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0x90, [@multicast2, @multicast2]}, @ssrr={0x89, 0x13, 0x60, [@broadcast, @loopback, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0x1b, 0x69, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, @remote, @multicast2]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x9, 0xba, 0x400, 0x6, @local, @remote, 0x700, 0x7, 0x1, 0x5}})
r4 = open(&(0x7f0000000400)='./file0\x00', 0x800, 0x6591c27eeb096361)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x4, 0x0, [{0xb, 0x48, 0x2, 0x6, 0x1, 0xc33b, 0x5}, {0x80000019, 0x5, 0x0, 0x65e, 0x9, 0x200, 0x142}, {0x1, 0x10000, 0x1, 0x5, 0xc399, 0x0, 0x7}, {0xc0000000, 0x4, 0x4, 0x8, 0x6, 0x401, 0x6}]})
r5 = fsmount(r4, 0x1, 0x4)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000301, r7, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r4)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000b80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x430, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "0888245381c30b443f10c3c98b350f909a317b8d75800318eeebbfdb204045d0e33a7d509d7451796c955f337df2a3b1e395a19b0fabda85e0866d632cad4ae2454939356f045944597bea6572b774c4e23634f64b6f961283cc7661e44a10bb747479f162a918d7793c1ef1"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "c7595d07085f1db1f893a3ac7219ae2a5a48343514f5f96c0f28821d2e24295693be6f42a962aeded310bdc529d090afde0521a0332bd21e3ab11ab1b59918ecd7f075a5ef1b6bb61cdfd5c49f398697956c953f20458f7644b606fdd399cd6e0d80dffe8eedc6fc4d9baaa75dce9376a5898cd17e1b529a3fa54024cd6b75722004647dd4e251f9006650779988bfae3a858ef9f917444ccac5205df7508c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x10, 0x4, "8861c39c6c7387d222214eb4"}, @ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "a00c190b27cf98ecd4211ffbd60c7c2b487b25f3a658a809d2637a2945a40fe6df94387015bba24439632d37781167af8d17a405440ac4e0c701779d5f4a14ac99e6d681c43c0d8d147e971659002163bdfc0b86d756878ed304e28bfb523bb6881866bedb35acbf953eb60f92cb03e02156a53d83a4d99658cc4c1f8dce105c5bbfeec9ac78c6b97b50f5bf37f2de16dbb3693af4d853bf79fe043ed7fb691fbbc8bdd9b5f2944ce91efccae1fc3c67db1d18ae1395428e52282f40ca935a62bb419faeabd24efd83843a4c356cd57efb9148ae967e167fc38c67e451aec276b03f2fb1aa8617fbac27"}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "0fa8a66551a542ad6a374f83b2089ea5eab3e7b7b439a091b11d3d04a82b5ea47b26f13217e4409ed2d085a016644241f9865d6567"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "f8afa0a222b7e3302d4e2ae9844ad23ea8a2ec47fb89ba0be4b605590bb6615d370efc363190d6de9885efbd876b181f8e28a9fbb06d8357ad391417a214d49527a60cb9b09730494285d64d2198e183f102d86cf5467238b17ddd3410"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "7904fcf2edaaeb005c11a019f8052592fb998c5b587544206162e5f4699a230940c0633fe1d6a56d37349fec02ce85c256ec06ed9eb2eacc9ca2622c848b34590b1dd46fd1f0168d40622ec172a0650e438f87a4f33e6b3efb06e1f7e0819c154a7440b836d08b3ad0565d62d114a1d1c47f8b6f06f936399f3921fc3a9f23f07c7f14565f7eb55fb1d58191597f3edac85c0d41"}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x80}, 0x44)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000bc0)='wlan0\x00', 0x10)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000d00)={&(0x7f0000000c00)=""/230, 0xe6, 0x2, 0x40})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000d40), &(0x7f0000000d80)=0x4)
mount$nfs(&(0x7f0000000dc0)='/dev/video0\x00', &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x400, &(0x7f0000000e80)={[{}, {}, {'netdevsim0\x00'}, {'ip6tnl0\x00'}, {'\x00'}, {'/-'}, {'erspan0\x00'}, {'$^}#\xcb-'}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, ')'}}, {@hash}, {@euid_gt={'euid>', r7}}]})
ioctl$TIOCCONS(r5, 0x541d)
mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000001, 0x10010, r4, 0x83000000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
read$FUSE(r5, &(0x7f0000000f80)={0x2020, 0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000002fc0)={0x50, 0xfffffffffffffff5, r11, {0x7, 0x2d, 0xfffffffd, 0xffffffff84c01e42, 0x1, 0xfeff, 0xfffffffa, 0x400, 0x0, 0x0, 0x100, 0xd}}, 0x50)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000030c0)={0xa3b2aa1859db12fd, 0x3, "ccebc86c93a9aa688db374670f8f5fc39586306a4ebbf829706d53912ad08224", 0x0, 0x9, 0x6, 0xc000000000000000, 0x7, 0x7fff, 0x2, 0x7, [0x6, 0x14, 0xfffff1f9, 0x5]})

299.215773ms ago: executing program 4 (id=614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000300000000000000000000ee3f000000002b03"], 0xfdef)

296.595434ms ago: executing program 2 (id=615):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000480)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae766eaa89242095d08762", 0xfffffffffffffe04, 0x4000800, &(0x7f00000003c0)={0x11, 0x10, r2, 0x1, 0x5c, 0x6, @random="5d03fb4c47e4"}, 0x14)
waitid(0x0, 0x0, 0x0, 0x61000006, &(0x7f0000000380))

0s ago: executing program 0 (id=616):
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r1=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000880)={0x0, 0x0, r1})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r2=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x10, 0x2, {0xffffffffffffffff}, {<r3=>0xee01}, 0x80, 0x1})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0xb, 0x85, {r2}, {r3}, 0x2, 0x7})

kernel console output (not intermixed with test programs):

 device disconnected
[  115.055905][ T5840] usb 2-1: Product: syz
[  115.060142][ T5840] usb 2-1: Manufacturer: syz
[  115.065962][ T5840] usb 2-1: SerialNumber: syz
[  115.074644][ T5840] usb 2-1: config 0 descriptor??
[  115.086310][ T6649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.093620][ T6649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.306688][ T6649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.314028][ T6649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.451944][   T24] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state.
[  115.462871][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  115.473099][   T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T)
[  115.483050][   T24] usb 1-1: media controller created
[  115.496440][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.505904][   T87] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  115.531114][ T5840] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  115.547915][ T5840] usb 2-1: USB disconnect, device number 25
[  115.664647][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.673953][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.690587][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.698991][   T87] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  115.699018][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.699055][   T87] usb 4-1: Product: syz
[  115.699068][   T87] usb 4-1: Manufacturer: syz
[  115.712385][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.732955][   T87] usb 4-1: SerialNumber: syz
[  115.767530][   T87] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  115.816966][ T5912] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  115.905239][   T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T'
[  115.913920][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  115.924349][   T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T)
[  115.926275][   T35] tipc: Subscription rejected, illegal request
[  115.933485][   T24] usb 1-1: media controller created
[  115.943464][ T6688] netlink: 'syz.2.233': attribute type 21 has an invalid length.
[  115.959864][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.978273][   T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T'
[  116.030474][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.042910][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  116.049656][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.059146][   T24] Registered IR keymap rc-empty
[  116.064430][   T24] dvb-usb: could not initialize remote control.
[  116.072133][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.080797][   T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected.
[  116.091075][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.107514][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.116617][   T24] usb 1-1: USB disconnect, device number 24
[  116.145988][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.157495][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.171038][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.180971][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.190536][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.223989][   T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected.
[  116.395137][   T87] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  116.555111][   T87] usb 2-1: Using ep0 maxpacket: 32
[  116.560375][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  116.570348][   T87] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  116.581816][   T87] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  116.590970][   T87] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.605741][   T87] usb 2-1: config 0 descriptor??
[  116.614616][   T87] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  116.734216][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.745383][   T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  116.754477][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.769648][   T24] usb 1-1: config 0 descriptor??
[  116.784474][ T6694] overlayfs: upper fs does not support file handles, falling back to index=off.
[  116.857776][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.871234][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.925189][ T5912] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  116.933360][ T5912] ath9k_htc: Failed to initialize the device
[  116.959439][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized
[  117.191683][   T24] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  117.203728][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input20
[  117.299366][   T24] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  117.617625][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'.
[  117.738597][   T24] usb 1-1: USB disconnect, device number 25
[  118.135264][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  118.331380][   T87] usb 4-1: USB disconnect, device number 17
[  118.376216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  118.451122][ T6716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.715178][ T5828] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  118.755581][   T87] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  118.909352][ T5828] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  118.931068][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.948990][ T5828] usb 3-1: Product: syz
[  118.958513][ T5828] usb 3-1: Manufacturer: syz
[  118.959576][   T87] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  118.995403][ T5828] usb 3-1: SerialNumber: syz
[  119.001715][   T87] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  119.011507][ T5828] usb 3-1: config 0 descriptor??
[  119.035132][   T87] usb 4-1: Product: syz
[  119.043625][ T5828] gspca_main: sunplus-2.14.0 probing 055f:c230
[  119.044620][   T87] usb 4-1: Manufacturer: syz
[  119.065747][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  119.082185][   T87] usb 4-1: SerialNumber: syz
[  119.098740][   T87] usb 4-1: config 0 descriptor??
[  119.114675][   T87] ch341 4-1:0.0: ch341-uart converter detected
[  119.368987][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.398605][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.666437][ T6729] netlink: 'syz.0.247': attribute type 4 has an invalid length.
[  120.231768][   T87] ch341-uart ttyUSB0: failed to read break control: -121
[  120.239064][   T87] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  120.458420][   T24] usb 4-1: USB disconnect, device number 18
[  120.466601][   T24] ch341 4-1:0.0: device disconnected
[  120.645159][ T5912] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  120.807635][ T5912] usb 1-1: config 1 interface 0 altsetting 244 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  120.820367][ T5912] usb 1-1: config 1 interface 0 altsetting 244 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[  120.833671][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0
[  120.842730][ T5912] usb 1-1: New USB device found, idVendor=150a, idProduct=1201, bcdDevice= 0.40
[  120.851967][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.857190][ T6751] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  120.860112][ T5912] usb 1-1: Product: syz
[  120.874499][ T5912] usb 1-1: Manufacturer: ᠌
[  120.879801][ T5912] usb 1-1: SerialNumber: syz
[  120.888157][ T6743] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  121.159508][ T5912] usbhid 1-1:1.0: can't add hid device: -71
[  121.166636][ T5912] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  121.182511][ T5912] usb 1-1: USB disconnect, device number 27
[  121.235234][   T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  121.396205][   T24] usb 4-1: Using ep0 maxpacket: 32
[  121.402931][   T24] usb 4-1: config 0 has an invalid interface number: 112 but max is 0
[  121.411894][   T24] usb 4-1: config 0 has no interface number 0
[  121.420273][   T24] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  121.429400][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.437460][   T24] usb 4-1: Product: syz
[  121.441651][   T24] usb 4-1: Manufacturer: syz
[  121.446281][   T24] usb 4-1: SerialNumber: syz
[  121.452721][   T24] usb 4-1: config 0 descriptor??
[  121.461129][   T24] gspca_main: conex-2.14.0 probing 0572:0041
[  121.537159][ T5911] usb 3-1: USB disconnect, device number 25
[  121.690349][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.703127][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.725951][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.737321][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.753644][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.764415][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.767169][ T6762] dvmrp0: left allmulticast mode
[  121.801657][   T24] usb 4-1: USB disconnect, device number 19
[  121.897915][ T5911] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  122.067277][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  122.074309][ T5911] usb 3-1: config 0 has an invalid interface number: 112 but max is 0
[  122.082747][ T5911] usb 3-1: config 0 has no interface number 0
[  122.093559][ T5911] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  122.103989][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.112212][ T5911] usb 3-1: Product: syz
[  122.117237][ T5911] usb 3-1: Manufacturer: syz
[  122.121856][ T5911] usb 3-1: SerialNumber: syz
[  122.130380][ T5911] usb 3-1: config 0 descriptor??
[  122.140608][ T5911] gspca_main: conex-2.14.0 probing 0572:0041
[  122.482780][ T5911] usb 3-1: USB disconnect, device number 26
[  122.595392][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.607423][ T6783] program syz.3.263 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.622869][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.955164][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  123.074716][   T29] audit: type=1326 audit(1769415268.289:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994319acb9 code=0x7fc00000
[  123.110731][   T29] audit: type=1326 audit(1769415268.289:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f994319acb9 code=0x7fc00000
[  123.136805][   T29] audit: type=1326 audit(1769415268.289:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994319acb9 code=0x7fc00000
[  123.161995][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.173663][   T29] audit: type=1326 audit(1769415268.289:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994319acb9 code=0x7fc00000
[  123.195694][   T87] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[  123.203584][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.216352][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.230473][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.251063][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.265762][   T10] usb 1-1: config 0 descriptor??
[  123.332436][   T87] usb 3-1: device descriptor read/64, error -71
[  123.403536][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'.
[  123.517589][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.529616][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.595165][   T87] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  123.692545][   T10] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe
[  123.700282][   T10] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  123.714857][   T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  123.725647][   T87] usb 3-1: device descriptor read/64, error -71
[  123.805317][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  123.855772][   T87] usb usb3-port1: attempt power cycle
[  123.894912][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.904797][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.923570][ T5840] usb 1-1: USB disconnect, device number 28
[  123.976449][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  123.983898][ T5912] usb 4-1: config 0 has an invalid interface number: 112 but max is 0
[  123.993191][ T5912] usb 4-1: config 0 has no interface number 0
[  124.003167][ T5912] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  124.014223][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.022283][ T5912] usb 4-1: Product: syz
[  124.029499][ T5912] usb 4-1: Manufacturer: syz
[  124.034124][ T5912] usb 4-1: SerialNumber: syz
[  124.041505][ T5912] usb 4-1: config 0 descriptor??
[  124.056017][ T5912] gspca_main: conex-2.14.0 probing 0572:0041
[  124.197043][   T87] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  124.197304][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'.
[  124.263034][   T87] usb 3-1: device descriptor read/8, error -71
[  124.353364][ T5912] usb 4-1: USB disconnect, device number 20
[  124.481153][ T6859] pim6reg1: entered promiscuous mode
[  124.487095][ T6859] pim6reg1: entered allmulticast mode
[  124.519709][   T87] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  124.546915][   T87] usb 3-1: device descriptor read/8, error -71
[  124.559565][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.569266][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.616928][ T6866] netlink: 128 bytes leftover after parsing attributes in process `syz.0.287'.
[  124.665571][   T87] usb usb3-port1: unable to enumerate USB device
[  124.823030][ T6871] overlayfs: failed to resolve './file1': -2
[  125.075282][ T5828] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  125.215729][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  125.227586][ T5828] usb 4-1: config 8 has an invalid interface number: 60 but max is 0
[  125.235829][ T5828] usb 4-1: config 8 has an invalid interface number: 3 but max is 0
[  125.243797][ T5828] usb 4-1: config 8 has an invalid descriptor of length 172, skipping remainder of the config
[  125.254759][ T5828] usb 4-1: config 8 has 2 interfaces, different from the descriptor's value: 1
[  125.264166][ T5828] usb 4-1: config 8 has no interface number 0
[  125.270723][ T5828] usb 4-1: config 8 has no interface number 1
[  125.277877][ T5828] usb 4-1: config 8 interface 60 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  125.290984][ T5828] usb 4-1: too many endpoints for config 8 interface 3 altsetting 16: 32, using maximum allowed: 30
[  125.302076][ T5828] usb 4-1: config 8 interface 3 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  125.316153][ T5828] usb 4-1: config 8 interface 60 has no altsetting 0
[  125.322899][ T5828] usb 4-1: config 8 interface 3 has no altsetting 0
[  125.329616][ T5828] usb 4-1: New USB device found, idVendor=0b63, idProduct=6530, bcdDevice= d.89
[  125.338901][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.396628][   T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.409437][   T10] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.422357][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  125.429109][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  125.438294][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.455842][   T10] usb 1-1: config 0 descriptor??
[  125.598419][ T5828] usb 4-1: string descriptor 0 read error: -71
[  125.617802][ T5828] pl2303 4-1:8.60: required endpoints missing
[  125.631135][ T5828] pl2303 4-1:8.3: required endpoints missing
[  125.649407][ T5828] usb 4-1: USB disconnect, device number 21
[  125.840724][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.849612][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.877960][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  125.888711][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  125.900168][   T10] usb 1-1: USB disconnect, device number 29
[  125.960332][ T6906] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  125.970555][ T6906] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  125.979483][ T6906] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  126.049838][ T6911] syzkaller1: entered promiscuous mode
[  126.055748][ T6911] syzkaller1: entered allmulticast mode
[  126.064318][ T6911] netlink: 'syz.2.300': attribute type 4 has an invalid length.
[  126.128516][ T6913] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.301'.
[  126.426644][   T87] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  126.439701][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.462287][ T6936] netlink: 37 bytes leftover after parsing attributes in process `syz.1.309'.
[  126.475748][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.568011][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  126.598228][   T87] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.611326][   T87] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.628015][   T87] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.637435][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.646669][   T87] usb 4-1: Product: syz
[  126.650870][   T87] usb 4-1: Manufacturer: syz
[  126.655692][   T87] usb 4-1: SerialNumber: syz
[  126.685930][   T87] usb 4-1: bad CDC descriptors
[  126.719324][ T6951] cgroup: Unknown subsys name 'io'
[  126.745266][   T10] usb 3-1: Using ep0 maxpacket: 16
[  126.752358][   T10] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  126.768145][   T10] usb 3-1: config 252 has no interface number 0
[  126.785118][   T10] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  126.824072][   T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  126.834662][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.843458][   T10] usb 3-1: Product: syz
[  126.849329][   T10] usb 3-1: Manufacturer: syz
[  126.853955][   T10] usb 3-1: SerialNumber: syz
[  126.855973][ T6956] vivid-000: disconnect
[  126.890610][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.900976][ T6955] vivid-000: reconnect
[  126.904247][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.930238][ T5828] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  126.948128][ T5828] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  126.968255][   T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  126.968797][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.982357][ T5828] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  126.990005][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.042416][ T5828] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  127.054778][ T5828] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  127.076483][ T5828] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  127.092156][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.106536][   T87] usb 4-1: USB disconnect, device number 22
[  127.116236][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.162373][ T6970] fido_id[6970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  127.248477][ T1325] usb 3-1: Failed to submit usb control message: -71
[  127.248813][ T5840] usb 3-1: USB disconnect, device number 31
[  127.255641][ T1325] usb 3-1: unable to send the bmi data to the device: -71
[  127.275136][ T5912] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  127.279048][ T1325] usb 3-1: unable to get target info from device
[  127.299383][ T1325] usb 3-1: could not get target info (-71)
[  127.308419][ T1325] usb 3-1: could not probe fw (-71)
[  127.318393][ T6977] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[  127.335217][ T6977] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[  127.348641][ T6978] netlink: 'syz.2.320': attribute type 6 has an invalid length.
[  127.364462][ T6978] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[  127.373664][ T6978] bridge0: port 1(bridge_slave_0) entered learning state
[  127.437488][ T5912] usb 1-1: Using ep0 maxpacket: 16
[  127.449812][ T5912] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  127.461889][ T5912] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  127.471335][ T5912] usb 1-1: Product: syz
[  127.475713][ T5912] usb 1-1: Manufacturer: syz
[  127.480334][ T5912] usb 1-1: SerialNumber: syz
[  127.496814][ T5912] usb 1-1: config 0 descriptor??
[  127.512593][ T5912] usb 1-1: selecting invalid altsetting 1
[  127.525686][   T87] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  127.620478][ T5912] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  127.651889][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.688997][   T87] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  127.700277][   T87] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  127.712651][ T5840] usb 1-1: USB disconnect, device number 30
[  127.736132][   T87] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  127.750411][   T87] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  127.760209][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.768277][   T87] usb 4-1: Product: syz
[  127.772450][   T87] usb 4-1: Manufacturer: syz
[  127.779433][   T87] usb 4-1: SerialNumber: syz
[  127.792789][   T87] usb 4-1: config 0 descriptor??
[  127.803670][ T6975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.811485][ T6975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.825107][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  127.834206][   T87] usb 4-1: ucan: probing device on interface #0
[  127.878237][ T7002] openvswitch: netlink: IP tunnel dst address not specified
[  127.886994][ T7002] netlink: 'syz.1.327': attribute type 25 has an invalid length.
[  127.898859][ T7004] openvswitch: netlink: IP tunnel dst address not specified
[  127.943845][ T7008] nfs: Bad value for 'source'
[  127.995079][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  128.004240][ T5912] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  128.015415][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  128.026326][ T5912] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  128.037091][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024
[  128.058151][ T5912] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  128.068209][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  128.083699][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.098517][   T87] usb 4-1: ucan: could not read protocol version, ret=-71
[  128.108793][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  128.110543][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.119211][   T87] usb 4-1: ucan: probe failed; try to update the device firmware
[  128.129727][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.133729][ T5912] usb 3-1: SerialNumber: syz
[  128.158774][ T6989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  128.159680][   T87] usb 4-1: USB disconnect, device number 23
[  128.186482][ T5912] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  128.196697][ T5912] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  128.389038][ T5911] usb 3-1: USB disconnect, device number 32
[  128.565118][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  128.715096][   T10] usb 1-1: Using ep0 maxpacket: 16
[  128.721604][   T10] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[  128.730672][   T10] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[  128.739175][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  128.748366][   T10] usb 1-1: config 0 has no interface number 0
[  128.757644][   T10] usb 1-1: config 0 interface 104 has no altsetting 1
[  128.767336][   T10] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  128.776648][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.781819][ T7021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  128.784648][   T10] usb 1-1: Product: syz
[  128.801840][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.812862][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.820786][   T10] usb 1-1: Manufacturer: syz
[  128.825630][   T10] usb 1-1: SerialNumber: syz
[  128.832095][   T10] usb 1-1: config 0 descriptor??
[  128.840197][   T10] asix 1-1:0.104: probe with driver asix failed with error -22
[  128.856178][ T5912] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  129.030054][ T5912] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.050489][ T5912] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  129.064740][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.071805][ T5912] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  129.078618][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.082274][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.093241][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.105753][ T5912] usb 4-1: config 0 descriptor??
[  129.113785][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.122895][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.275112][   T87] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  129.425061][   T87] usb 3-1: Using ep0 maxpacket: 16
[  129.431352][   T87] usb 3-1: too many configurations: 60, using maximum allowed: 8
[  129.448743][   T87] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  129.457936][   T87] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  129.466158][   T87] usb 3-1: Product: syz
[  129.470935][   T87] usb 3-1: Manufacturer: syz
[  129.475759][   T87] usb 3-1: SerialNumber: syz
[  129.482747][   T87] usb 3-1: config 0 descriptor??
[  129.491421][   T87] pwc: Philips SPC 880NC USB webcam detected.
[  129.515809][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[  129.524097][    C1] raw-gadget.1 gadget.3: ignoring, device is not running
[  129.531736][ T5912] usbhid 4-1:0.0: can't add hid device: -71
[  129.537815][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  129.548782][ T5912] usb 4-1: USB disconnect, device number 24
[  129.697457][   T87] pwc: Warning: more than 1 configuration available.
[  129.708197][   T87] pwc: Failed to set LED on/off time (-71)
[  129.714501][   T87] pwc: send_video_command error -71
[  129.721015][   T87] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  129.729349][   T87] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  129.747727][   T87] usb 3-1: USB disconnect, device number 33
[  130.070572][ T7045] team_slave_0: entered promiscuous mode
[  130.076483][ T7045] team_slave_1: entered promiscuous mode
[  130.082880][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'.
[  130.093383][ T7044] team_slave_0: left promiscuous mode
[  130.099061][ T7044] team_slave_1: left promiscuous mode
[  130.460559][ T7062] netlink: 84 bytes leftover after parsing attributes in process `syz.1.346'.
[  130.637270][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'.
[  130.759508][ T7079] tmpfs: Bad value for 'huge'
[  130.887679][   T87] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  131.055596][   T87] usb 3-1: Using ep0 maxpacket: 16
[  131.071111][   T87] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  131.084708][   T87] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  131.098261][   T87] usb 3-1: Product: syz
[  131.103029][   T87] usb 3-1: Manufacturer: syz
[  131.107954][   T87] usb 3-1: SerialNumber: syz
[  131.117093][   T87] usb 3-1: config 0 descriptor??
[  131.299298][ T5828] usb 1-1: USB disconnect, device number 31
[  131.331932][ T5912] usb 3-1: USB disconnect, device number 34
[  131.346495][   T87] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  131.447253][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.471789][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.485393][   T87] usb 4-1: device descriptor read/64, error -71
[  131.623850][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[  131.633706][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'.
[  131.688256][ T7099] netlink: 'syz.0.359': attribute type 2 has an invalid length.
[  131.696299][ T7100] netlink: 'syz.0.359': attribute type 2 has an invalid length.
[  131.745361][   T87] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  131.873339][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'.
[  131.887870][   T87] usb 4-1: device descriptor read/64, error -71
[  131.985184][ T5828] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  132.005464][   T87] usb usb4-port1: attempt power cycle
[  132.022703][ T7108] mmap: syz.1.363 (7108) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  132.145126][ T5828] usb 1-1: Using ep0 maxpacket: 16
[  132.151705][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.163135][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.174076][ T5828] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.183532][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.191560][ T5828] usb 1-1: Product: syz
[  132.195091][ T5840] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  132.196004][ T5828] usb 1-1: Manufacturer: syz
[  132.208102][ T5828] usb 1-1: SerialNumber: syz
[  132.345204][   T87] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  132.354214][ T5840] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  132.365897][ T5840] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  132.376397][   T87] usb 4-1: device descriptor read/8, error -71
[  132.382675][ T5840] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  132.391853][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.403113][ T7106] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  132.419966][ T5828] usb 1-1: 0:2 : does not exist
[  132.428741][ T5828] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  132.460172][ T5840] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  132.462796][ T5828] usb 1-1: USB disconnect, device number 32
[  132.567477][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.615254][   T87] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  132.622990][ T5840] usb 3-1: USB disconnect, device number 35
[  132.646267][   T87] usb 4-1: device descriptor read/8, error -71
[  132.760885][   T87] usb usb4-port1: unable to enumerate USB device
[  132.761105][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.773771][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.073179][ T7121] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.367'.
[  133.223477][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.238412][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.314104][ T7140] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  133.645150][ T5840] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  133.807876][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.818163][ T5840] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  133.827974][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.838842][ T5840] usb 1-1: config 0 descriptor??
[  133.841742][ T7157] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  133.860980][ T5840] hdpvr 1-1:0.0: Could not find bulk-in endpoint
[  133.872350][ T5840] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  134.042946][ T7160] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[  134.058692][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.067616][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.086971][ T5840] usb 1-1: USB disconnect, device number 33
[  134.127011][ T7163] netlink: 92 bytes leftover after parsing attributes in process `syz.3.380'.
[  134.138280][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'.
[  134.515570][ T5911] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  134.605197][ T5840] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  134.665210][ T5911] usb 4-1: Invalid ep0 maxpacket: 32
[  134.756967][   T29] audit: type=1326 audit(1769415279.979:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.795791][ T5911] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[  134.796894][   T29] audit: type=1326 audit(1769415279.979:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.826672][   T29] audit: type=1326 audit(1769415279.979:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.851511][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1104, setting to 64
[  134.852092][   T29] audit: type=1326 audit(1769415279.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.885294][   T29] audit: type=1326 audit(1769415279.979:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.908939][   T29] audit: type=1326 audit(1769415279.979:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.932911][   T29] audit: type=1326 audit(1769415279.979:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.955403][   T29] audit: type=1326 audit(1769415279.979:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.965184][ T5911] usb 4-1: Invalid ep0 maxpacket: 32
[  134.978227][   T29] audit: type=1326 audit(1769415279.979:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  134.983529][ T5911] usb usb4-port1: attempt power cycle
[  135.005755][ T5840] usb 3-1: New USB device found, idVendor=16d8, idProduct=8002, bcdDevice=52.bf
[  135.020695][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.028724][ T5840] usb 3-1: Product: syz
[  135.032898][ T5840] usb 3-1: Manufacturer: syz
[  135.037605][   T29] audit: type=1326 audit(1769415279.979:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bc39acb9 code=0x7fc00000
[  135.060088][ T5840] usb 3-1: SerialNumber: syz
[  135.067533][ T5840] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  135.090579][ T5840] usb 3-1: no configuration chosen from 1 choice
[  135.158697][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.169012][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.355751][ T5911] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  135.376627][ T5911] usb 4-1: Invalid ep0 maxpacket: 32
[  135.505198][ T5911] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  135.525563][ T5911] usb 4-1: Invalid ep0 maxpacket: 32
[  135.531086][ T5911] usb usb4-port1: unable to enumerate USB device
[  135.605110][ T5840] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  135.706532][ T7180] netlink: 'syz.1.388': attribute type 2 has an invalid length.
[  135.715115][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[  135.752478][ T7182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.389'.
[  135.769390][ T5840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  135.780740][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.789027][ T5840] usb 1-1: Product: syz
[  135.804205][ T5840] usb 1-1: Manufacturer: syz
[  135.809764][ T5840] usb 1-1: SerialNumber: syz
[  135.828918][ T5840] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  135.851140][ T5943] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  136.266161][   T10] usb 1-1: USB disconnect, device number 34
[  136.770817][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  136.796390][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.817230][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.842712][ T7197] netlink: 'syz.0.395': attribute type 9 has an invalid length.
[  136.852711][ T7197] netlink: 'syz.0.395': attribute type 11 has an invalid length.
[  136.861591][ T7197] netlink: 'syz.0.395': attribute type 12 has an invalid length.
[  136.869397][ T7197] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.395'.
[  136.878856][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[  136.889894][ T5833] Bluetooth: Unknown BR/EDR signaling command 0x11
[  136.897440][ T5833] Bluetooth: Wrong link type (-22)
[  136.902886][ T5833] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  136.909493][ T5833] Bluetooth: Wrong link type (-22)
[  136.914654][ T5833] Bluetooth: Unknown BR/EDR signaling command 0x0c
[  136.921440][ T5833] Bluetooth: Wrong link type (-22)
[  136.925145][ T5943] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  136.927131][ T5833] Bluetooth: hci1: link tx timeout
[  136.940312][ T5833] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.945928][ T5943] ath9k_htc: Failed to initialize the device
[  136.976927][   T10] usb 1-1: ath9k_htc: USB layer deinitialized
[  137.285122][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  137.382168][ T5828] usb 3-1: USB disconnect, device number 36
[  137.437300][   T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.459749][   T10] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.490102][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.495730][ T7208] tmpfs: Unknown parameter 'nrnodes'
[  137.504518][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  137.514576][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.528193][   T10] usb 1-1: config 0 descriptor??
[  137.536586][ T7207] netlink: 'syz.1.400': attribute type 21 has an invalid length.
[  137.544426][ T7207] netlink: 'syz.1.400': attribute type 22 has an invalid length.
[  137.585432][ T5911] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  137.746310][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  137.756506][ T5911] usb 4-1: config 14 has an invalid interface number: 28 but max is 0
[  137.766172][ T5911] usb 4-1: config 14 has no interface number 0
[  137.773135][ T5911] usb 4-1: config 14 interface 28 has no altsetting 0
[  137.784042][ T5911] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=fd.2e
[  137.793552][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.802176][ T5911] usb 4-1: Product: syz
[  137.807438][ T5911] usb 4-1: Manufacturer: syz
[  137.812113][ T5911] usb 4-1: SerialNumber: syz
[  137.865395][ T5828] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  137.942736][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  137.951701][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  137.959844][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  137.967113][   T10] usbhid 1-1:0.0: can't add hid device: -32
[  137.977428][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  137.998388][ T7220] pimreg3: entered allmulticast mode
[  138.000750][   T10] usb 1-1: USB disconnect, device number 35
[  138.033998][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.044179][ T5828] usb 3-1: Using ep0 maxpacket: 32
[  138.067952][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.094289][ T5828] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  138.109773][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.123665][ T5911] gspca_main: spca505-2.14.0 probing 0733:0430
[  138.133874][ T5828] usb 3-1: Product: syz
[  138.140196][ T5911] gspca_spca505: reg write: error -71
[  138.145844][ T5828] usb 3-1: Manufacturer: syz
[  138.150464][ T5828] usb 3-1: SerialNumber: syz
[  138.155933][ T5911] spca505 4-1:14.28: probe with driver spca505 failed with error -5
[  138.183542][ T5828] usb 3-1: config 0 descriptor??
[  138.190060][ T5911] usb 4-1: USB disconnect, device number 33
[  138.393941][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.407813][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.441075][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.445146][ T5828] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  138.462149][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.469983][ T5828] eb 00 00 00 00 00 00 00 
[  138.474589][ T5828] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  138.996748][ T5147] Bluetooth: hci1: command 0x0406 tx timeout
[  139.184795][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.409'.
[  139.367522][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.405335][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.672096][ T7246] netlink: 'syz.3.409': attribute type 21 has an invalid length.
[  139.680101][ T7246] netlink: 128 bytes leftover after parsing attributes in process `syz.3.409'.
[  139.690627][ T7246] netlink: 'syz.3.409': attribute type 4 has an invalid length.
[  139.698306][ T7246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'.
[  139.895101][ T5828] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  140.016511][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.027839][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.037977][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.046140][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.051167][ T5828] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  140.063540][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.072343][ T5828] usb 1-1: Product: syz
[  140.076663][ T5828] usb 1-1: Manufacturer: syz
[  140.081243][ T5828] usb 1-1: SerialNumber: syz
[  140.088632][ T5828] usb 1-1: config 0 descriptor??
[  140.096382][ T5828] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  140.105235][ T5828] usb 1-1: Detected FT4232HP
[  140.135163][ T5840] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  140.285096][ T5840] usb 4-1: Using ep0 maxpacket: 8
[  140.292017][ T5840] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  140.316909][ T5828] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  140.318113][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.341821][ T5828] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  140.350893][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400
[  140.359568][ T5828] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  140.361498][ T5840] pvrusb2: **********
[  140.376310][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  140.396573][ T5828] usb 1-1: USB disconnect, device number 36
[  140.401962][ T5840] pvrusb2: Important functionality might not be entirely working.
[  140.415962][ T5828] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  140.417564][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  140.430977][ T5828] ftdi_sio 1-1:0.0: device disconnected
[  140.444098][ T5840] pvrusb2: **********
[  140.481957][   T87] usb 3-1: USB disconnect, device number 37
[  140.541342][ T7272] netlink: 'syz.3.416': attribute type 1 has an invalid length.
[  140.548786][ T2345] pvrusb2: Invalid write control endpoint
[  140.619147][ T2345] pvrusb2: Invalid write control endpoint
[  140.638273][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  140.649398][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  140.657264][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  140.668011][ T2345] pvrusb2: Device being rendered inoperable
[  140.678316][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  140.688186][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  140.700950][ T2345] pvrusb2: Attached sub-driver cx25840
[  140.712516][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  140.724219][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  140.745539][ T5828] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  140.753732][ T5911] usb 4-1: USB disconnect, device number 34
[  140.915496][ T5828] usb 1-1: Using ep0 maxpacket: 16
[  140.941421][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short
[  140.971731][ T5828] usb 1-1: config 2 has an invalid interface number: 206 but max is 2
[  140.981656][ T5828] usb 1-1: config 2 has an invalid interface number: 230 but max is 2
[  140.994244][ T5828] usb 1-1: config 2 has no interface number 0
[  141.004146][ T5828] usb 1-1: config 2 has no interface number 1
[  141.012210][ T5828] usb 1-1: config 2 interface 206 has no altsetting 0
[  141.028806][ T5828] usb 1-1: config 2 interface 2 has no altsetting 0
[  141.050280][ T5828] usb 1-1: config 2 interface 230 has no altsetting 0
[  141.067679][ T5828] usb 1-1: New USB device found, idVendor=413c, idProduct=8171, bcdDevice=c9.9c
[  141.085146][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.093230][ T5828] usb 1-1: Product: syz
[  141.097794][ T5828] usb 1-1: Manufacturer: syz
[  141.102409][ T5828] usb 1-1: SerialNumber: syz
[  141.168625][ T7303] PKCS7: Unknown OID: [4] 0.0
[  141.173525][ T7303] PKCS7: Only support pkcs7_signedData type
[  141.206285][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.217073][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.244143][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.252975][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.265989][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.278018][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.367223][ T5828] usb 1-1: selecting invalid altsetting 0
[  141.376775][ T5828] usb 1-1: Could not set interface, error -22
[  141.400396][ T5828] usb 1-1: USB disconnect, device number 37
[  141.685119][ T5910] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  141.784484][ T7329] comedi comedi0: dt2815: I/O port conflict (0x1,2)
[  141.792307][ T7329] syz.2.433 (7329): /proc/7327/oom_adj is deprecated, please use /proc/7327/oom_score_adj instead.
[  141.819256][ T7329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  141.830043][ T7329] block device autoloading is deprecated and will be removed.
[  141.837785][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  141.847261][ T7328] veth1_macvtap: left promiscuous mode
[  141.847859][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short
[  141.852864][ T7328] macsec0: entered promiscuous mode
[  141.862862][ T5910] usb 4-1: config 15 interface 0 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  141.877620][ T5910] usb 4-1: config 15 interface 0 has no altsetting 0
[  141.887950][ T5910] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=c3.9b
[  141.898657][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.906967][ T5910] usb 4-1: Product: syz
[  141.912325][ T5910] usb 4-1: Manufacturer: syz
[  141.912603][ T7329] veth1_macvtap: entered promiscuous mode
[  141.923703][ T5910] usb 4-1: SerialNumber: syz
[  141.929118][ T7329] macsec0: left promiscuous mode
[  142.096604][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.119472][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.152562][ T5910] usb 4-1: ucan: probing device on interface #0
[  142.167276][ T5910] usb 4-1: ucan: invalid endpoint configuration
[  142.181016][ T5910] usb 4-1: ucan: probe failed; try to update the device firmware
[  142.199424][ T5910] usb 4-1: USB disconnect, device number 35
[  142.226303][ T5828] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  142.385360][ T5828] usb 1-1: Using ep0 maxpacket: 8
[  142.391931][ T5828] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  142.400131][ T5828] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  142.410302][ T5828] usb 1-1: config 6 has no interface number 0
[  142.417168][ T5828] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  142.429059][ T5828] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  142.438843][ T5828] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.450717][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.460724][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.472404][ T5828] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  142.482607][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.490863][ T5828] usb 1-1: Product: syz
[  142.495213][ T5828] usb 1-1: Manufacturer: syz
[  142.499813][ T5828] usb 1-1: SerialNumber: syz
[  142.512293][ T5828] hso 1-1:6.2: Failed to find INT IN ep
[  142.714879][ T5910] usb 1-1: USB disconnect, device number 38
[  142.763900][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.773569][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.788869][ T5911] libceph: connect (1)[c::]:6789 error -22
[  142.790049][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.797776][ T5911] libceph: mon0 (1)[c::]:6789 connect error
[  142.806192][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.070393][ T5910] libceph: connect (1)[c::]:6789 error -22
[  143.076639][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  143.085112][ T5840] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  143.387582][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.400155][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.419534][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.428936][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.512517][ T7380] 9pnet_fd: p9_fd_create_tcp (7380): problem connecting socket to 127.0.0.1
[  143.524582][ T7380] fuse: Unknown parameter '?��x�:Xlm	�;��J;~��m	�I���)�1�B_z����qO'
[  143.588713][ T5828] libceph: connect (1)[c::]:6789 error -22
[  143.594879][ T5828] libceph: mon0 (1)[c::]:6789 connect error
[  143.815097][ T5828] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  143.983781][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.997633][ T5828] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  144.008306][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.025860][ T5828] usb 3-1: config 0 descriptor??
[  144.038260][ T5828] pwc: Askey VC010 type 2 USB webcam detected.
[  144.039013][ T7387] netlink: 'syz.1.453': attribute type 30 has an invalid length.
[  144.204008][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.213269][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.241539][ T7383] Mount JFS Failure: -22
[  144.247372][ T7383] jfs_mount failed w/return code = -22
[  144.254854][ T7393] Mount JFS Failure: -22
[  144.259290][ T7393] jfs_mount failed w/return code = -22
[  144.268083][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.277871][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.355217][   T87] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  144.529481][   T87] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  144.538866][   T87] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.547281][   T87] usb 1-1: Product: syz
[  144.551653][   T87] usb 1-1: Manufacturer: syz
[  144.556341][   T87] usb 1-1: SerialNumber: syz
[  144.563858][   T87] usb 1-1: config 0 descriptor??
[  144.572260][   T87] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  144.803391][ T5911] usb 2-1: USB disconnect, device number 26
[  144.838139][ T5910] libceph: connect (1)[c::]:6789 error -22
[  144.844734][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  144.892385][ T5828] pwc: recv_control_msg error -71 req 02 val 2c00
[  144.905833][ T5828] pwc: recv_control_msg error -71 req 04 val 1000
[  144.913157][ T5828] pwc: recv_control_msg error -71 req 04 val 1300
[  144.921979][ T5828] pwc: recv_control_msg error -71 req 04 val 1400
[  144.929378][ T5828] pwc: recv_control_msg error -71 req 02 val 2000
[  144.939337][ T5828] pwc: recv_control_msg error -71 req 02 val 2100
[  144.946980][ T5828] pwc: recv_control_msg error -71 req 04 val 1500
[  144.954147][ T5828] pwc: recv_control_msg error -71 req 02 val 2500
[  144.961596][ T5828] pwc: recv_control_msg error -71 req 02 val 2400
[  144.968993][ T5828] pwc: recv_control_msg error -71 req 02 val 2600
[  144.978468][ T5828] pwc: recv_control_msg error -71 req 02 val 2900
[  144.985835][ T5828] pwc: recv_control_msg error -71 req 02 val 2800
[  144.993053][ T5828] pwc: recv_control_msg error -71 req 04 val 1100
[  145.001600][ T5828] pwc: recv_control_msg error -71 req 04 val 1200
[  145.011764][ T5828] pwc: Registered as video103.
[  145.019921][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29
[  145.056170][ T5828] usb 3-1: USB disconnect, device number 39
[  145.452189][ T7397] 9p: Unknown uid 00000000004294967295
[  145.469189][ T7397] 9p: Bad value for 'port'
[  145.562296][ T1325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.663616][ T1325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.735694][ T7361] ceph: No mds server is up or the cluster is laggy
[  145.822359][ T1325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.922088][ T1325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.969527][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.981130][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.989649][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.997940][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.006440][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.364640][ T1325] bridge_slave_1: left allmulticast mode
[  146.379209][ T1325] bridge_slave_1: left promiscuous mode
[  146.394065][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.418565][ T1325] bridge_slave_0: left allmulticast mode
[  146.420684][ T7417] netlink: 19 bytes leftover after parsing attributes in process `syz.2.465'.
[  146.430973][ T1325] bridge_slave_0: left promiscuous mode
[  146.442180][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.657160][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.688516][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.836599][ T1325] ***** Releasing 0 refcount on 0000000000000000
[  146.850579][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.862799][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.873915][ T1325] bond0 (unregistering): Released all slaves
[  146.915220][   T87] gspca_stk1135: reg_w 0x2ff err -71
[  146.925212][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  146.931930][   T87] gspca_stk1135: Sensor write failed
[  146.939163][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  146.946357][   T87] gspca_stk1135: Sensor write failed
[  146.951851][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  146.958437][   T87] gspca_stk1135: Sensor read failed
[  146.964022][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  146.976592][   T87] gspca_stk1135: Sensor read failed
[  146.982661][   T87] gspca_stk1135: Detected sensor type unknown (0x0)
[  147.009864][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  147.030272][   T87] gspca_stk1135: Sensor read failed
[  147.036806][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  147.052871][   T87] gspca_stk1135: Sensor read failed
[  147.059317][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  147.066029][   T87] gspca_stk1135: Sensor write failed
[  147.071554][   T87] gspca_stk1135: serial bus timeout: status=0x00
[  147.079777][   T87] gspca_stk1135: Sensor write failed
[  147.091167][   T87] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  147.109146][   T87] usb 1-1: USB disconnect, device number 39
[  147.177896][ T7407] chnl_net:caif_netlink_parms(): no params data found
[  147.475091][   T87] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  147.563180][ T7457] netlink: 'syz.0.470': attribute type 2 has an invalid length.
[  147.618596][ T7457] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[  147.657091][   T87] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.668508][   T87] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  147.677887][   T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.694922][ T5912] IPVS: starting estimator thread 0...
[  147.699527][ T1325] hsr_slave_0: left promiscuous mode
[  147.704608][   T87] usb 4-1: config 0 descriptor??
[  147.720484][ T1325] hsr_slave_1: left promiscuous mode
[  147.796568][ T7462] IPVS: using max 36 ests per chain, 86400 per kthread
[  147.823132][ T1325] veth1_macvtap: left promiscuous mode
[  147.867265][ T1325] veth0_macvtap: left promiscuous mode
[  147.872990][ T1325] veth1_vlan: left promiscuous mode
[  147.879136][ T7466] netlink: 'syz.0.471': attribute type 6 has an invalid length.
[  147.909081][ T1325] veth0_vlan: left promiscuous mode
[  147.917654][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.931173][ T7466] netlink: 168 bytes leftover after parsing attributes in process `syz.0.471'.
[  147.935609][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.973233][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.992334][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.016233][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.035093][ T5147] Bluetooth: hci2: command tx timeout
[  148.041448][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.060539][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.090912][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.124833][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.154119][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.191977][ T1325] pimreg3 (unregistering): left allmulticast mode
[  148.208354][   T87] aquacomputer_d5next 0003:0C70:F00B.000A: unknown main item tag 0x0
[  148.233077][   T87] aquacomputer_d5next 0003:0C70:F00B.000A: item fetching failed at offset 3/7
[  148.242995][   T87] aquacomputer_d5next 0003:0C70:F00B.000A: probe with driver aquacomputer_d5next failed with error -22
[  148.689071][ T1325] team0 (unregistering): Port device team_slave_1 removed
[  148.724381][ T1325] team0 (unregistering): Port device team_slave_0 removed
[  149.035689][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.042992][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.050821][ T7407] bridge_slave_0: entered allmulticast mode
[  149.059108][ T7407] bridge_slave_0: entered promiscuous mode
[  149.083115][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.099519][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.108592][ T7407] bridge_slave_1: entered allmulticast mode
[  149.121745][ T7407] bridge_slave_1: entered promiscuous mode
[  149.205290][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.237797][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.342389][ T7407] team0: Port device team_slave_0 added
[  149.398106][ T7407] team0: Port device team_slave_1 added
[  149.468472][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.479500][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.535107][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.563292][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.582254][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.737806][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.885631][ T7407] hsr_slave_0: entered promiscuous mode
[  149.892666][ T7407] hsr_slave_1: entered promiscuous mode
[  149.901137][ T7407] debugfs: 'hsr0' already exists in 'hsr'
[  149.907188][ T5828] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  149.915857][ T7407] Cannot create hsr debugfs directory
[  150.067260][ T5828] usb 1-1: config 0 has an invalid interface number: 165 but max is 0
[  150.075883][ T5828] usb 1-1: config 0 has no interface number 0
[  150.082183][ T5828] usb 1-1: config 0 interface 165 has no altsetting 0
[  150.094169][ T5828] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=71.ba
[  150.108448][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.114468][ T7517] loop8: detected capacity change from 0 to 8
[  150.119207][ T5147] Bluetooth: hci2: command tx timeout
[  150.131337][ T5828] usb 1-1: Product: syz
[  150.137898][ T5828] usb 1-1: Manufacturer: syz
[  150.143888][ T5828] usb 1-1: SerialNumber: syz
[  150.154493][ T5835] Dev loop8: unable to read RDB block 8
[  150.163113][ T5828] usb 1-1: config 0 descriptor??
[  150.170627][ T5835]  loop8: unable to read partition table
[  150.185665][ T5835] loop8: partition table beyond EOD, truncated
[  150.253256][ T5911] usb 4-1: USB disconnect, device number 37
[  150.269506][ T7517] Dev loop8: unable to read RDB block 8
[  150.296567][ T7517]  loop8: unable to read partition table
[  150.324238][ T7517] loop8: partition table beyond EOD, truncated
[  150.375094][ T7517] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  150.381983][ T5828] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  150.430994][ T5828] usb 1-1: USB disconnect, device number 40
[  150.489340][ T7407] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  150.520379][ T7407] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  150.541985][ T7527] netlink: 'syz.3.482': attribute type 9 has an invalid length.
[  150.561400][ T7527] netlink: 'syz.3.482': attribute type 11 has an invalid length.
[  150.574574][ T7407] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  150.585853][ T7527] netlink: 'syz.3.482': attribute type 12 has an invalid length.
[  150.594966][ T7527] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.482'.
[  150.617938][ T7407] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  150.650517][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'.
[  150.810672][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.834629][ T7407] 8021q: adding VLAN 0 to HW filter on device team0
[  150.849725][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.856999][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.898709][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.905943][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.957701][ T7407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.998157][ T5828] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  151.185137][ T5828] usb 3-1: Using ep0 maxpacket: 32
[  151.211495][ T5828] usb 3-1: config 0 has an invalid interface number: 112 but max is 0
[  151.234557][ T5828] usb 3-1: config 0 has no interface number 0
[  151.262127][ T5828] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  151.282015][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.306789][ T5828] usb 3-1: Product: syz
[  151.316811][ T5828] usb 3-1: Manufacturer: syz
[  151.321500][ T5828] usb 3-1: SerialNumber: syz
[  151.344819][ T5828] usb 3-1: config 0 descriptor??
[  151.371547][ T5828] gspca_main: conex-2.14.0 probing 0572:0041
[  151.390541][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.701576][ T5828] usb 3-1: USB disconnect, device number 40
[  151.745171][ T5911] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  151.893870][ T7407] veth0_vlan: entered promiscuous mode
[  151.925064][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  151.927087][ T7407] veth1_vlan: entered promiscuous mode
[  151.932560][ T5911] usb 4-1: config 7 interface 0 has no altsetting 0
[  151.948557][ T5911] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=58.70
[  151.965603][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  151.971962][ T7407] veth0_macvtap: entered promiscuous mode
[  151.985234][ T5911] usb 4-1: Product: syz
[  151.992329][ T7407] veth1_macvtap: entered promiscuous mode
[  151.992855][ T5911] usb 4-1: Manufacturer: syz
[  152.012369][ T5911] usb 4-1: SerialNumber: syz
[  152.019955][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.043732][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.060805][ T1325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.089209][ T1325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.116935][ T1325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.149653][  T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.205193][ T5147] Bluetooth: hci2: command tx timeout
[  152.239540][ T5911] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected.
[  152.253373][ T5911] pwc: Failed to set LED on/off time (-71)
[  152.260780][ T5911] pwc: send_video_command error -71
[  152.266225][ T5911] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  152.273793][ T5911] Philips webcam 4-1:7.0: probe with driver Philips webcam failed with error -71
[  152.292068][ T5911] usb 4-1: USB disconnect, device number 38
[  152.296475][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.339725][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.440059][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.461471][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.529170][ T7581] comedi comedi3: Minor 20263 is invalid!
[  152.626401][ T5911] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  152.701574][ T7586] sctp: [Deprecated]: syz.0.491 (pid 7586) Use of int in max_burst socket option.
[  152.701574][ T7586] Use struct sctp_assoc_value instead
[  152.797896][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short
[  152.806398][ T5911] usb 3-1: not running at top speed; connect to a high speed hub
[  152.816653][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.829577][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  152.842951][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  152.852177][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  152.860615][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  152.868353][ T5911] usb 3-1: Product: syz
[  152.872501][ T5911] usb 3-1: Manufacturer: syz
[  152.878355][ T5911] usb 3-1: SerialNumber: syz
[  152.886327][ T7579] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.045050][ T5880] usb 5-1: Using ep0 maxpacket: 32
[  153.051673][ T5880] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  153.060300][ T5880] usb 5-1: config 0 has no interface number 0
[  153.071764][ T5880] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  153.080897][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.085254][ T5840] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  153.089093][ T5880] usb 5-1: Product: syz
[  153.100960][ T5880] usb 5-1: Manufacturer: syz
[  153.107374][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.115975][ T5880] usb 5-1: SerialNumber: syz
[  153.122755][ T5880] usb 5-1: config 0 descriptor??
[  153.129363][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.139041][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.140316][ T5880] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  153.152821][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.159485][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.172855][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.184281][ T5911] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  153.200492][ T5911] usb 3-1: USB disconnect, device number 41
[  153.256828][ T5840] usb 4-1: config 0 has an invalid interface number: 199 but max is 16
[  153.265330][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.276437][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17
[  153.285513][ T5840] usb 4-1: config 0 has no interface number 0
[  153.291784][ T5840] usb 4-1: config 0 interface 199 has no altsetting 0
[  153.307318][ T5840] usb 4-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=1c.1b
[  153.317114][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.325513][ T5840] usb 4-1: Product: syz
[  153.330481][ T5840] usb 4-1: Manufacturer: syz
[  153.335177][ T5840] usb 4-1: SerialNumber: syz
[  153.346231][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.361389][ T5840] usb 4-1: config 0 descriptor??
[  153.363375][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.389907][ T5880] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  153.410596][ T5880] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  153.585457][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.594530][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.595132][ T5880] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  153.610918][ T5840] uvcvideo 4-1:0.199: Found Unit with invalid ID 0
[  153.619657][ T5840] uvcvideo 4-1:0.199: Found UVC 0.00 device syz (05a9:2641)
[  153.627217][ T5840] uvcvideo 4-1:0.199: No valid video chain found.
[  153.646544][ T5840] usb 4-1: USB disconnect, device number 39
[  153.748532][ T5880] usb 1-1: device descriptor read/64, error -71
[  153.829770][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  153.830270][ T5840] usb 5-1: USB disconnect, device number 2
[  153.868958][ T5840] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  153.917297][ T5840] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  153.938050][ T5840] quatech2 5-1:0.51: device disconnected
[  153.980872][ T7604] input: syz0 as /devices/virtual/input/input30
[  153.995411][ T5880] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  154.143012][ T5880] usb 1-1: device descriptor read/64, error -71
[  154.265123][ T5840] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  154.265460][ T5880] usb usb1-port1: attempt power cycle
[  154.278230][ T5147] Bluetooth: hci2: command tx timeout
[  154.395118][ T5911] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  154.425121][   T87] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  154.432755][ T5840] usb 5-1: Using ep0 maxpacket: 32
[  154.440087][ T5840] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[  154.448440][ T5840] usb 5-1: config 0 has no interface number 0
[  154.458741][ T5840] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  154.467965][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.476072][ T5840] usb 5-1: Product: syz
[  154.480237][ T5840] usb 5-1: Manufacturer: syz
[  154.484817][ T5840] usb 5-1: SerialNumber: syz
[  154.491242][ T5840] usb 5-1: config 0 descriptor??
[  154.500036][ T5840] gspca_main: conex-2.14.0 probing 0572:0041
[  154.525330][ T5911] usb 3-1: device descriptor read/64, error -71
[  154.585126][   T87] usb 4-1: Using ep0 maxpacket: 16
[  154.591967][   T87] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  154.601126][   T87] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  154.610205][   T87] usb 4-1: config 1 has no interface number 1
[  154.616420][   T87] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  154.629342][   T87] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  154.635143][ T5880] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  154.641724][   T87] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.655960][   T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.664426][   T87] usb 4-1: Product: 墥ꋚ됼ᜦ仰肚ꆘ䷳౧ྥ낥꯮뻖樑䓏臋촏ꤵ熎릨ູ촅牮✓⧯꓀؏롵ᠱꐇ௣
[  154.677750][   T87] usb 4-1: Manufacturer: Ц
[  154.682333][   T87] usb 4-1: SerialNumber: syz
[  154.688939][ T5880] usb 1-1: device descriptor read/8, error -71
[  154.762585][ T5840] usb 5-1: USB disconnect, device number 3
[  154.775195][ T5911] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  154.915162][ T5911] usb 3-1: device descriptor read/64, error -71
[  154.935157][ T5880] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  154.955761][ T5880] usb 1-1: device descriptor read/8, error -71
[  155.025516][ T5911] usb usb3-port1: attempt power cycle
[  155.065481][ T5880] usb usb1-port1: unable to enumerate USB device
[  155.132258][   T87] usb 4-1: USB disconnect, device number 40
[  155.365624][ T5911] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  155.385572][ T5911] usb 3-1: device descriptor read/8, error -71
[  155.625112][ T5911] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  155.645574][ T5911] usb 3-1: device descriptor read/8, error -71
[  155.755326][ T5911] usb usb3-port1: unable to enumerate USB device
[  155.765213][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  155.915183][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  155.921986][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  155.933566][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 111, changing to 10
[  155.944724][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 57942, setting to 1024
[  155.956471][ T5910] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  155.965605][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.977230][ T5910] usb 5-1: config 0 descriptor??
[  155.985354][ T5910] pegasus_notetaker 5-1:0.0: packet size is too small (0)
[  155.993708][ T5910] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  156.188427][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.203024][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.220030][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.231739][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.243813][ T5840] usb 5-1: USB disconnect, device number 4
[  156.725098][ T5840] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  156.790261][ T5880] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  156.809073][ T7639] syzkaller1: entered promiscuous mode
[  156.816262][ T7639] syzkaller1: entered allmulticast mode
[  156.828996][ T7639] input: syz1 as /devices/virtual/input/input32
[  156.895274][ T5840] usb 4-1: Using ep0 maxpacket: 16
[  156.902353][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  156.923832][ T5840] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  156.933230][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.950548][ T5840] usb 4-1: config 0 descriptor??
[  156.955084][ T5880] usb 1-1: Using ep0 maxpacket: 16
[  156.962979][ T5880] usb 1-1: config 255 has an invalid interface number: 195 but max is 1
[  156.968139][ T5840] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33
[  156.981872][ T5880] usb 1-1: config 255 has an invalid interface number: 188 but max is 1
[  157.005121][ T5880] usb 1-1: config 255 has no interface number 0
[  157.028704][ T5880] usb 1-1: config 255 has no interface number 1
[  157.052594][ T5880] usb 1-1: config 255 interface 195 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 64
[  157.064628][ T5880] usb 1-1: config 255 interface 195 altsetting 4 endpoint 0x8A has invalid maxpacket 36395, setting to 64
[  157.077772][ T5880] usb 1-1: config 255 interface 195 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[  157.090185][ T5880] usb 1-1: config 255 interface 195 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 5
[  157.103632][ T5880] usb 1-1: config 255 interface 188 altsetting 255 endpoint 0xF has invalid maxpacket 1544, setting to 64
[  157.115212][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping
[  157.127476][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping
[  157.143621][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  157.156256][ T5880] usb 1-1: config 255 interface 188 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  157.172995][ T5181] bcm5974 4-1:0.0: could not read from device
[  157.173344][ T5911] usb 4-1: USB disconnect, device number 41
[  157.185562][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has a duplicate endpoint with address 0xE, skipping
[  157.198600][ T5829] bcm5974 4-1:0.0: could not read from device
[  157.215145][ T5880] usb 1-1: config 255 interface 188 altsetting 255 endpoint 0xD has invalid maxpacket 512, setting to 64
[  157.254470][ T5880] usb 1-1: config 255 interface 188 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  157.268159][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has a duplicate endpoint with address 0xA, skipping
[  157.280313][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  157.294744][ T5880] usb 1-1: config 255 interface 188 altsetting 255 has a duplicate endpoint with address 0xD, skipping
[  157.309337][ T5880] usb 1-1: config 255 interface 195 has no altsetting 0
[  157.317451][ T5880] usb 1-1: config 255 interface 188 has no altsetting 0
[  157.331353][ T5880] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0169, bcdDevice=39.dd
[  157.341239][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.349636][ T5880] usb 1-1: Product: syz
[  157.353832][ T5880] usb 1-1: Manufacturer: syz
[  157.358724][ T5880] usb 1-1: SerialNumber: syz
[  157.366693][ T7637] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  157.582777][ T5880] ftdi_sio 1-1:255.195: FTDI USB Serial Device converter detected
[  157.602443][ T5880] ftdi_sio ttyUSB0: unknown device type: 0x39dd
[  157.624837][ T5880] ftdi_sio 1-1:255.188: FTDI USB Serial Device converter detected
[  157.637774][ T5880] ftdi_sio ttyUSB1: unknown device type: 0x39dd
[  157.651999][ T5880] usb 1-1: USB disconnect, device number 45
[  157.690655][ T5880] ftdi_sio 1-1:255.195: device disconnected
[  157.705295][ T5840] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  157.706248][ T5880] ftdi_sio 1-1:255.188: device disconnected
[  157.808778][ T7654] netlink: 'syz.3.516': attribute type 2 has an invalid length.
[  157.818268][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'.
[  157.891010][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.901315][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  157.913109][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  157.924377][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  157.935974][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  157.962479][ T5840] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  157.975911][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  157.984034][ T5840] usb 3-1: Product: syz
[  157.989457][ T5840] usb 3-1: Manufacturer: syz
[  157.994084][ T5840] usb 3-1: SerialNumber: syz
[  158.004197][ T5840] usb 3-1: config 0 descriptor??
[  158.108519][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'.
[  158.118974][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'.
[  158.182334][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  158.182352][   T29] audit: type=1800 audit(1769415303.389:77): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.520" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  158.209761][ T7665] netlink: 324 bytes leftover after parsing attributes in process `syz.4.520'.
[  158.221891][ T5840] radio-si470x 3-1:0.0: DeviceID=0xb135 ChipID=0xf7fe
[  158.286659][ T5943] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  158.412852][ T5840] radio-si470x 3-1:0.0: software version 177, hardware version 53
[  158.455184][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  158.468530][ T5943] usb 4-1: config 254 has an invalid interface number: 235 but max is 0
[  158.478657][ T5943] usb 4-1: config 254 has no interface number 0
[  158.486364][ T5943] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  158.500853][ T5943] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  158.511950][ T5943] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  158.522579][ T5943] usb 4-1: config 254 interface 235 has no altsetting 0
[  158.533584][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  158.543519][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  158.553139][ T5943] usb 4-1: Product: syz
[  158.557756][ T5943] usb 4-1: Manufacturer: syz
[  158.562401][ T5943] usb 4-1: SerialNumber: syz
[  158.594259][ T7659] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  158.613295][ T5840] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  158.626264][ T5840] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  158.645155][ T5840] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  158.653755][ T5840] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  158.687212][ T5840] usb 3-1: USB disconnect, device number 46
[  158.810707][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.819535][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.876906][ T5943] usbtest 4-1:254.235: couldn't get endpoints, -71
[  158.887343][ T5943] usbtest 4-1:254.235: probe with driver usbtest failed with error -71
[  158.901730][ T5943] usb 4-1: USB disconnect, device number 42
[  159.462594][ T7684] tmpfs: Cannot change global quota limit on remount
[  159.477661][ T5880] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  159.637013][ T5880] usb 1-1: config 1 has an invalid interface number: 64 but max is 0
[  159.645249][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.655594][ T5880] usb 1-1: config 1 has no interface number 0
[  159.663816][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  159.673086][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.682089][ T5880] usb 1-1: Product: syz
[  159.686384][ T5880] usb 1-1: Manufacturer: syz
[  159.690978][ T5880] usb 1-1: SerialNumber: syz
[  159.701760][ T5880] uvcvideo 1-1:1.64: probe with driver uvcvideo failed with error -22
[  159.715171][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  159.715390][ T5943] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  159.783545][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  159.875203][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  159.878154][ T5910] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32
[  159.886291][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short
[  159.891699][ T5910] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32
[  159.902087][ T5943] usb 4-1: config 6 has an invalid interface number: 4 but max is 1
[  159.913858][ T5880] usb 1-1: USB disconnect, device number 46
[  159.916248][ T5943] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  159.922402][ T5910] usb 5-1: config 1 interface 0 has no altsetting 0
[  159.932036][ T5943] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2
[  159.932061][ T5943] usb 4-1: config 6 has no interface number 0
[  159.932108][ T5943] usb 4-1: config 6 interface 4 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  159.932133][ T5943] usb 4-1: config 6 interface 4 altsetting 4 has an endpoint descriptor with address 0xD1, changing to 0x81
[  159.932157][ T5943] usb 4-1: config 6 interface 4 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.932178][ T5943] usb 4-1: config 6 interface 4 altsetting 4 bulk endpoint 0x81 has invalid maxpacket 0
[  159.932199][ T5943] usb 4-1: config 6 interface 4 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.932224][ T5943] usb 4-1: config 6 interface 4 has no altsetting 0
[  159.934245][ T5943] usb 4-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0
[  160.008140][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  160.013277][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.022285][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.025665][ T5943] usb 4-1: Product: syz
[  160.025683][ T5943] usb 4-1: Manufacturer: syz
[  160.025698][ T5943] usb 4-1: SerialNumber: syz
[  160.065865][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  160.076208][ T5910] usb 5-1: Product: syz
[  160.080410][ T5910] usb 5-1: Manufacturer: ⮝͔蚟끂ࡰຽ폍깠㖱돬₷魻ᄬ䆯薈뭠澖外ṛ픐䈡﷞뵅⫨Ḑ㮠靥볎則饖뼋䜎俯軹ࣝᐬ뙊ﶎ鄓㽼䰟퉠ﳇ톃悒툗㚛⫣겡ూ멼愯ﻱ境氤혲⸼횅俠뿰칓秃닃鰴吻绾ꑍ磶莩ﾠ듇ﻢፔ餞붺耣Ꜿቶﳝ᥃䆲룳湨⦐쀀笀쁇ㅣﺓὨ㍸倱職⨞쥟ｼ㴬䁍긝᳁䷻ꛏ
[  160.117663][ T5910] usb 5-1: SerialNumber: syz
[  160.125723][ T7684] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  160.133112][ T7684] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  160.227719][ T5911] usb 3-1: config 2 has an invalid interface number: 117 but max is 0
[  160.236053][ T5911] usb 3-1: config 2 has no interface number 0
[  160.242201][ T5911] usb 3-1: config 2 interface 117 has no altsetting 0
[  160.251444][ T5911] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=1c.1c
[  160.260621][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.267903][   T29] audit: type=1326 audit(1769415305.489:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.3.526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f994319acb9 code=0x0
[  160.268690][ T5911] usb 3-1: Product: syz
[  160.298587][ T5911] usb 3-1: Manufacturer: syz
[  160.303262][ T5911] usb 3-1: SerialNumber: syz
[  160.304192][ T5943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  160.409260][ T5943] snd-usb-audio 4-1:6.4: probe with driver snd-usb-audio failed with error -12
[  160.422902][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.441536][ T5943] usb 4-1: USB disconnect, device number 43
[  160.524646][ T5911] garmin_gps 3-1:2.117: Garmin GPS usb/tty converter detected
[  160.541630][ T5911] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  160.554348][ T5910] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8
[  160.565805][ T5911] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  160.587080][ T5911] usb 3-1: USB disconnect, device number 47
[  160.593938][ T5911] garmin_gps 3-1:2.117: device disconnected
[  160.606404][ T5910] usb 5-1: USB disconnect, device number 5
[  160.630441][ T5910] usblp0: removed
[  160.975157][ T5912] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  161.147465][ T5912] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.176620][ T5912] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.209225][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.221298][ T5912] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  161.232202][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.247522][ T5912] usb 1-1: config 0 descriptor??
[  161.435092][ T5910] usb 3-1: new low-speed USB device number 48 using dummy_hcd
[  161.565107][ T5910] usb 3-1: device descriptor read/64, error -71
[  161.659364][ T5912] microsoft 0003:045E:009D.000B: unknown main item tag 0x3
[  161.666934][ T5912] microsoft 0003:045E:009D.000B: unknown main item tag 0x3
[  161.674163][ T5912] microsoft 0003:045E:009D.000B: item fetching failed at offset 10/13
[  161.683172][ T5912] microsoft 0003:045E:009D.000B: parse failed
[  161.689486][ T5912] microsoft 0003:045E:009D.000B: probe with driver microsoft failed with error -22
[  161.805110][ T5910] usb 3-1: new low-speed USB device number 49 using dummy_hcd
[  161.862192][ T5911] usb 1-1: USB disconnect, device number 47
[  161.935416][ T5910] usb 3-1: device descriptor read/64, error -71
[  162.025142][ T5912] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  162.055449][ T5910] usb usb3-port1: attempt power cycle
[  162.196105][ T5912] usb 5-1: Using ep0 maxpacket: 32
[  162.203131][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  162.211459][ T5912] usb 5-1: config 0 has no interface number 0
[  162.217836][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.229717][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.242435][ T5912] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  162.251687][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.262457][ T5912] usb 5-1: config 0 descriptor??
[  162.395273][ T5910] usb 3-1: new low-speed USB device number 50 using dummy_hcd
[  162.436732][ T5910] usb 3-1: device descriptor read/8, error -71
[  162.677799][ T5912] hid (null): unknown global tag 0xd
[  162.697503][ T5911] usb 1-1: new low-speed USB device number 48 using dummy_hcd
[  162.705119][ T5910] usb 3-1: new low-speed USB device number 51 using dummy_hcd
[  162.722947][ T7738] input: syz0 as /devices/virtual/input/input34
[  162.738499][ T5910] usb 3-1: device descriptor read/8, error -71
[  162.845432][ T5911] usb 1-1: device descriptor read/64, error -71
[  162.852143][ T5910] usb usb3-port1: unable to enumerate USB device
[  162.931164][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.940378][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.948399][ T5912] uclogic 0003:28BD:0094.000C: pen parameters not found
[  162.966829][ T5912] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring
[  163.016929][ T5943] usb 5-1: USB disconnect, device number 6
[  163.085160][ T5911] usb 1-1: new low-speed USB device number 49 using dummy_hcd
[  163.225109][ T5911] usb 1-1: device descriptor read/64, error -71
[  163.335814][ T5911] usb usb1-port1: attempt power cycle
[  163.575532][ T5943] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  163.675459][ T5911] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  163.715825][ T5911] usb 1-1: device descriptor read/8, error -71
[  163.755177][ T5943] usb 5-1: Using ep0 maxpacket: 8
[  163.770858][ T5943] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  163.794352][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.807284][ T5943] usb 5-1: Product: syz
[  163.811498][ T5943] usb 5-1: Manufacturer: syz
[  163.826818][ T5943] usb 5-1: SerialNumber: syz
[  163.834152][ T5943] usb 5-1: config 0 descriptor??
[  163.955155][ T5911] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  163.975996][ T5911] usb 1-1: device descriptor read/8, error -71
[  164.050235][ T5943] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  164.085497][ T5911] usb usb1-port1: unable to enumerate USB device
[  164.735108][   T87] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  164.764443][ T7822] netlink: 'syz.3.546': attribute type 10 has an invalid length.
[  164.777171][ T7822] 8021q: adding VLAN 0 to HW filter on device team0
[  164.786831][ T7822] bond0: (slave team0): Enslaving as an active interface with an up link
[  164.865174][   T87] usb 3-1: device descriptor read/64, error -71
[  165.115053][   T87] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  165.255124][   T87] usb 3-1: device descriptor read/64, error -71
[  165.375836][   T87] usb usb3-port1: attempt power cycle
[  165.474209][ T7824] netlink: 'syz.0.547': attribute type 21 has an invalid length.
[  165.482253][ T7824] netlink: 164 bytes leftover after parsing attributes in process `syz.0.547'.
[  165.725119][   T87] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  165.756976][   T87] usb 3-1: device descriptor read/8, error -71
[  165.866004][ T5880] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  165.880577][ T5943] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  165.896727][ T7833] netlink: 14 bytes leftover after parsing attributes in process `syz.3.550'.
[  165.909395][ T7833] hsr_slave_0: left promiscuous mode
[  165.916449][ T7833] hsr_slave_1: left promiscuous mode
[  166.005134][   T87] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  166.016651][ T5880] usb 1-1: Using ep0 maxpacket: 32
[  166.023784][ T5880] usb 1-1: config 0 has an invalid interface number: 112 but max is 0
[  166.032889][ T5880] usb 1-1: config 0 has no interface number 0
[  166.039579][   T87] usb 3-1: device descriptor read/8, error -71
[  166.049797][ T5880] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  166.058945][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.066980][ T5880] usb 1-1: Product: syz
[  166.071151][ T5880] usb 1-1: Manufacturer: syz
[  166.075822][ T5880] usb 1-1: SerialNumber: syz
[  166.082208][ T5880] usb 1-1: config 0 descriptor??
[  166.090267][ T5880] gspca_main: conex-2.14.0 probing 0572:0041
[  166.148721][ T5840] usb 5-1: USB disconnect, device number 7
[  166.161235][   T87] usb usb3-port1: unable to enumerate USB device
[  166.176954][ T5943] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  166.325147][ T5943] usb 4-1: device descriptor read/64, error -71
[  166.363837][ T5880] usb 1-1: USB disconnect, device number 52
[  166.575135][ T5943] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  166.705081][ T5943] usb 4-1: device descriptor read/64, error -71
[  166.815369][ T5943] usb usb4-port1: attempt power cycle
[  167.085871][ T5840] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  167.115229][   T87] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  167.155642][ T5943] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  167.175554][ T5943] usb 4-1: device descriptor read/8, error -71
[  167.245122][ T5840] usb 1-1: Using ep0 maxpacket: 16
[  167.261743][ T5840] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  167.275230][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.289014][   T87] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  167.298938][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.308780][   T87] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.321929][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  167.336476][ T5840] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  167.346773][   T87] usb 5-1: config 0 descriptor??
[  167.353961][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.369283][ T5840] usb 1-1: config 0 descriptor??
[  167.425081][ T5943] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  167.466605][ T5943] usb 4-1: device descriptor read/8, error -71
[  167.565516][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.574734][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.575350][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.584380][ T5943] usb usb4-port1: unable to enumerate USB device
[  167.599724][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.603804][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.609902][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.675101][ T5910] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  167.769267][   T87] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f
[  167.776753][   T87] hackrf 5-1:0.0: Could not detect board
[  167.782519][   T87] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  167.797230][   T87] usb 5-1: USB disconnect, device number 8
[  167.805647][ T5840] usbhid 1-1:0.0: can't add hid device: -71
[  167.811629][ T5840] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  167.824593][ T5840] usb 1-1: USB disconnect, device number 53
[  167.838910][ T5910] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.850042][ T5910] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.864002][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0
[  167.871573][ T5910] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  167.880937][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.892118][ T5910] usb 3-1: config 0 descriptor??
[  168.318283][ T5910] microsoft 0003:045E:009D.000D: unknown main item tag 0x3
[  168.346460][ T5910] microsoft 0003:045E:009D.000D: item fetching failed at offset 10/13
[  168.362159][ T5910] microsoft 0003:045E:009D.000D: parse failed
[  168.372190][ T5910] microsoft 0003:045E:009D.000D: probe with driver microsoft failed with error -22
[  168.444283][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'.
[  168.454717][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'.
[  168.463640][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'.
[  168.509961][ T5910] usb 3-1: USB disconnect, device number 56
[  168.671969][ T7874] netlink: 'syz.4.561': attribute type 10 has an invalid length.
[  168.687993][ T7874] 8021q: adding VLAN 0 to HW filter on device team0
[  168.700482][ T7874] bond0: (slave team0): Enslaving as an active interface with an up link
[  169.345102][ T5910] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  169.496285][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  169.511114][ T5910] usb 3-1: config 0 has an invalid interface number: 112 but max is 0
[  169.529485][ T5910] usb 3-1: config 0 has no interface number 0
[  169.549768][ T5910] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  169.562574][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.570806][ T5910] usb 3-1: Product: syz
[  169.575170][ T5910] usb 3-1: Manufacturer: syz
[  169.579882][ T5910] usb 3-1: SerialNumber: syz
[  169.600109][ T5910] usb 3-1: config 0 descriptor??
[  169.614682][ T5910] gspca_main: conex-2.14.0 probing 0572:0041
[  169.826281][ T5840] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  169.903263][ T5910] usb 3-1: USB disconnect, device number 57
[  169.975407][ T5943] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  169.999269][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.023433][ T5840] usb 4-1: config 0 has no interfaces?
[  170.029517][ T5840] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  170.038911][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.056225][ T5840] usb 4-1: config 0 descriptor??
[  170.115477][ T5943] usb 5-1: device descriptor read/64, error -71
[  170.366040][ T5943] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  170.525135][ T5943] usb 5-1: device descriptor read/64, error -71
[  170.635816][ T5943] usb usb5-port1: attempt power cycle
[  170.735163][ T5912] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  170.865089][ T5912] usb 3-1: device descriptor read/64, error -71
[  170.985135][ T5943] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  171.006105][ T5943] usb 5-1: device descriptor read/8, error -71
[  171.105116][ T5912] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  171.255098][ T5943] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  171.262664][ T5912] usb 3-1: device descriptor read/64, error -71
[  171.285531][ T5943] usb 5-1: device descriptor read/8, error -71
[  171.365252][ T5840] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  171.377420][ T5912] usb usb3-port1: attempt power cycle
[  171.395342][ T5943] usb usb5-port1: unable to enumerate USB device
[  171.516566][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.527661][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  171.538535][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  171.551692][ T5840] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  171.561617][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.571590][ T5840] usb 1-1: config 0 descriptor??
[  171.577481][ T7952] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  171.715119][ T5912] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  171.735709][ T5912] usb 3-1: device descriptor read/8, error -71
[  171.975762][ T5912] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  171.996352][ T5912] usb 3-1: device descriptor read/8, error -71
[  172.007098][ T5840] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  172.106263][ T5912] usb usb3-port1: unable to enumerate USB device
[  172.202175][ T5910] usb 1-1: USB disconnect, device number 54
[  172.581917][ T5910] usb 4-1: USB disconnect, device number 48
[  172.908912][ T7978] input: syz0 as /devices/virtual/input/input35
[  173.110179][ T7983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  173.120034][ T7983] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  173.130760][ T7983] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  173.135324][ T5912] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  173.142899][ T7983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  173.295058][ T5912] usb 5-1: Using ep0 maxpacket: 16
[  173.313247][ T5912] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  173.322846][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.332529][ T5912] usb 5-1: Product: syz
[  173.336929][ T5912] usb 5-1: Manufacturer: syz
[  173.341530][ T5912] usb 5-1: SerialNumber: syz
[  173.350981][ T5912] r8152-cfgselector 5-1: Unknown version 0x0000
[  173.357565][ T5912] r8152-cfgselector 5-1: config 0 descriptor??
[  173.420939][ T7994] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  173.456699][ T5880] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  173.602714][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'.
[  173.616447][ T8000] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  173.622208][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.640190][ T5880] usb 4-1: config 0 has no interfaces?
[  173.646493][ T5880] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  173.655663][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.666958][ T5880] usb 4-1: config 0 descriptor??
[  173.772050][ T5840] r8152-cfgselector 5-1: USB disconnect, device number 13
[  173.895614][ T5912] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  174.066932][ T5912] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.076803][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0
[  174.083438][ T5912] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  174.092612][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.102445][ T5912] usb 3-1: config 0 descriptor??
[  174.481344][ T5147] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  174.495133][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  174.495165][ T5147] Tainted: [L]=SOFTLOCKUP
[  174.495172][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  174.495186][ T5147] Workqueue: hci2 hci_rx_work
[  174.495212][ T5147] Call Trace:
[  174.495219][ T5147]  <TASK>
[  174.495227][ T5147]  dump_stack_lvl+0xe8/0x150
[  174.495256][ T5147]  sysfs_create_dir_ns+0x271/0x2a0
[  174.495286][ T5147]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  174.495316][ T5147]  ? do_raw_spin_unlock+0xf5/0x210
[  174.495347][ T5147]  kobject_add_internal+0x62b/0xd00
[  174.495377][ T5147]  kobject_add+0x163/0x240
[  174.495400][ T5147]  ? __pfx_kobject_add+0x10/0x10
[  174.495421][ T5147]  ? _raw_spin_unlock+0x28/0x50
[  174.495449][ T5147]  ? get_device_parent+0x366/0x3a0
[  174.495473][ T5147]  device_add+0x408/0xb70
[  174.495496][ T5147]  hci_conn_add_sysfs+0xd5/0x210
[  174.495519][ T5147]  le_conn_complete_evt+0xf1d/0x1430
[  174.495556][ T5147]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  174.495581][ T5147]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  174.495601][ T5147]  ? __pfx___mutex_lock+0x10/0x10
[  174.495618][ T5147]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  174.495634][ T5147]  ? skb_pull_data+0xfb/0x200
[  174.495662][ T5147]  hci_le_conn_complete_evt+0x187/0x470
[  174.495697][ T5147]  hci_event_packet+0x7af/0x12c0
[  174.495725][ T5147]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  174.495750][ T5147]  ? __pfx_hci_event_packet+0x10/0x10
[  174.495776][ T5147]  ? kcov_remote_start+0x49a/0x7a0
[  174.495803][ T5147]  ? hci_send_to_monitor+0xe2/0x590
[  174.495835][ T5147]  hci_rx_work+0x3ee/0x1030
[  174.495868][ T5147]  ? process_one_work+0x87c/0x15a0
[  174.495888][ T5147]  process_one_work+0x949/0x15a0
[  174.495929][ T5147]  ? __pfx_process_one_work+0x10/0x10
[  174.495947][ T5147]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.495984][ T5147]  worker_thread+0xb46/0x1140
[  174.496013][ T5147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  174.496062][ T5147]  kthread+0x388/0x470
[  174.496090][ T5147]  ? __pfx_worker_thread+0x10/0x10
[  174.496110][ T5147]  ? __pfx_kthread+0x10/0x10
[  174.496139][ T5147]  ret_from_fork+0x51b/0xa40
[  174.496162][ T5147]  ? __pfx_ret_from_fork+0x10/0x10
[  174.496173][ T5147]  ? __switch_to+0xc7d/0x1400
[  174.496190][ T5147]  ? __pfx_kthread+0x10/0x10
[  174.496205][ T5147]  ret_from_fork_asm+0x1a/0x30
[  174.496236][ T5147]  </TASK>
[  174.496266][ T5147] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  174.580038][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.585125][ T5147] Bluetooth: hci2: failed to register connection device
[  174.618069][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.715283][ T5880] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  174.763570][ T5912] aquacomputer_d5next 0003:0C70:F011.000F: hidraw0: USB HID vff.ff Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0
[  174.918994][ T5880] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  174.930463][ T5910] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  174.951712][ T5880] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  174.961042][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.970995][ T5880] usb 1-1: Product: syz
[  174.975415][ T5880] usb 1-1: Manufacturer: syz
[  174.978505][ T5912] usb 3-1: USB disconnect, device number 62
[  174.980017][ T5880] usb 1-1: SerialNumber: syz
[  175.001093][ T5880] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  175.085797][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  175.092442][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.103308][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  175.113448][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  175.122572][ T5910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  175.130810][ T5910] usb 5-1: Manufacturer: syz
[  175.137743][ T5910] usb 5-1: config 0 descriptor??
[  175.388130][ T8008] netlink: 17223 bytes leftover after parsing attributes in process `syz.4.586'.
[  175.404443][ T5910] usb 5-1: USB disconnect, device number 14
[  175.419775][ T5880] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  175.449327][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.463552][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.645207][ T8023] netlink: 'syz.2.588': attribute type 83 has an invalid length.
[  175.846353][   T87] usb 1-1: USB disconnect, device number 55
[  176.226907][ T5910] usb 4-1: USB disconnect, device number 49
[  176.245224][ T5912] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[  176.365103][ T5911] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  176.454532][ T5912] usb 3-1: config 4 has an invalid interface descriptor of length 5, skipping
[  176.463583][ T5912] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  176.475232][ T5912] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2
[  176.484492][ T5912] usb 3-1: config 4 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  176.500190][ T5912] usb 3-1: config 4 interface 0 has no altsetting 0
[  176.507145][ T5911] usb 5-1: device descriptor read/64, error -71
[  176.628414][ T8060] kvm: Disabled LAPIC found during irq injection
[  176.648778][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'.
[  176.745673][ T5911] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  176.875131][ T5911] usb 5-1: device descriptor read/64, error -71
[  176.945234][ T5910] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  176.985678][ T5911] usb usb5-port1: attempt power cycle
[  177.095104][ T5910] usb 1-1: Using ep0 maxpacket: 16
[  177.103699][ T5910] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  177.112881][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.120947][ T5910] usb 1-1: Product: syz
[  177.125169][ T5910] usb 1-1: Manufacturer: syz
[  177.129768][ T5910] usb 1-1: SerialNumber: syz
[  177.136908][ T5910] usb 1-1: config 0 descriptor??
[  177.205139][   T87] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  177.325095][ T5911] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  177.343866][ T5910] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[  177.351550][ T5910] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  177.359012][ T5911] usb 5-1: device descriptor read/8, error -71
[  177.367955][ T5910] usb 1-1: USB disconnect, device number 56
[  177.369188][   T87] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.387932][   T87] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  177.400602][   T87] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  177.410635][   T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.420857][   T87] usb 4-1: config 0 descriptor??
[  177.605093][ T5911] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  177.626519][ T5911] usb 5-1: device descriptor read/8, error -71
[  177.736768][ T5911] usb usb5-port1: unable to enumerate USB device
[  178.115140][ T5911] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  178.265125][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  178.271916][ T5911] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  178.282411][ T5911] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[  178.293541][ T5911] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  178.306957][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0
[  178.317000][ T5911] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  178.326178][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.334158][ T5911] usb 1-1: Product: syz
[  178.338643][ T5911] usb 1-1: Manufacturer: syz
[  178.343259][ T5911] usb 1-1: SerialNumber: syz
[  178.350359][ T5911] usb 1-1: config 0 descriptor??
[  178.573224][ T5911] kobil_sct 1-1:0.0: required endpoints missing
[  178.582844][ T5911] usb 1-1: USB disconnect, device number 57
[  179.000750][ T5912] usb 3-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=37.cc
[  179.023302][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.064570][ T5912] usb 3-1: can't set config #4, error -71
[  179.068480][ T8085] binder: BINDER_SET_CONTEXT_MGR already set
[  179.080035][ T5912] usb 3-1: USB disconnect, device number 63
[  179.088352][ T8085] binder: 8084:8085 ioctl 4018620d 2000000002c0 returned -16
[  179.434830][ T5147] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  179.446450][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.446481][ T5147] Tainted: [L]=SOFTLOCKUP
[  179.446489][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  179.446508][ T5147] Workqueue: hci0 hci_rx_work
[  179.446536][ T5147] Call Trace:
[  179.446543][ T5147]  <TASK>
[  179.446551][ T5147]  dump_stack_lvl+0xe8/0x150
[  179.446581][ T5147]  sysfs_create_dir_ns+0x271/0x2a0
[  179.446612][ T5147]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  179.446641][ T5147]  ? do_raw_spin_unlock+0xf5/0x210
[  179.446674][ T5147]  kobject_add_internal+0x62b/0xd00
[  179.446704][ T5147]  kobject_add+0x163/0x240
[  179.446729][ T5147]  ? __pfx_kobject_add+0x10/0x10
[  179.446749][ T5147]  ? _raw_spin_unlock+0x28/0x50
[  179.446786][ T5147]  ? get_device_parent+0x366/0x3a0
[  179.446811][ T5147]  device_add+0x408/0xb70
[  179.446832][ T5147]  hci_conn_add_sysfs+0xd5/0x210
[  179.446857][ T5147]  le_conn_complete_evt+0xf1d/0x1430
[  179.446894][ T5147]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  179.446919][ T5147]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  179.446941][ T5147]  ? __pfx___mutex_lock+0x10/0x10
[  179.446959][ T5147]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  179.446977][ T5147]  ? skb_pull_data+0xfb/0x200
[  179.447005][ T5147]  hci_le_conn_complete_evt+0x187/0x470
[  179.447039][ T5147]  hci_event_packet+0x7af/0x12c0
[  179.447068][ T5147]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  179.447093][ T5147]  ? __pfx_hci_event_packet+0x10/0x10
[  179.447120][ T5147]  ? kcov_remote_start+0x49a/0x7a0
[  179.447148][ T5147]  ? hci_send_to_monitor+0xe2/0x590
[  179.447180][ T5147]  hci_rx_work+0x3ee/0x1030
[  179.447212][ T5147]  ? process_one_work+0x87c/0x15a0
[  179.447232][ T5147]  process_one_work+0x949/0x15a0
[  179.447274][ T5147]  ? __pfx_process_one_work+0x10/0x10
[  179.447294][ T5147]  ? do_raw_spin_lock+0x12b/0x2f0
[  179.447338][ T5147]  worker_thread+0xb46/0x1140
[  179.447371][ T5147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  179.447411][ T5147]  kthread+0x388/0x470
[  179.447438][ T5147]  ? __pfx_worker_thread+0x10/0x10
[  179.447458][ T5147]  ? __pfx_kthread+0x10/0x10
[  179.447486][ T5147]  ret_from_fork+0x51b/0xa40
[  179.447511][ T5147]  ? __pfx_ret_from_fork+0x10/0x10
[  179.447531][ T5147]  ? __switch_to+0xc7d/0x1400
[  179.447564][ T5147]  ? __pfx_kthread+0x10/0x10
[  179.447592][ T5147]  ret_from_fork_asm+0x1a/0x30
[  179.447633][ T5147]  </TASK>
[  179.447657][ T5147] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  179.700050][ T5147] Bluetooth: hci0: failed to register connection device
[  179.712903][ T5147] ==================================================================
[  179.721004][ T5147] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x87d/0x13e0
[  179.728995][ T5147] Read of size 8 at addr ffff888079351480 by task kworker/u9:1/5147
[  179.736967][ T5147] 
[  179.739290][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.739314][ T5147] Tainted: [L]=SOFTLOCKUP
[  179.739320][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  179.739331][ T5147] Workqueue: hci0 hci_rx_work
[  179.739353][ T5147] Call Trace:
[  179.739360][ T5147]  <TASK>
[  179.739365][ T5147]  dump_stack_lvl+0xe8/0x150
[  179.739386][ T5147]  print_report+0xba/0x230
[  179.739404][ T5147]  ? l2cap_connect_cfm+0x87d/0x13e0
[  179.739427][ T5147]  kasan_report+0x117/0x150
[  179.739450][ T5147]  ? l2cap_connect_cfm+0x87d/0x13e0
[  179.739473][ T5147]  l2cap_connect_cfm+0x87d/0x13e0
[  179.739504][ T5147]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  179.739526][ T5147]  ? __pfx_bt_err+0x10/0x10
[  179.739543][ T5147]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  179.739564][ T5147]  hci_connect_cfm+0x95/0x140
[  179.739585][ T5147]  le_conn_complete_evt+0xf65/0x1430
[  179.739610][ T5147]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  179.739630][ T5147]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  179.739644][ T5147]  ? __pfx___mutex_lock+0x10/0x10
[  179.739657][ T5147]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  179.739669][ T5147]  ? skb_pull_data+0xfb/0x200
[  179.739687][ T5147]  hci_le_conn_complete_evt+0x187/0x470
[  179.739708][ T5147]  hci_event_packet+0x7af/0x12c0
[  179.739726][ T5147]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  179.739744][ T5147]  ? __pfx_hci_event_packet+0x10/0x10
[  179.739762][ T5147]  ? kcov_remote_start+0x49a/0x7a0
[  179.739781][ T5147]  ? hci_send_to_monitor+0xe2/0x590
[  179.739803][ T5147]  hci_rx_work+0x3ee/0x1030
[  179.739822][ T5147]  ? process_one_work+0x87c/0x15a0
[  179.739837][ T5147]  process_one_work+0x949/0x15a0
[  179.739858][ T5147]  ? __pfx_process_one_work+0x10/0x10
[  179.739872][ T5147]  ? do_raw_spin_lock+0x12b/0x2f0
[  179.739898][ T5147]  worker_thread+0xb46/0x1140
[  179.739917][ T5147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  179.739940][ T5147]  kthread+0x388/0x470
[  179.739960][ T5147]  ? __pfx_worker_thread+0x10/0x10
[  179.739975][ T5147]  ? __pfx_kthread+0x10/0x10
[  179.739995][ T5147]  ret_from_fork+0x51b/0xa40
[  179.740011][ T5147]  ? __pfx_ret_from_fork+0x10/0x10
[  179.740026][ T5147]  ? __switch_to+0xc7d/0x1400
[  179.740049][ T5147]  ? __pfx_kthread+0x10/0x10
[  179.740069][ T5147]  ret_from_fork_asm+0x1a/0x30
[  179.740092][ T5147]  </TASK>
[  179.740097][ T5147] 
[  179.966148][ T5147] Allocated by task 5147:
[  179.970461][ T5147]  kasan_save_track+0x3e/0x80
[  179.975139][ T5147]  __kasan_kmalloc+0x93/0xb0
[  179.979717][ T5147]  __kmalloc_cache_noprof+0x31c/0x660
[  179.985080][ T5147]  l2cap_chan_create+0x51/0x790
[  179.989917][ T5147]  l2cap_sock_new_connection_cb+0x182/0x2e0
[  179.995793][ T5147]  l2cap_connect_cfm+0x368/0x13e0
[  180.000814][ T5147]  hci_connect_cfm+0x95/0x140
[  180.005483][ T5147]  le_conn_complete_evt+0xf65/0x1430
[  180.010764][ T5147]  hci_le_conn_complete_evt+0x187/0x470
[  180.016306][ T5147]  hci_event_packet+0x7af/0x12c0
[  180.021235][ T5147]  hci_rx_work+0x3ee/0x1030
[  180.025725][ T5147]  process_one_work+0x949/0x15a0
[  180.030648][ T5147]  worker_thread+0xb46/0x1140
[  180.035308][ T5147]  kthread+0x388/0x470
[  180.039365][ T5147]  ret_from_fork+0x51b/0xa40
[  180.043953][ T5147]  ret_from_fork_asm+0x1a/0x30
[  180.048706][ T5147] 
[  180.051017][ T5147] Freed by task 8104:
[  180.054974][ T5147]  kasan_save_track+0x3e/0x80
[  180.059651][ T5147]  kasan_save_free_info+0x46/0x50
[  180.064670][ T5147]  __kasan_slab_free+0x5c/0x80
[  180.069425][ T5147]  kfree+0x1c1/0x610
[  180.073311][ T5147]  l2cap_sock_cleanup_listen+0xf0/0x440
[  180.078841][ T5147]  l2cap_sock_release+0x6a/0x230
[  180.083762][ T5147]  __sock_release+0xb9/0x250
[  180.088339][ T5147]  sock_close+0x1c/0x30
[  180.092481][ T5147]  __fput+0x44f/0xa70
[  180.096448][ T5147]  task_work_run+0x1d9/0x270
[  180.101043][ T5147]  exit_to_user_mode_loop+0xed/0x480
[  180.106407][ T5147]  do_syscall_64+0x2b7/0xf80
[  180.111006][ T5147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.116891][ T5147] 
[  180.119247][ T5147] The buggy address belongs to the object at ffff888079351000
[  180.119247][ T5147]  which belongs to the cache kmalloc-2k of size 2048
[  180.133291][ T5147] The buggy address is located 1152 bytes inside of
[  180.133291][ T5147]  freed 2048-byte region [ffff888079351000, ffff888079351800)
[  180.147248][ T5147] 
[  180.149559][ T5147] The buggy address belongs to the physical page:
[  180.155972][ T5147] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79350
[  180.164724][ T5147] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  180.173381][ T5147] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  180.180921][ T5147] page_type: f5(slab)
[  180.184901][ T5147] raw: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  180.193466][ T5147] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  180.202050][ T5147] head: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  180.210705][ T5147] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  180.219357][ T5147] head: 00fff00000000003 ffffea0001e4d401 00000000ffffffff 00000000ffffffff
[  180.228025][ T5147] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  180.236688][ T5147] page dumped because: kasan: bad access detected
[  180.243109][ T5147] page_owner tracks the page as allocated
[  180.248893][ T5147] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5825, tgid 5825 (syz-executor), ts 70343350263, free_ts 68093497155
[  180.270241][ T5147]  post_alloc_hook+0x231/0x280
[  180.275041][ T5147]  get_page_from_freelist+0x24dc/0x2580
[  180.280589][ T5147]  __alloc_frozen_pages_noprof+0x18d/0x380
[  180.286395][ T5147]  allocate_slab+0x7b/0x660
[  180.290910][ T5147]  refill_objects+0x33a/0x3d0
[  180.295581][ T5147]  __pcs_replace_empty_main+0x2b9/0x620
[  180.301120][ T5147]  __kmalloc_cache_noprof+0x392/0x660
[  180.306499][ T5147]  rtnl_newlink+0x136/0x1be0
[  180.311113][ T5147]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  180.316054][ T5147]  netlink_rcv_skb+0x232/0x4b0
[  180.320818][ T5147]  netlink_unicast+0x80f/0x9b0
[  180.325578][ T5147]  netlink_sendmsg+0x813/0xb40
[  180.330354][ T5147]  sock_sendmsg_nosec+0x18f/0x1d0
[  180.335408][ T5147]  __sys_sendto+0x3ff/0x590
[  180.339909][ T5147]  __x64_sys_sendto+0xde/0x100
[  180.344667][ T5147]  do_syscall_64+0xe2/0xf80
[  180.349193][ T5147] page last free pid 5813 tgid 5813 stack trace:
[  180.355512][ T5147]  __free_frozen_pages+0xc01/0xd80
[  180.360655][ T5147]  __folio_put+0x414/0x4f0
[  180.365071][ T5147]  skb_release_data+0x4df/0x8e0
[  180.369919][ T5147]  __kfree_skb+0x5d/0x210
[  180.374259][ T5147]  tcp_ack+0x26ed/0x7890
[  180.378504][ T5147]  tcp_rcv_established+0x13e6/0x25b0
[  180.383783][ T5147]  tcp_v4_do_rcv+0xa90/0x1430
[  180.388452][ T5147]  __release_sock+0x265/0x3a0
[  180.393121][ T5147]  __sk_flush_backlog+0x36/0xc0
[  180.397957][ T5147]  tcp_sendmsg_locked+0x416e/0x5320
[  180.403186][ T5147]  tcp_sendmsg+0x2f/0x50
[  180.407421][ T5147]  sock_sendmsg_nosec+0x128/0x1d0
[  180.412517][ T5147]  sock_write_iter+0x302/0x410
[  180.417267][ T5147]  vfs_write+0x61d/0xb90
[  180.421495][ T5147]  ksys_write+0x150/0x270
[  180.425816][ T5147]  do_syscall_64+0xe2/0xf80
[  180.430331][ T5147] 
[  180.432667][ T5147] Memory state around the buggy address:
[  180.438277][ T5147]  ffff888079351380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  180.446339][ T5147]  ffff888079351400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  180.454380][ T5147] >ffff888079351480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  180.462421][ T5147]                    ^
[  180.466476][ T5147]  ffff888079351500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  180.474608][ T5147]  ffff888079351580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  180.482665][ T5147] ==================================================================
[  180.505760][ T5147] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  180.513010][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.524492][ T5147] Tainted: [L]=SOFTLOCKUP
[  180.528803][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  180.538930][ T5147] Workqueue: hci0 hci_rx_work
[  180.543603][ T5147] Call Trace:
[  180.546867][ T5147]  <TASK>
[  180.549787][ T5147]  vpanic+0x1e0/0x670
[  180.553766][ T5147]  panic+0xc5/0xd0
[  180.557481][ T5147]  ? __pfx_panic+0x10/0x10
[  180.561887][ T5147]  ? preempt_schedule_thunk+0x16/0x30
[  180.567246][ T5147]  ? l2cap_connect_cfm+0x87d/0x13e0
[  180.572439][ T5147]  check_panic_on_warn+0x89/0xb0
[  180.577379][ T5147]  ? l2cap_connect_cfm+0x87d/0x13e0
[  180.582571][ T5147]  end_report+0x6f/0x140
[  180.586808][ T5147]  kasan_report+0x128/0x150
[  180.591303][ T5147]  ? l2cap_connect_cfm+0x87d/0x13e0
[  180.596501][ T5147]  l2cap_connect_cfm+0x87d/0x13e0
[  180.601521][ T5147]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  180.606990][ T5147]  ? __pfx_bt_err+0x10/0x10
[  180.611492][ T5147]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  180.616946][ T5147]  hci_connect_cfm+0x95/0x140
[  180.621615][ T5147]  le_conn_complete_evt+0xf65/0x1430
[  180.626896][ T5147]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  180.632611][ T5147]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  180.638260][ T5147]  ? __pfx___mutex_lock+0x10/0x10
[  180.643356][ T5147]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  180.649329][ T5147]  ? skb_pull_data+0xfb/0x200
[  180.654029][ T5147]  hci_le_conn_complete_evt+0x187/0x470
[  180.659579][ T5147]  hci_event_packet+0x7af/0x12c0
[  180.664510][ T5147]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  180.669962][ T5147]  ? __pfx_hci_event_packet+0x10/0x10
[  180.675331][ T5147]  ? kcov_remote_start+0x49a/0x7a0
[  180.680455][ T5147]  ? hci_send_to_monitor+0xe2/0x590
[  180.685739][ T5147]  hci_rx_work+0x3ee/0x1030
[  180.690241][ T5147]  ? process_one_work+0x87c/0x15a0
[  180.695339][ T5147]  process_one_work+0x949/0x15a0
[  180.700298][ T5147]  ? __pfx_process_one_work+0x10/0x10
[  180.705657][ T5147]  ? do_raw_spin_lock+0x12b/0x2f0
[  180.710682][ T5147]  worker_thread+0xb46/0x1140
[  180.715352][ T5147]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  180.721152][ T5147]  kthread+0x388/0x470
[  180.725212][ T5147]  ? __pfx_worker_thread+0x10/0x10
[  180.730397][ T5147]  ? __pfx_kthread+0x10/0x10
[  180.734975][ T5147]  ret_from_fork+0x51b/0xa40
[  180.739558][ T5147]  ? __pfx_ret_from_fork+0x10/0x10
[  180.744742][ T5147]  ? __switch_to+0xc7d/0x1400
[  180.749422][ T5147]  ? __pfx_kthread+0x10/0x10
[  180.754012][ T5147]  ret_from_fork_asm+0x1a/0x30
[  180.758776][ T5147]  </TASK>
[  180.762269][ T5147] Kernel Offset: disabled
[  180.766576][ T5147] Rebooting in 86400 seconds..