last executing test programs:

2m36.648596629s ago: executing program 3 (id=384):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) (async, rerun: 64)
ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x4, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0xff, 0x4, 0x1, 0x0, 0x0, 0x100000000000000}, {0x80, 0x100, 0x0, 0x0, 0x2, 0x0, 0xf2, 0x0, 0x3, 0x2, 0x0, 0x10, 0x3ba}, {0xffffffff, 0x2fe, 0x7, 0x0, 0x0, 0x0, 0x5, 0x3, 0x6, 0x4, 0xfe, 0x0, 0x800}], 0x6}) (async, rerun: 64)
syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008fd07040040000102030109026e000301064008090400000001010000"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc8, &(0x7f0000000640)=@string={0xc8, 0x3, "7fb98ee8d0aec895beb785e468b02898a4a5a23727a7328029aefac62b22652b2ff8a14654d6cfe81fc3934b3b979db8db9b501c6e89feec097907e7c296c57be4013e2f7ccf7222da30e92c3dd9d08888d242b297354307d4aacccad43970c47b2cbd1c3096f4579a71a6c15f8583f6d26da3074a266c4e012f1b217c7e1d23ab2f1753068c134752475853437af67cedb8c5330abd76551733e6c803fccf460b894b8d0fd17e05166f05803cabc3217c772b0b96ce955db4988e1b9233ebcae8bae176cb4b"}}]}) (async)
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xd0, 0xd, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9d, 0x8, 0x6, 0x10, 0x6}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ef35d449cd47c1221d41224bfcc084de"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x101, 0xff00, 0xf5f1, [0x0, 0x1fe0030, 0x0, 0xff00c0, 0x3f30, 0x0]}]}, 0x9, [{0x30, &(0x7f0000000140)=@string={0x30, 0x3, "d9fc50f5bb9e84ea903b4f7cf60096e007457596d2bc6dc4455ee97cd5e809f3955547d60a32855c6d9f26371326"}}, {0x9f, &(0x7f0000000180)=@string={0x9f, 0x3, "1f1183a71e016ace3c028118d071c974d2c4026407d22764ae0ea9a4116699be54736850a17983c3b9bf79431a0aa03b77a297b5726af502876266c5558fbd88c0203f0cd3ab17975417a81a25d03e884ecef504839ee5332fd1808813e728daea5785ee43f0194450ec0c321e8a7ee89bf97ee8b5a965b55400498369b65679e5062da030a349a9b6ae5e60d06cd9a5445a6cc9c268d78802681beb1c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "6cb7f87ea4dc54295153c8bbbbbc15dcd4ff35036d26777fee323469dcf703f99bf8264b69af8ad2e37d64fdea918c723afa7af9ccbc0ece62bb678cc6b7e14498ce92662523e96b7b143ab0f017db715763fb64cdb9876e097ef054c4b245f38166c5bd08ca9878d3fac829f413e1af62"}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "a2862210c8507d32b3f7a93e494e088813d4bdfb64ec1a07affa0aeddf7dbd2b35ce14dfb55fef0eb99421a08405d51906529418f644426f2db2b472791d44d8bfd80b1ab2bcc06bffb9eb19a51f4baa5bb530530329b363ee7206e593ef26f0aac2937a853751514e6c815a6e048eb3d77c79cfc7a405d6"}}, {0x26, &(0x7f0000000280)=@string={0x26, 0x3, "36a93947f785e07da049499fa1a1511d020363ee78039a8e529952e556fba18c424bec9e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x26, &(0x7f0000000480)=@string={0x26, 0x3, "0d1608ef6be69f7cc8313c00bda06fbeefa05fae48d73ac2b6e26caf7c7e8aab2c672bb4"}}, {0x78, &(0x7f0000000500)=@string={0x78, 0x3, "f831c190ff50bf5d988e0974daaa7b7e50ce8f7833fc7fd01302de08bdbd91ed129a33079d339d37682ede90bf506e66ebcf4fe9591119e9c8dccd01fbf59742c095b3e0b9822feda9d52a564dfeaaa67969293278f02ccff2f6d21313730cd9476512cc8f34f1a747a601087b27256318bf1445ad3e"}}]})

2m36.594570754s ago: executing program 3 (id=385):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000081000000000001"], 0xfdef)

2m36.441678439s ago: executing program 3 (id=386):
memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00a4ffffff0000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)

2m36.363827374s ago: executing program 3 (id=387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xec, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "fa683de059fa591cab5ca5aacdc4895070ec77b25356a9bca36b120574ed19e02600c305c9503a3656209baafe93fb810814aae93f0c6189b08acc6c8ee99da87f6c0006759059154292a0c544a997d17d24ac10879b224c77b104981ac7edf02f4079ccb59e0c4179069cf8a9d12fd57956a9ef119acdae916c37d5f6f67b44569c4d81611803129d"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$sock(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}, 0x4000084)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x44, &(0x7f0000000480)={[{0x9, 0x4e00, "68833fe1d7ba2dbd15"}, {0x2b, 0x4e00, "4526467dd8c0dcc060394de731c9dd6f870fc0a8368746dd82a4ac56c8fca5174ecee65c975a4fb80abf41"}, {}]})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000580)={0x6, 0x0, [{0xa0f, 0x0, 0x8000000000000000}, {0x9bf, 0x0, 0x2}, {0xa5c, 0x0, 0x4}, {0x38c, 0x0, 0x8f5}, {0xb3e, 0x0, 0x1ff}, {0xa5f, 0x0, 0x6}]})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11)
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'})

2m34.251131559s ago: executing program 3 (id=410):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000010000ac1e000100000000000000000000000000000001000000000a0040"], 0xb8}}, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x44, 0x0)

2m34.0313641s ago: executing program 3 (id=413):
socket(0xa, 0x3, 0x3a)
r0 = socket(0x21, 0x1, 0x3e)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
close(0x3)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x2, 0x12) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000080))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x8031, 0xffffffffffffffff, 0x0) (async)
read$FUSE(r5, &(0x7f0000002c80)={0x2020}, 0x2020) (async)
ioctl$NBD_DO_IT(r4, 0xab05) (async)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc})
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f00000001c0))

2m19.067216192s ago: executing program 32 (id=413):
socket(0xa, 0x3, 0x3a)
r0 = socket(0x21, 0x1, 0x3e)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
close(0x3)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180)=0x2, 0x12) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000080))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x8031, 0xffffffffffffffff, 0x0) (async)
read$FUSE(r5, &(0x7f0000002c80)={0x2020}, 0x2020) (async)
ioctl$NBD_DO_IT(r4, 0xab05) (async)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc})
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f00000001c0))

22.302305588s ago: executing program 2 (id=1583):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x1)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x163)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x85)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

22.135810853s ago: executing program 2 (id=1584):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0x40049366, 0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000400)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x4) (async)
r5 = socket(0x10, 0x80000, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x800c050}, 0x90)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x400}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x90) (async)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000180)={0x10000009, 0x0, 0x2, 0x0, 0x7}) (async)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(r7, 0x1)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f00000001c0)={@any, 0x3, 0x7, 0x101, 0x183, 0x8000, "77dca72900a5e00c114f9c7d6879ad491681f44450e9544830c4afbef73abce5753b800a4b83ab9c1ccce10f4344be284dae2a2b638bb2b6f2b55d4bb0ceb6adbedc993de2d3ef01bb9dd75b2a65a88a560fbec0455bd71210be5ae4fa3842bb8a1dbe68622a8b763b89680ec67258dcdf2280fc5bdc7b40756e579fef0d1064"}) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x34200, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x24a7c1, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r10, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b7046"}}, 0x36)
ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000140)={0xc223, 0x2}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000300)={0x2, 'dummy0\x00'}) (async)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000440))

22.00505572s ago: executing program 2 (id=1587):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40"], 0x0)

20.724837192s ago: executing program 2 (id=1598):
mkdir(&(0x7f0000000940)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000880)=@ethtool_coalesce={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x536, 0x0, 0x2, 0x0, 0x2, 0x0, 0x7}})

20.644314118s ago: executing program 2 (id=1599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000090900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

20.151355148s ago: executing program 2 (id=1606):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100180}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1a, 0x2a, [@chsw_timing={0x68, 0x4, {0x7ac, 0xc}}, @mesh_chsw={0x76, 0x6, {0x95, 0x17, 0x29, 0xf}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="79f5957b17b6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="17f8cb0695ab"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x4)
r3 = accept4(r0, 0x0, 0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0)
ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3)

19.76227458s ago: executing program 33 (id=1606):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100180}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1a, 0x2a, [@chsw_timing={0x68, 0x4, {0x7ac, 0xc}}, @mesh_chsw={0x76, 0x6, {0x95, 0x17, 0x29, 0xf}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="79f5957b17b6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="17f8cb0695ab"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x4)
r3 = accept4(r0, 0x0, 0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0)
ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3)

6.804089097s ago: executing program 4 (id=1720):
memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd000000a4ffffff00000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)

6.771636977s ago: executing program 4 (id=1722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x2, 0x1, 0x8000000000000001, 0x0, 0x8})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0xf8, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14)
r7 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xd1)
close(0xffffffffffffffff)
mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_auto}], [], 0x2c})
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)

6.631341232s ago: executing program 4 (id=1724):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000b48115000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1ae27700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000eedbb46bea0b6c94000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1264fa146208a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e500", 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0xffffffff9c080830, 0xfffd, 0x2c, 0xa000001, 0x7, 0x0, 0x0, 0x2, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x45c203, 0x5b4}, 0x18)
r2 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYBLOB='\\'])
r3 = fanotify_init(0x20, 0x2)
write(r3, &(0x7f0000000140)="1ce6545f214cdac50000", 0xa)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

3.930383411s ago: executing program 5 (id=1742):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x2, 0x7fff7ffc}]}) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000080)={0x4, 0x9, 0x6bf61d6f, 0x8, 0xff, 0x30, "dfbc0221721f95b18270a1a1d37d1bef", 0x3, 0x4, 0x54, 0x0, 0xb, 0x6, 0x1}) (async)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) (async)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r7], 0x7) (async)
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

3.815442363s ago: executing program 5 (id=1743):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x0, 0x6, 0x1, '7'}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x60, 0x7}, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000840)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x5}})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001300)={0x44, &(0x7f00000010c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="200c8f0000008f310210a17b47efa2fa26244d7a00ee54804544fc3e3f6247fbed3fb44172f80be28c7f00bb3f4b5fee55e0062638975801df0aa70c7e8d4006f3750d27e1c3af1b31e6fb4597d8d911bc88fc6d1fe385c786159e351958edd07ff68f4880d682eff98f891e88c10d3332acd23b6e13ebece821d6c6ff7d48e0d6667bd5a4204e545cae3e735d9db2a240156ce8298403220ba2485d8d867a7f286292e4c1d1e5ca907918216a87becfc7bfa51772b32c8424cab5e62d51815f7598d62546248337b59d972d690c07d69d7a0c5661329295ca8c9a84f57edb"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f00000006c0)={0x40, 0xa, 0xd3, "2cf5f6805e299f6a60ed60dc5ca2600ee6000af288ca74fb6cd2e34a7945281f46943bc637e15598ff254f9fbbba87a1f6b0b96977c3883511ec19b7867fda339bcda683f9e67f2ada82ab8ea1e3a080e0eb4e13cd9926cbfb6d9e7dccbf7d2c641f6730c0eb91b22ff1beec65eb7b012e0ff0cd3400f2c92442e1cc31e8c5441de82ae29a0dcb034bc7f3cd015dc08c1a54186cb76b0ab20100d1f3122fd08b24f1f2a23aa9f661536bc9a0821c757e739c70b903ecbb4f41cd1a66645eaaa1b93de185d9ce6ebe5850c02ecfc155a773996b"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}})
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0xb, '\f\b'}, @global]}}, 0x0}, 0x0)
madvise(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x12)
r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7})
mq_timedreceive(r2, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000000000500000900000000000002000000000000", @ANYRES32=0x0], 0x20}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r4=>0x0})
getpgrp(r4)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000080)=0x80000001)

3.496962653s ago: executing program 4 (id=1748):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000010000ac1e000100000000000000000000000000000000000000070a0040"], 0xb8}}, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x44, 0x0)

3.261733558s ago: executing program 4 (id=1751):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0xd90, 0x0, 0x1}]})
io_setup(0x6, 0x0)
socket$inet(0x2, 0x80001, 0x5)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @private=0xa010101}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="4c01000000000000006e652043617074757265272030303030303030303030303030303030303030300a4c494e4531"], 0x30)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100002000000000020"], 0x24, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)

2.940430899s ago: executing program 4 (id=1754):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="000900000000ad5fd49aab716118edba37eb816f0400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x61, {0x61, 0x23, "862d1a8eb8a4dd8c0a84b7055430c3b8236997fa63d81df5a4f0d8021cc80158427b3911df0f00b07733e033c6f9d3341bf5ca11ee9e34400bc648640c0ff19b7bf6226fcd3b410e9348887df0aaaca42a74444a08612cb0c8bfa541a7438b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x20, 0x18, 0xa8, "1a4644fb325e555ff4fe943cfd367afcfdbf341d2e6dc8b4c3f1eb8b12970d6f6e7710a969e9701fdcf4b448fb21f5a1118b638e90957b75bdf689d2c69f173c1af79155955bbb38b487df07fdedeefdbbc01cfa8d9d465a5899842d3fb5d29e916cac663cbea6409e1bb1f520da61b20897dbbad72362d8b09d904c975ba0f254c585666d9dedbe99f4944e96225d9b79f068532ece11561fc9fd73343e05969bff5e48abf363d9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x0, 0x4f, {0x4d, "8717b4906a9bdc7ad30a36d79643bccada990179875612058631bd830bff8518ef9a66cc3f9fc0ed06197c4b8e991db423ffd5da96ac865a1d48ea9e7f681e05a856935f09297ca16fae678050"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}})
ioctl$LOOP_CONFIGURE(r1, 0x4c00, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000000)={0xffffffffffffffc0, 0x100, 0xd, 0xf81f, 0x0, 0x2, 0x4})

1.849252178s ago: executing program 0 (id=1767):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="88", 0x1}, {&(0x7f0000000280)="c9460a979724f87c8d7ee9530891173262c042d383a434066ca4ad856f72956699bc7078a3a73b228cc884eecb17660580f73d5cd1023ef5579205bfe6faf90e6d2ee07acc8ff1fc011313355a1c9624255ca3e80d039b40ebeaef06d0e53b2b3d79ac530e2fcbe67d83fb82420822bc3cd635e23aa487627300552789215e446524c8c2f04799f1771bba0fb872119dde47347d371efe31f3e92b52a863a311f0b27d8ca8dae8d3049428c35241df6f79817e5cf8f1a366121b30e0d07ec2e569929c58a3", 0xc5}], 0x2}, 0x48043)
r3 = dup(r1)
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="004180fd9000000000000050b12076cb0e2c47000000803030d4bb06b7e49e37bc41c8a4070000004c480362e910a556227afe07e93a558b2b99ff6c60915213a4ecfb86cae650354ccb01f9cbace71e"], 0x16)
write$P9_RVERSION(r2, &(0x7f0000000100)=ANY=[], 0x13)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, &(0x7f00000008c0)=[{0x0, 0x38, 0x0, 0xfd, @time, {}, {0xe}, @result}], 0x1c)
getsockopt$inet_buf(r0, 0x118, 0x2, 0x0, &(0x7f00000003c0))
write(r1, &(0x7f0000002200)="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", 0x1000)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000080))
ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x1ff)
r9 = inotify_init()
ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x7dffffffffffffff)

1.685029608s ago: executing program 0 (id=1768):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
shutdown(r0, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x67, @remote, 0x4}}, 0x3, 0x4, 0xd688, 0x2, 0x60, 0x8, 0x6}, &(0x7f0000000000)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x10}, 0x90)

1.482976851s ago: executing program 0 (id=1770):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="e40100001500130700000000ffdbdf2500000000000000000000000000000001ff0200000000000000000000000000010004fffc4e210001000000007d000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/412], 0x1e4}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

1.252133143s ago: executing program 0 (id=1772):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r0 = userfaultfd(0x801)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000884c038408000400030000010000001c0afe08a838e25c650836000000bbbbbbbbbbbb88a84d00810066000800454200400065000009069078e0000002ffffffff0000670000000000000000000000000200004e2200004e240000000100000004000000040000000300000001dff7c2a91e70b1c771d65bea03d8830207f441efb73203b8495838d1a93c6d44c9c67179b5887273c1717b36f910c304e92a53b07aaaebdede967f919be8919700633b844b5ba22671a150a62718c05ef0ecee3d9747ddbaa9d1e7d85d"], 0x64)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

814.094424ms ago: executing program 0 (id=1776):
recvmsg(0xffffffffffffffff, 0x0, 0x10041)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x2000, 0x0, 0x0, 0x5, 0x1, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xbf}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x50}, 0x1, 0x7}, 0x40)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xda, 0x40, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x28, 0x13, {0xa, 0x25, 0x25, 0xa2, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x6, 0x7, {0xa, 0x25, 0x25, 0x6, 0x3, 0x7ff}}}}}}}}]}}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x2, 0x12803)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})

761.755882ms ago: executing program 1 (id=1777):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)) (async, rerun: 64)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x15})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x141240, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) (async)
read$FUSE(r5, &(0x7f0000001540)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
getsockopt$inet_udp_int(r6, 0x11, 0x65, 0x0, &(0x7f0000000040))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)

632.47951ms ago: executing program 1 (id=1778):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000010000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x44, 0x0)

597.944833ms ago: executing program 1 (id=1779):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900400073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

567.677542ms ago: executing program 1 (id=1780):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000003200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendto$netrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000150001002cbd7000fbdbdf25ffffffff000000000000000000000000fc0200000000000000000000000000004e240a874e210009020020802f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c4050000700000000c00080016"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc, 0x90, 0x2000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0)

484.444669ms ago: executing program 1 (id=1781):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r0, 0x8d, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x5, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x4, 0x1f0, 0x5, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, "7b28fb"}, {0x5, 0x24, 0x0, 0x34e8}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xf, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x5, 0x9, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4e}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0x718f}, @acm={0x4, 0x24, 0x2, 0xb}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8b, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x0, 0x20, 0x91}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e9dd64b11938b6d4b53dae27f926f295"}]}, 0x6, [{0x21, &(0x7f0000000140)=@string={0x21, 0x3, "196ff07e6bb35944d8737553d91004686716f264dc1ca8d279465f9c12b8c7"}}, {0x9a, &(0x7f0000000180)=@string={0x9a, 0x3, "09ab311d5b5aabf2a20ceefda6f3169d6021621997794f988cc3632e6c4d24933cb75d23743efa8aab617434230a4b946278431e18bddfaecdfc321ed5383596735c35725c2b48255754bdac318d9c5bbc27bb304b6fdee8043e30e2e4374322d7ff61a20aed898716575160b131dd7a85fa62026dd18f62a3ccc9e9d05de7d92db2f4d4300fd800456f198cda8f33bd3a710ba571293a7f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0xc7, &(0x7f0000000340)=@string={0xc7, 0x3, "076a889f69ed464e2902bdb53c73a10c819612bf25e6801beab24ed04a48da7ab4da4dc4f47952b630abfffcf0fa6e2510a7bfe7839ecde576831b502d3ca5db8757278a41f8a682c80f3c2bb181ddd66e35bdfb18f17486c5c6a7fcffa45d1e79ee724383221b31ef4a129694af69dd9e55bd617519b8953e390e3e5a9657e19c35a9294f776a8bea861a933a2b29571aea664396f9b756358a988124de37a64351fad49c26b8a0159aad47d10405d7a8f9507b14650fa91c6227422dc27db97ef19ecfee"}}, {0x9d, &(0x7f0000000440)=@string={0x9d, 0x3, "3a5c0a14ddf8ca8c7ec68b028d43419b17b6107744661a34fda921f813830a08688cc26873048721d65f3ceae2590af4d4c0940bc7623a331eefc7dfd9e4673943e4c0d4ff1ee268447f041638575b6e1da0ca3dcbc169f91d5799b66522302eab4befbd996838539a25c5fb15a2a73adacaa3b583ee90ce20f8105bae6d39f37f63387eb48a4b9410e1f09f01b78b7f348d177a617799da8c4182"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x430}}]})
syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x102, {0x102, 0x2, "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"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000700)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@generic={0x1a, 0x10, 0x1, "ce8e0518e223781a153f8083990ad3ecb64e70c8c26763"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x8, 0xff00, 0x80, [0x3f, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a75864b1b0abbfd4c4c1d8908912d422"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x8, 0x401}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x6, 0x0, 0x7}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0xf, 0x7f, "d1dee9c6", "160ed285"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x80, 0x9, 0x5, 0x0, 0x0, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000840)={0x40, 0xf, 0xd5, "21c6833541befe2d0727954c856716888602cd8bc55441533e7f12037081a926d6cc0d044d5f29e565492c6645532b97dee9b4861c16f87e4dbe340ee59fe3cda7ed727f4de6977b2520312d79dba50c4a8352dd809103866095a5ff1cf8c8051f8215b5a7f04acde8b800300d2354883f3c08c6769634a7ee4c94fc453b830394ddbd2b68e44e40385e0d80ec0aa8cacdaa954bce4aa8224fe876e1a777d553cb42af5184a0d326701a46d8afdf55aeb7364df7b152711a093cfd334c3d9a05ac52e0a7193841059f54e512abe813900f1bde3277"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0xa0, 0x40}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "af63"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="5064a1b1af1b"}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "17d9"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x8}}) (async)
syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x0, 0x102, {0x102, 0x2, "a68279153d0296faef5247f42f4b948fc32fcf1ce49bded17a1e33022baa940a732f3fb60b4c916639f20098164214c3eb24731afcc2cb59dd0c85ab370eb108c654aa2606071c981a091a59ca239e1b9889181e87ea9beac9a7aa2ea81aaf27b0f305858d39a5b6cf3bc05c0ca6de5d52156701a6e07f3c273dc4f8ffe660bd93328b85103aaec7a1054d3067838af5646a5fa5c7de23981b281b03f7d61d430a4e6c8e9d4eafadcfced1a8b850bbcbfc8a29281808eef9187ba9d697c71a2c28cb349efc5b11c0c7b459d672be5f9c7492214ada783cc07ebffd03a75491b51caf4adde64fe18d3de9ca8b1c6df930ec4c6768942696084ec1799a382d0e01"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000000700)={0x0, 0xf, 0x5e, {0x5, 0xf, 0x5e, 0x5, [@generic={0x1a, 0x10, 0x1, "ce8e0518e223781a153f8083990ad3ecb64e70c8c26763"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x8, 0xff00, 0x80, [0x3f, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a75864b1b0abbfd4c4c1d8908912d422"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x8, 0x401}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x6, 0x0, 0x7}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0xf, 0x7f, "d1dee9c6", "160ed285"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x80, 0x9, 0x5, 0x0, 0x0, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000840)={0x40, 0xf, 0xd5, "21c6833541befe2d0727954c856716888602cd8bc55441533e7f12037081a926d6cc0d044d5f29e565492c6645532b97dee9b4861c16f87e4dbe340ee59fe3cda7ed727f4de6977b2520312d79dba50c4a8352dd809103866095a5ff1cf8c8051f8215b5a7f04acde8b800300d2354883f3c08c6769634a7ee4c94fc453b830394ddbd2b68e44e40385e0d80ec0aa8cacdaa954bce4aa8224fe876e1a777d553cb42af5184a0d326701a46d8afdf55aeb7364df7b152711a093cfd334c3d9a05ac52e0a7193841059f54e512abe813900f1bde3277"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0xa0, 0x40}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "af63"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="5064a1b1af1b"}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "17d9"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x8}})

480.112007ms ago: executing program 5 (id=1782):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000380)=[{0x39, '\x00', @data, 0x400}]})
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
timerfd_create(0x8, 0x80000)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x54)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)

444.223045ms ago: executing program 5 (id=1783):
memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd000000e37e576ab0728727e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)

403.893582ms ago: executing program 5 (id=1784):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00520010008188ec59acbc0413a1f8480000000000000000000000000e0004000f00000002800000121f000000", 0x2e}], 0x1}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

179.843915ms ago: executing program 0 (id=1785):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x6d, {0x6d, 0x22, "51004d4a2d09c24d4b6654869da937e08d35523f5050c1b08768cce4ddb397bd3a5dca58b14a5d2b3ad5921ee5a4560d856faa735e11c03218af553e5737b484c4fdb04822135f87e79ad67bfefab271d74c0dd21b006aead039cb26d8642041592d75d2ebe4405794021f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000140)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@generic={0x3, 0x10, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x61, 0x3, 0x7, 0xf0f, 0x85f, [0x30, 0x0, 0x0]}]}}, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x696fd125514ffcd5}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x58, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040)
r6 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x10759000)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
bind$packet(r10, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x4}, 0x14)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r8, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/200, 0xc8}], 0x1, 0x1a, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
connect$pppl2tp(r12, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r12, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
socket$nl_netfilter(0x10, 0x3, 0xc)

178.874933ms ago: executing program 5 (id=1786):
mount$fuse(0x0, 0x0, 0x0, 0x1020000, &(0x7f0000000880)=ANY=[@ANYBLOB="66643d742ecf32d781d80ee275adccf6fbdf"]) (async, rerun: 64)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fbe02cbd7000fddbdf250000a8be9c78018008000100", @ANYRES32=0x0, @ANYBLOB="300001800800030002000000080003000000000014000200776732000000000000000000000000000800030005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async)
r3 = fsopen(&(0x7f0000000180)='bfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000040)='\x00\x95\xfe\x14\x89\x11\xd1\xd6\x06_j=\f\xa8\xb3\x86\n\xed\xfb%_\bf\xe4^\x98\xdbbz\xd0\xe3\xd1\x81\xd3\x83#e\a\xbcC\xdb\xe1\xee\x82\xd9v\xe5\x1b\x9f\xd2)\xfc\xfa\xc00\a', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (rerun: 64)
read$midi(r4, &(0x7f00000012c0)=""/232, 0xe8)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 64)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) (rerun: 64)
sendfile(r5, r6, 0x0, 0x20000023896) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r7 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) (rerun: 64)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, 0x0) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24018094) (async)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000040)=0x285) (async)
setreuid(0xee00, 0x0) (async)
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r12, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0xffffffffffffffff)

0s ago: executing program 1 (id=1787):
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400})
ioctl$UFFDIO_CONTINUE(r2, 0xc028aa05, &(0x7f0000000380)={{&(0x7f0000032000/0x4000)=nil, 0x4000}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

0s ago: executing program 1 (id=1788):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000010000ac1e000100000000000000000000000000000000000000000aff80"], 0xb8}}, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x7, 0x44, 0x0)

kernel console output (not intermixed with test programs):

 setup failed
[  175.003434][  T802] imon 2-1:0.0: unable to initialize intf0, err 0
[  175.010147][  T802] imon:imon_probe: failed to initialize context!
[  175.016523][  T802] imon 2-1:0.0: unable to register, err -19
[  175.032776][  T802] usb 2-1: USB disconnect, device number 52
[  175.049624][ T5886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  175.098505][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  175.120649][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  175.149296][ T5886] usb 1-1: media controller created
[  175.200699][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.590721][ T8672] binder: 8671:8672 ioctl c0306201 200000001a80 returned -14
[  175.668809][ T8637] netlink: 'syz.0.930': attribute type 32 has an invalid length.
[  175.729044][ T5293] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  175.893601][ T5293] usb 3-1: Using ep0 maxpacket: 8
[  175.914659][ T5293] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  175.942135][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.966683][ T5293] usb 3-1: Product: syz
[  175.975193][ T5293] usb 3-1: Manufacturer: syz
[  175.988246][ T5293] usb 3-1: SerialNumber: syz
[  176.008485][ T5293] usb 3-1: config 0 descriptor??
[  176.033344][ T5293] gspca_main: se401-2.14.0 probing 047d:5003
[  176.252736][ T8698] tipc: Started in network mode
[  176.257936][ T8698] tipc: Node identity 9a608a044417, cluster identity 4711
[  176.267522][ T8698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.356504][ T8698] syzkaller0: entered promiscuous mode
[  176.362336][ T8698] syzkaller0: entered allmulticast mode
[  176.370757][ T8698] tipc: Resetting bearer <eth:syzkaller0>
[  176.430146][ T5293] gspca_se401: Bayer format not supported!
[  176.566245][   T33] tipc: Resetting bearer <eth:syzkaller0>
[  176.608881][ T5293] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  176.638872][ T1218] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  176.738779][ T5293] usb 5-1: device descriptor read/64, error -71
[  176.788758][ T1218] usb 2-1: Using ep0 maxpacket: 8
[  176.797122][ T1218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.813260][ T1218] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  176.822475][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.830941][ T1218] usb 2-1: Product: syz
[  176.836306][ T1218] usb 2-1: Manufacturer: syz
[  176.840998][ T1218] usb 2-1: SerialNumber: syz
[  176.848499][ T1218] usb 2-1: config 0 descriptor??
[  176.856407][ T1218] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22
[  176.978736][ T5293] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  177.058233][   T24] usb 2-1: USB disconnect, device number 53
[  177.069131][ T8697] tipc: Resetting bearer <eth:syzkaller0>
[  177.110419][ T5293] usb 5-1: device descriptor read/64, error -71
[  177.229169][ T5293] usb usb5-port1: attempt power cycle
[  177.400936][ T5886] az6027: usb out operation failed. (-71)
[  177.408282][ T5886] stb0899_attach: Driver disabled by Kconfig
[  177.425948][ T5886] az6027: no front-end attached
[  177.425948][ T5886] 
[  177.446416][ T5886] az6027: usb out operation failed. (-71)
[  177.452656][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  177.472737][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25
[  177.499399][ T5886] dvb-usb: schedule remote query interval to 400 msecs.
[  177.520366][ T5886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  177.538224][ T5886] usb 1-1: USB disconnect, device number 49
[  177.578940][ T5293] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  177.620549][ T5293] usb 5-1: device descriptor read/8, error -71
[  177.628236][ T5886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  177.859204][ T5293] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  177.901508][ T5293] usb 5-1: device descriptor read/8, error -71
[  178.009461][ T5293] usb usb5-port1: unable to enumerate USB device
[  178.447502][ T5293] usb 3-1: USB disconnect, device number 38
[  178.535131][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'.
[  178.545192][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'.
[  178.722001][ T8721] tmpfs: Cannot change global quota limit on remount
[  179.159117][ T8697] tipc: Disabling bearer <eth:syzkaller0>
[  179.168100][   T29] tipc: Node number set to 3732376068
[  179.174974][ T8726] tipc: Started in network mode
[  179.181219][ T8726] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  179.191540][ T8726] tipc: Enabled bearer <eth:geneve1>, priority 10
[  179.469063][ T8744] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  179.490658][ T8744] netlink: 'syz.0.962': attribute type 4 has an invalid length.
[  179.514003][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'.
[  179.530093][ T8748] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  179.530443][ T8744] netlink: 'syz.0.962': attribute type 4 has an invalid length.
[  179.558011][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'.
[  179.580179][ T8751] netlink: 'syz.2.965': attribute type 10 has an invalid length.
[  179.595533][ T8751] netlink: 2 bytes leftover after parsing attributes in process `syz.2.965'.
[  179.604911][ T8751] bond0: entered promiscuous mode
[  179.613469][ T8751] bond_slave_0: entered promiscuous mode
[  179.619707][ T8751] bond_slave_1: entered promiscuous mode
[  179.628410][ T8751] bridge0: port 3(bond0) entered blocking state
[  179.635663][ T8751] bridge0: port 3(bond0) entered disabled state
[  179.644716][ T8751] bond0: entered allmulticast mode
[  179.650273][ T8751] bond_slave_0: entered allmulticast mode
[  179.656133][ T8751] bond_slave_1: entered allmulticast mode
[  179.667369][ T8751] bridge0: port 3(bond0) entered blocking state
[  179.675308][ T8751] bridge0: port 3(bond0) entered forwarding state
[  179.740756][ T5293] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  179.910638][ T5293] usb 5-1: Using ep0 maxpacket: 8
[  179.917546][ T5293] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  179.926631][ T5293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.938367][ T5293] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  179.959287][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  179.970371][ T5293] usb 5-1: Product: syz
[  179.983369][ T5293] usb 5-1: config 0 descriptor??
[  180.098514][ T1218] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  180.129177][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  180.198247][ T5293] tipc: Node number set to 15444650
[  180.248652][ T1218] usb 1-1: Using ep0 maxpacket: 16
[  180.255953][ T1218] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  180.266553][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.280292][ T1218] usb 1-1: config 0 descriptor??
[  180.288541][   T24] usb 3-1: Using ep0 maxpacket: 16
[  180.292671][ T1218] gspca_main: sonixj-2.14.0 probing 0471:0327
[  180.302468][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.321276][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.340405][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  180.351282][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.359401][   T24] usb 3-1: Product: syz
[  180.363579][   T24] usb 3-1: Manufacturer: syz
[  180.368276][   T24] usb 3-1: SerialNumber: syz
[  180.388481][   T24] usb 3-1: 0:2 : does not exist
[  180.470669][ T5293] usb 5-1: USB disconnect, device number 24
[  180.582276][ T8768] netlink: 'syz.2.971': attribute type 11 has an invalid length.
[  180.672142][   T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  180.770368][   T24] usb 3-1: USB disconnect, device number 39
[  180.816835][ T7997] udevd[7997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.930597][ T8794] netlink: 188 bytes leftover after parsing attributes in process `syz.2.979'.
[  180.990840][ T8796] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  181.102974][ T8800] netlink: 'syz.4.981': attribute type 17 has an invalid length.
[  181.126956][ T8800] netlink: 'syz.4.981': attribute type 16 has an invalid length.
[  181.141118][ T8800] netlink: 152 bytes leftover after parsing attributes in process `syz.4.981'.
[  181.557974][ T5293] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  181.678024][ T5886] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  181.698006][ T5293] usb 5-1: device descriptor read/64, error -71
[  181.829704][ T5886] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  181.838130][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.849129][ T5886] usb 3-1: config 0 has no interface number 0
[  181.857156][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  181.866421][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.874524][ T5886] usb 3-1: Product: syz
[  181.878813][ T5886] usb 3-1: Manufacturer: syz
[  181.883433][ T5886] usb 3-1: SerialNumber: syz
[  181.891377][ T5886] usb 3-1: config 0 descriptor??
[  181.899978][ T5886] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  181.907262][ T5886] uvcvideo 3-1:0.64: No valid video chain found.
[  181.948017][ T5293] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  182.087922][ T5293] usb 5-1: device descriptor read/64, error -71
[  182.102556][ T5990] usb 3-1: USB disconnect, device number 40
[  182.208576][ T5293] usb usb5-port1: attempt power cycle
[  182.283744][ T8815] netlink: 'syz.1.988': attribute type 10 has an invalid length.
[  182.317624][ T1218] gspca_sonixj: reg_r err -32
[  182.328195][ T1218] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  182.557895][ T5293] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  182.579223][ T5293] usb 5-1: device descriptor read/8, error -71
[  182.617931][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  182.769016][    T9] usb 2-1: Using ep0 maxpacket: 16
[  182.777808][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  182.786946][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.795258][    T9] usb 2-1: Product: syz
[  182.799589][    T9] usb 2-1: Manufacturer: syz
[  182.804190][    T9] usb 2-1: SerialNumber: syz
[  182.811554][    T9] usb 2-1: config 0 descriptor??
[  182.818702][    T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  182.837897][ T5293] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  182.868475][ T5293] usb 5-1: device descriptor read/8, error -71
[  182.939012][   T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  182.988280][ T5293] usb usb5-port1: unable to enumerate USB device
[  183.098019][   T24] usb 3-1: Using ep0 maxpacket: 16
[  183.106470][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  183.115662][   T24] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  183.123812][   T24] usb 3-1: Product: syz
[  183.128097][   T24] usb 3-1: SerialNumber: syz
[  183.134859][   T24] usb 3-1: config 0 descriptor??
[  183.148164][   T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  183.159057][   T24] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  183.168936][   T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  183.175368][   T24] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  183.366335][ T5886] usb 1-1: USB disconnect, device number 50
[  183.433405][ T5879] usb 3-1: USB disconnect, device number 41
[  183.797788][ T5886] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  183.948245][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  183.955619][ T5886] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  183.982266][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.031022][    T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[  184.041392][ T5886] usb 1-1: selecting invalid altsetting 3
[  184.048383][ T5886] comedi comedi5: could not set alternate setting 3 in high speed
[  184.056453][    T9] usb 2-1: USB disconnect, device number 54
[  184.075287][ T5886] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  184.104107][ T5886] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22
[  184.205231][ T8824] netlink: 'syz.0.992': attribute type 4 has an invalid length.
[  184.218149][ T8824] netlink: 'syz.0.992': attribute type 4 has an invalid length.
[  184.232603][   T24] usb 1-1: USB disconnect, device number 51
[  184.386118][ T8835] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  184.581585][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  184.661768][   T24] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  184.844400][   T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  184.873469][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.900183][   T24] usb 5-1: config 0 descriptor??
[  184.920163][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  185.115906][   T24] gp8psk: usb in 128 operation failed.
[  185.369338][ T5879] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  185.434186][ T8837] binder: 8836:8837 ioctl 50009402 0 returned -22
[  185.537899][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  185.549730][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short
[  185.562593][   T24] gp8psk: usb in 146 operation failed.
[  185.570227][ T5879] usb 3-1: config 147 has an invalid interface number: 101 but max is 0
[  185.581354][   T24] gp8psk: failed to get FW version
[  185.586551][ T5879] usb 3-1: config 147 has no interface number 0
[  185.593399][ T5879] usb 3-1: config 147 interface 101 has no altsetting 0
[  185.601223][   T24] gp8psk: usb in 149 operation failed.
[  185.609393][   T24] gp8psk: failed to get FPGA version
[  185.615550][   T24] gp8psk: usb in 138 operation failed.
[  185.621873][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  185.634423][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  185.643562][ T5879] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01
[  185.656402][   T24] usb 5-1: USB disconnect, device number 29
[  185.662474][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.673995][ T5879] usb 3-1: Product: syz
[  185.680869][ T5879] usb 3-1: Manufacturer: syz
[  185.689641][ T5879] usb 3-1: SerialNumber: syz
[  185.923811][ T5879] go7007 3-1:147.101: probe with driver go7007 failed with error -12
[  185.941243][ T5879] usb 3-1: USB disconnect, device number 42
[  185.997486][ T1218] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  186.118367][   T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  186.129794][ T1218] usb 2-1: device descriptor read/64, error -71
[  186.257434][   T24] usb 1-1: device descriptor read/64, error -71
[  186.378161][ T1218] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  186.498867][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  186.528394][ T1218] usb 2-1: device descriptor read/64, error -71
[  186.637816][   T24] usb 1-1: device descriptor read/64, error -71
[  186.649463][ T1218] usb usb2-port1: attempt power cycle
[  186.757936][   T24] usb usb1-port1: attempt power cycle
[  186.893187][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'.
[  186.997370][ T1218] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  187.030923][ T1218] usb 2-1: device descriptor read/8, error -71
[  187.099557][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  187.128443][   T24] usb 1-1: device descriptor read/8, error -71
[  187.297369][ T1218] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  187.318252][ T1218] usb 2-1: device descriptor read/8, error -71
[  187.327349][    T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  187.367429][   T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  187.387757][   T24] usb 1-1: device descriptor read/8, error -71
[  187.427730][ T1218] usb usb2-port1: unable to enumerate USB device
[  187.487354][    T9] usb 5-1: Invalid ep0 maxpacket: 64
[  187.507612][   T24] usb usb1-port1: unable to enumerate USB device
[  187.617286][    T9] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  187.762613][ T8906] GUP no longer grows the stack in syz.2.1021 (8906): 200000005000-200000008000 (200000001000)
[  187.774105][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.2.1021 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  187.774123][ T8906] Tainted: [L]=SOFTLOCKUP
[  187.774127][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.774133][ T8906] Call Trace:
[  187.774138][ T8906]  <TASK>
[  187.774143][ T8906]  dump_stack_lvl+0xe8/0x150
[  187.774167][ T8906]  __get_user_pages+0x2378/0x2720
[  187.774221][ T8906]  __gup_longterm_locked+0x3db/0x1630
[  187.774270][ T8906]  pin_user_pages+0x9d/0xd0
[  187.774295][ T8906]  xdp_umem_pin_pages+0x11b/0x340
[  187.774314][ T8906]  xdp_umem_create+0x646/0x8b0
[  187.774333][ T8906]  xsk_setsockopt+0x860/0x990
[  187.774347][ T8906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.774365][ T8906]  ? __fget_files+0x2a/0x420
[  187.774377][ T8906]  ? aa_sock_opt_perm+0xff/0x1a0
[  187.774397][ T8906]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  187.774412][ T8906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.774426][ T8906]  do_sock_setsockopt+0x17c/0x1b0
[  187.774445][ T8906]  __x64_sys_setsockopt+0x13d/0x1b0
[  187.774463][ T8906]  do_syscall_64+0x14d/0xf80
[  187.774472][ T8906]  ? trace_irq_disable+0x3b/0x150
[  187.774485][ T8906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.774495][ T8906]  ? clear_bhb_loop+0x40/0x90
[  187.774508][ T8906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.774518][ T8906] RIP: 0033:0x7ff124b9c799
[  187.774544][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.774553][ T8906] RSP: 002b:00007ff125a94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  187.774565][ T8906] RAX: ffffffffffffffda RBX: 00007ff124e15fa0 RCX: 00007ff124b9c799
[  187.774573][ T8906] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004
[  187.774579][ T8906] RBP: 00007ff124c32c99 R08: 0000000000000020 R09: 0000000000000000
[  187.774586][ T8906] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  187.774593][ T8906] R13: 00007ff124e16038 R14: 00007ff124e15fa0 R15: 00007ffd04be8028
[  187.774609][ T8906]  </TASK>
[  187.778248][    T9] usb 5-1: Invalid ep0 maxpacket: 64
[  187.991729][    T9] usb usb5-port1: attempt power cycle
[  188.028160][   T29] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  188.157340][   T29] usb 3-1: device descriptor read/64, error -71
[  188.347285][    T9] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  188.368629][    T9] usb 5-1: Invalid ep0 maxpacket: 64
[  188.397241][   T29] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  188.507245][    T9] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  188.527250][   T29] usb 3-1: device descriptor read/64, error -71
[  188.538384][    T9] usb 5-1: Invalid ep0 maxpacket: 64
[  188.544114][    T9] usb usb5-port1: unable to enumerate USB device
[  188.637415][   T29] usb usb3-port1: attempt power cycle
[  188.792822][ T8908] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  188.808846][ T8908] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  188.826307][ T8908] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  188.839907][ T8908] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  188.853278][ T8908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  188.978754][   T29] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  189.010239][   T29] usb 3-1: device descriptor read/8, error -71
[  189.253193][ T8926] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1029'.
[  189.266200][ T8926] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1029'.
[  189.267269][   T29] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  189.307623][   T29] usb 3-1: device descriptor read/8, error -71
[  189.318930][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  189.418741][   T29] usb usb3-port1: unable to enumerate USB device
[  189.433182][ T8930] Option '                             ' to dns_resolver key: bad/missing value
[  189.481161][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  189.490413][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.503593][    T9] usb 2-1: Product: syz
[  189.509177][    T9] usb 2-1: Manufacturer: syz
[  189.514312][    T9] usb 2-1: SerialNumber: syz
[  189.525398][    T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  189.554881][ T8533] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  189.557318][ T8936] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  189.623926][ T8939] syz.0.1032 uses old SIOCAX25GETINFO
[  190.527135][ T5293] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  190.711519][ T5847] Bluetooth: hci0: command 0x0406 tx timeout
[  190.717769][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  190.717798][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  190.725003][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  190.741055][ T5293] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.757772][ T5293] usb 5-1: not running at top speed; connect to a high speed hub
[  190.772591][ T5293] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 4
[  190.784514][ T8533] usb 2-1: Service connection timeout for: 256
[  190.808691][ T8533] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  190.826270][ T5293] usb 5-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40
[  190.841511][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.878283][ T5293] usb 5-1: Product: syz
[  190.894630][ T8533] ath9k_htc: Failed to initialize the device
[  190.900863][ T5293] usb 5-1: Manufacturer: syz
[  190.917783][ T5293] usb 5-1: SerialNumber: syz
[  190.952672][ T8533] usb 2-1: ath9k_htc: USB layer deinitialized
[  191.000649][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'.
[  191.176414][ T5293] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  191.177728][ T5886] usb 2-1: USB disconnect, device number 59
[  191.275641][ T5293] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  191.288419][ T5293] usb 5-1: selecting invalid altsetting 1
[  191.294216][ T5293] snd-usb-caiaq 5-1:1.0: can't set alt interface.
[  191.301333][ T5293] usb 5-1: unable to init card! (ret=-5)
[  191.313192][ T5293] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  191.326044][ T5293] usb 5-1: selecting invalid altsetting 1
[  191.343634][ T5293] snd-usb-caiaq 5-1:1.1: can't set alt interface.
[  191.354721][ T5293] usb 5-1: unable to init card! (ret=-5)
[  191.373591][ T5293] snd-usb-caiaq 5-1:1.1: probe with driver snd-usb-caiaq failed with error -5
[  191.409928][ T5293] usb 5-1: selecting invalid altsetting 1
[  191.418624][ T5293] snd-usb-caiaq 5-1:1.2: can't set alt interface.
[  191.425445][ T5293] usb 5-1: unable to init card! (ret=-5)
[  191.431616][ T5293] snd-usb-caiaq 5-1:1.2: probe with driver snd-usb-caiaq failed with error -5
[  191.446133][ T5293] usb 5-1: USB disconnect, device number 34
[  191.486883][ T7997] udevd[7997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.793205][ T8993] usb usb8: usbfs: process 8993 (syz.4.1052) did not claim interface 0 before use
[  191.819929][ T5886] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  191.987929][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  192.003689][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short
[  192.033704][ T5886] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  192.043164][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.052226][ T5886] usb 1-1: Manufacturer: Є
[  192.057000][ T5886] usb 1-1: SerialNumber: syz
[  192.300402][ T5886] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  192.403571][ T5886] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  192.430464][ T5886] usb 1-1: USB disconnect, device number 56
[  192.478148][ T7997] udevd[7997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.529578][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'.
[  193.752906][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  194.765147][ T8993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.078589][ T9060] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  195.086377][ T9060] netlink: 'syz.1.1071': attribute type 2 has an invalid length.
[  195.168203][   T24] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  195.186988][ T5886] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  195.239165][ T9071] fuse: Bad value for 'fd'
[  195.330926][   T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  195.351545][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  195.367672][   T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.394426][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.412887][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  195.421156][   T24] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  195.434400][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.443928][ T5886] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  195.454886][ T5886] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  195.464675][   T24] usb 3-1: config 0 descriptor??
[  195.473876][ T5886] usb 1-1: Manufacturer: syz
[  195.499296][ T5886] usb 1-1: config 0 descriptor??
[  195.904320][   T24] hid_parser_main: 442 callbacks suppressed
[  195.904335][   T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  195.921981][ T5886] cougar 0003:060B:700A.0007: unknown main item tag 0x0
[  195.929465][ T5886] cougar 0003:060B:700A.0007: unknown main item tag 0x0
[  195.936501][   T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  195.945090][ T5886] cougar 0003:060B:700A.0007: unknown main item tag 0x0
[  195.952344][   T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  195.960968][ T5886] cougar 0003:060B:700A.0007: unknown main item tag 0x0
[  195.968165][   T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  195.975771][ T5886] cougar 0003:060B:700A.0007: unknown main item tag 0x0
[  195.983002][   T24] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  195.995889][ T5886] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  196.011117][   T24] hid-steam 0003:28DE:1102.0006: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  196.102555][   T24] usb 3-1: USB disconnect, device number 47
[  196.124025][ T8533] usb 1-1: USB disconnect, device number 57
[  196.165859][ T9099] fido_id[9099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  196.328508][ T9105] binder: 9104:9105 ioctl 4018620d 0 returned -22
[  196.739585][ T9120] netlink: 'syz.1.1088': attribute type 44 has an invalid length.
[  196.788812][   T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  196.867897][ T9130] tmpfs: Bad value for 'mpol'
[  196.883044][ T9131] tmpfs: Bad value for 'mpol'
[  196.960306][   T24] usb 5-1: device descriptor read/64, error -71
[  197.035348][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1095'.
[  197.127579][ T9146] tipc: Started in network mode
[  197.134220][ T9146] tipc: Node identity ac1414aa, cluster identity 4711
[  197.144561][ T9146] tipc: Enabled bearer <udp:syz2>, priority 10
[  197.163886][ T9148] sp0: Synchronizing with TNC
[  197.168261][ T9146] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  197.206675][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  197.264992][ T9151] can0: slcan on pty24.
[  197.336804][   T24] usb 5-1: device descriptor read/64, error -71
[  197.349099][ T9144] can0 (unregistered): slcan off pty24.
[  197.447028][   T24] usb usb5-port1: attempt power cycle
[  197.797842][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  197.830685][   T24] usb 5-1: device descriptor read/8, error -71
[  198.076620][   T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  198.107844][   T24] usb 5-1: device descriptor read/8, error -71
[  198.167995][ T8533] tipc: Node number set to 2886997162
[  198.227145][   T24] usb usb5-port1: unable to enumerate USB device
[  198.229623][ T9204] netlink: 5552 bytes leftover after parsing attributes in process `syz.2.1108'.
[  198.385317][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'.
[  198.448057][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1113'.
[  198.463878][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1113'.
[  198.507236][ T5293] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  198.666564][ T5293] usb 1-1: Using ep0 maxpacket: 32
[  198.673366][ T5293] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  198.681645][ T5293] usb 1-1: config 0 has no interface number 0
[  198.687823][ T5293] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  198.698174][ T5293] usb 1-1: config 0 interface 85 has no altsetting 0
[  198.707656][ T5293] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  198.716753][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.724734][ T5293] usb 1-1: Product: syz
[  198.728906][ T5293] usb 1-1: Manufacturer: syz
[  198.733494][ T5293] usb 1-1: SerialNumber: syz
[  198.740079][ T5293] usb 1-1: config 0 descriptor??
[  198.748946][ T5293] appletouch 1-1:0.85: Could not find int-in endpoint
[  198.755734][ T5293] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  198.764798][ T5293] usbhid 1-1:0.85: couldn't find an input interrupt endpoint
[  198.951967][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.960736][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.969610][   T24] usb 1-1: USB disconnect, device number 58
[  199.726530][ T5886] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  199.754171][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  199.769656][ T5293] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  199.887102][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  199.896015][ T5886] usb 3-1: config 9 has an invalid interface number: 248 but max is 3
[  199.905447][ T5886] usb 3-1: config 9 has an invalid interface number: 197 but max is 3
[  199.914357][ T5886] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  199.924970][ T5886] usb 3-1: config 9 has 2 interfaces, different from the descriptor's value: 4
[  199.934468][ T5886] usb 3-1: config 9 has no interface number 0
[  199.941900][ T5886] usb 3-1: config 9 has no interface number 1
[  199.946488][ T5293] usb 1-1: Using ep0 maxpacket: 16
[  199.948496][ T5886] usb 3-1: config 9 interface 248 altsetting 101 endpoint 0x5 has invalid wMaxPacketSize 0
[  199.963515][ T5886] usb 3-1: config 9 interface 248 altsetting 101 has a duplicate endpoint with address 0x5, skipping
[  199.975490][ T5293] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  199.975510][ T5293] usb 1-1: config 0 has no interface number 0
[  199.975886][ T5293] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  199.977459][ T5293] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  199.977485][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  199.977504][ T5293] usb 1-1: Product: syz
[  199.988841][ T5886] usb 3-1: config 9 interface 248 altsetting 101 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  200.012197][ T5293] usb 1-1: SerialNumber: syz
[  200.021677][ T5886] usb 3-1: config 9 interface 248 altsetting 101 has a duplicate endpoint with address 0x5, skipping
[  200.044963][ T5293] usb 1-1: config 0 descriptor??
[  200.056079][ T5886] usb 3-1: config 9 interface 248 altsetting 101 has a duplicate endpoint with address 0x5, skipping
[  200.068980][ T5886] usb 3-1: config 9 interface 197 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  200.080408][ T5886] usb 3-1: config 9 interface 197 altsetting 64 endpoint 0x1 has an invalid bInterval 250, changing to 7
[  200.080603][ T5293] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  200.092136][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  200.111010][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x8, skipping
[  200.123172][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x2, skipping
[  200.134437][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0xA, skipping
[  200.147233][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  200.158598][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  200.169771][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  200.180908][ T5886] usb 3-1: config 9 interface 197 altsetting 64 has a duplicate endpoint with address 0x7, skipping
[  200.197497][ T5886] usb 3-1: config 9 interface 248 has no altsetting 0
[  200.204414][ T5886] usb 3-1: config 9 interface 197 has no altsetting 0
[  200.216269][ T5886] usb 3-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=6d.d7
[  200.225739][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.233872][ T5886] usb 3-1: Product: 䗭겓哦미䣠磿ꞯ䭷⹬粏䑸嘏뤛묂币㚶囈롵㫖쵴ಱ︶ᛪ▪塼仃ṓ➬图총䔀ⶶ韚灞正啷ﺹꁧ齗ꗞ⟃孱侺ꆀᖡꟂ玿䨒䍨莕熿拾띥䆫諦쟠ᡵ吼ꑺ燸绬఩퉱౨ꦎ饂՟偉뮦廩規菿
[  200.258461][ T5886] usb 3-1: Manufacturer: ⠁
[  200.263063][ T5886] usb 3-1: SerialNumber: 暚᪌줐棝ࡠ江༉ኘ᝷놡ﭗ㉅⩙∆ᚢꋬ崰ޢ䥍섟᥍輤ፚ⠿쬾痛㡣ﱌ苶ﺆ哑ﾩ믒䢽괶艨℺뵏荫减薷챟풬刄퇑㸝ꌎ㥲䥼巴냭쇚鏱넶⚡熵ဉ畔㊌샌Ԫ璘뤨힖ᆐ֘䤟竼녝ᴽ섻킒燫㇞몾飈뭀禳鼐﹡蟸莒媝㲢䷇䓉췄踽⤁
[  200.320336][ T5293] usb 1-1: USB disconnect, device number 59
[  200.923900][ T9269] netlink: 'syz.0.1131': attribute type 10 has an invalid length.
[  200.932262][ T9269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.948007][ T9269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.185554][ T9275] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1133'.
[  201.286049][ T9278] delete_channel: no stack
[  201.290864][ T9278] delete_channel: no stack
[  201.705554][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  201.938145][ T9304] netlink: 'syz.1.1144': attribute type 29 has an invalid length.
[  201.948537][ T9304] netlink: 'syz.1.1144': attribute type 29 has an invalid length.
[  202.011766][ T9309] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1146'.
[  202.401487][ T9325] No source specified
[  202.453839][ T5886] kaweth 3-1:9.248: couldn't find required endpoints
[  202.461595][ T5886] pegasus 3-1:9.248: Missing or invalid endpoints
[  202.475172][ T5886] kaweth 3-1:9.197: couldn't find required endpoints
[  202.497358][ T5886] pegasus 3-1:9.197: Missing or invalid endpoints
[  202.522518][ T5886] usb 3-1: USB disconnect, device number 48
[  202.724193][ T9329] input: syz1 as /devices/virtual/input/input26
[  202.832776][   T51] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  202.907068][ T9338] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  202.920136][ T9338] exFAT-fs (nullb0): invalid boot record signature
[  202.927035][ T9338] exFAT-fs (nullb0): failed to read boot sector
[  202.934281][ T9338] exFAT-fs (nullb0): failed to recognize exfat type
[  203.017237][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  203.129627][ T9351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1161'.
[  203.169126][    T9] usb 3-1: no configurations
[  203.184142][    T9] usb 3-1: can't read configurations, error -22
[  203.298978][ T9357] Mount JFS Failure: -5
[  203.323436][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  203.478540][    T9] usb 3-1: no configurations
[  203.483206][    T9] usb 3-1: can't read configurations, error -22
[  203.490799][    T9] usb usb3-port1: attempt power cycle
[  203.546473][ T8533] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  203.716346][ T8533] usb 5-1: Using ep0 maxpacket: 16
[  203.735848][ T8533] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  203.750644][ T8533] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  203.768724][ T8533] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.786315][ T8533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.794936][ T8533] usb 5-1: Product: syz
[  203.801718][ T8533] usb 5-1: Manufacturer: syz
[  203.807260][ T8533] usb 5-1: SerialNumber: syz
[  203.836448][    T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  203.877810][    T9] usb 3-1: no configurations
[  203.893441][    T9] usb 3-1: can't read configurations, error -22
[  204.026415][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  204.058974][    T9] usb 3-1: no configurations
[  204.071948][    T9] usb 3-1: can't read configurations, error -22
[  204.085341][ T8533] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  204.099052][    T9] usb usb3-port1: unable to enumerate USB device
[  204.112833][ T8533] cdc_ncm 5-1:1.0: bind() failure
[  204.175924][ T8533] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  204.190685][ T8533] cdc_ncm 5-1:1.1: bind() failure
[  204.248517][ T8533] usb 5-1: USB disconnect, device number 39
[  205.046344][   T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  205.206376][   T24] usb 1-1: Using ep0 maxpacket: 8
[  205.220240][   T24] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  205.235044][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  205.252493][   T24] usb 1-1: Product: syz
[  205.261257][   T24] usb 1-1: Manufacturer: syz
[  205.268963][   T24] usb 1-1: SerialNumber: syz
[  205.280363][   T24] usb 1-1: config 0 descriptor??
[  205.295060][   T24] gspca_main: sq905-2.14.0 probing 2770:9120
[  205.394935][ T9383] cgroup: fork rejected by pids controller in /syz4
[  205.700116][   T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  205.732202][   T24] sq905 1-1:0.0: probe with driver sq905 failed with error -71
[  205.771243][   T24] usb 1-1: USB disconnect, device number 60
[  205.944505][ T9442] netlink: 'syz.2.1179': attribute type 8 has an invalid length.
[  205.954272][ T9442] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1179'.
[  206.245305][ T9448] openvswitch: netlink: EtherType 80 is less than min 600
[  206.246504][   T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  206.387311][   T24] usb 3-1: device descriptor read/64, error -71
[  206.426325][ T8533] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  206.598392][ T8533] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  206.607104][ T8533] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  206.617477][ T8533] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  206.626350][   T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  206.626488][ T8533] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  206.645461][ T8533] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  206.656716][ T8533] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  206.669853][ T8533] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  206.679019][ T8533] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  206.687063][ T8533] usb 5-1: Product: syz
[  206.691216][ T8533] usb 5-1: Manufacturer: syz
[  206.699636][ T9446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  206.709572][ T8533] cdc_wdm 5-1:1.0: skipping garbage
[  206.715159][ T8533] cdc_wdm 5-1:1.0: skipping garbage
[  206.723695][ T8533] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  206.729682][ T8533] cdc_wdm 5-1:1.0: Unknown control protocol
[  206.756340][   T24] usb 3-1: device descriptor read/64, error -71
[  206.867381][   T24] usb usb3-port1: attempt power cycle
[  206.915473][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  206.922162][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  206.929227][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  206.935834][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  206.941917][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  206.951801][ T8533] usb 5-1: USB disconnect, device number 40
[  207.067704][ T9462] netlink: 'syz.1.1188': attribute type 8 has an invalid length.
[  207.075534][ T9462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1188'.
[  207.106334][ T5879] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  207.170014][ T9466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.208544][ T9469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1191'.
[  207.218252][   T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  207.247089][   T24] usb 3-1: device descriptor read/8, error -71
[  207.256386][ T5879] usb 1-1: Using ep0 maxpacket: 16
[  207.263904][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.277266][ T5879] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  207.288632][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.297048][ T5879] usb 1-1: Product: syz
[  207.301390][ T5879] usb 1-1: Manufacturer: syz
[  207.306013][ T5879] usb 1-1: SerialNumber: syz
[  207.315349][ T5879] usb 1-1: config 0 descriptor??
[  207.324126][ T5879] usb 1-1: selecting invalid altsetting 1
[  207.330228][ T5879] usb 1-1: Can not set alternate setting to 1, error: -22
[  207.338426][ T5879] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -22
[  207.487802][   T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  207.516919][   T24] usb 3-1: device descriptor read/8, error -71
[  207.639852][   T24] usb usb3-port1: unable to enumerate USB device
[  207.898376][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  208.069091][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  208.094038][    T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  208.112919][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.121108][    T9] usb 5-1: Product: syz
[  208.125552][    T9] usb 5-1: Manufacturer: syz
[  208.132545][    T9] usb 5-1: SerialNumber: syz
[  208.384450][    T9] usb 5-1: Fast Track Pro switching to config #2
[  208.591136][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.603565][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.614855][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'.
[  208.617505][    T9] usb 5-1: USB disconnect, device number 41
[  208.712805][ T9495] netlink: 'syz.1.1198': attribute type 8 has an invalid length.
[  208.721508][ T9495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1198'.
[  209.397595][   T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  209.432021][    T9] usb 1-1: USB disconnect, device number 61
[  209.472592][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.519831][ T9527] netlink: 'syz.4.1207': attribute type 8 has an invalid length.
[  209.530608][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1207'.
[  209.586403][   T10] usb 3-1: Using ep0 maxpacket: 16
[  209.594701][   T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  209.602891][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.615092][   T10] usb 3-1: config 0 has no interface number 0
[  209.621299][   T10] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  209.636010][   T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  209.645105][   T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  209.653238][   T10] usb 3-1: Product: syz
[  209.657420][   T10] usb 3-1: SerialNumber: syz
[  209.668204][   T10] usb 3-1: config 0 descriptor??
[  209.678460][   T10] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  209.816637][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  209.881587][   T10] usb 3-1: USB disconnect, device number 57
[  209.976441][   T24] usb 5-1: Using ep0 maxpacket: 16
[  209.984767][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  209.993919][   T24] usb 5-1: config 6 has an invalid interface number: 201 but max is 0
[  210.007113][   T24] usb 5-1: config 6 has no interface number 0
[  210.018691][   T24] usb 5-1: config 6 interface 201 has no altsetting 0
[  210.037170][   T24] usb 5-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=73.32
[  210.049279][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.068178][   T24] usb 5-1: Product: syz
[  210.078227][   T24] usb 5-1: Manufacturer: syz
[  210.088348][   T24] usb 5-1: SerialNumber: syz
[  210.304817][ T9529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.323520][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.323855][ T9529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.347385][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.384200][   T24] usb 5-1: USB disconnect, device number 42
[  210.645292][ T9553] netlink: 'syz.1.1217': attribute type 4 has an invalid length.
[  210.664077][ T9553] netlink: 'syz.1.1217': attribute type 2 has an invalid length.
[  210.711181][   T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d
[  210.736163][ T8533] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  210.907788][ T8533] usb 3-1: Using ep0 maxpacket: 32
[  210.924784][ T8533] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  210.944820][ T8533] usb 3-1: config 0 has no interface number 0
[  210.962442][ T8533] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  210.992165][ T8533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.007322][ T8533] usb 3-1: Product: syz
[  211.013136][ T9556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1218'.
[  211.015939][ T8533] usb 3-1: Manufacturer: syz
[  211.039009][ T8533] usb 3-1: SerialNumber: syz
[  211.052284][ T8533] usb 3-1: config 0 descriptor??
[  211.066769][ T8533] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  211.286340][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  211.358139][ T8533] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  211.402374][ T8533] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  211.452991][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  211.479512][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.502245][    T9] usb 5-1: Product: syz
[  211.508953][    T9] usb 5-1: Manufacturer: syz
[  211.515507][    T9] usb 5-1: SerialNumber: syz
[  211.585794][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  211.613294][ T8533] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  211.824022][ T9556] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.1218'.
[  211.859741][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  211.869543][    T9] usb 3-1: USB disconnect, device number 58
[  211.883483][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  211.926401][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  211.948843][    T9] quatech2 3-1:0.51: device disconnected
[  212.024120][   T29] usb 5-1: USB disconnect, device number 43
[  212.574417][ T9623] IPv6: NLM_F_CREATE should be specified when creating new route
[  212.701918][ T8533] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  212.717329][ T8533] ath9k_htc: Failed to initialize the device
[  212.739223][   T29] usb 5-1: ath9k_htc: USB layer deinitialized
[  212.873502][ T9635] 9p: Could not find request transport: fd=r�dno=�T��h��Dz��P��E���O��q}�4�l��$z�cz#�£f:>m����"����{o���"���0�kՑ!T"@p���r��U i���r��� �B-w9Fg�z����	���#S���2�)΂+�H
���i��ƨ��L|��poy��|�� UG�=:�Y��e{G��(k���Z�`�����o��eF�/����*6^-�V��"P�pCaIX�/W���&+h5�����-��
[  212.907559][ T9635] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1242'.
[  213.066178][   T29] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  213.176367][    T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  213.184100][ T5293] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  213.227766][   T29] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  213.236202][   T29] usb 5-1: config 0 has no interface number 0
[  213.244241][   T29] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  213.254141][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.262767][   T29] usb 5-1: Product: syz
[  213.267086][   T29] usb 5-1: Manufacturer: syz
[  213.271852][   T29] usb 5-1: SerialNumber: syz
[  213.278853][   T29] usb 5-1: config 0 descriptor??
[  213.316137][ T5293] usb 1-1: device descriptor read/64, error -71
[  213.348047][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  213.357427][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  213.366198][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  213.379274][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  213.388447][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.396495][    T9] usb 3-1: Product: syz
[  213.400654][    T9] usb 3-1: Manufacturer: syz
[  213.405229][    T9] usb 3-1: SerialNumber: syz
[  213.488043][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.497572][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.511986][   T29] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  213.524641][   T29] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  213.533168][   T29] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  213.541059][   T29] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  213.551006][   T29] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  213.566607][ T5293] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  213.566638][   T29] usb 5-1: USB disconnect, device number 44
[  213.591324][   T29] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  213.605017][   T29] keyspan 5-1:0.133: device disconnected
[  213.627811][    T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  213.635590][    T9] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  213.645678][    T9] usb 3-1: 2:1: cannot set freq 13115191 to ep 0x82
[  213.706239][ T5293] usb 1-1: device descriptor read/64, error -71
[  213.719123][    T9] usb 3-1: USB disconnect, device number 59
[  213.846499][ T5293] usb usb1-port1: attempt power cycle
[  214.007352][ T9662] 8021q: VLANs not supported on vcan0
[  214.188077][ T5293] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  214.239807][ T5293] usb 1-1: device descriptor read/8, error -71
[  214.506979][ T5293] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  214.526752][ T5293] usb 1-1: device descriptor read/8, error -71
[  214.556130][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  214.596260][   T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  214.646479][ T5293] usb usb1-port1: unable to enumerate USB device
[  214.709147][ T5886] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  214.717402][ T5886] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  214.727698][ T5886] usb 3-1: config 0 has no interface number 0
[  214.733851][ T5886] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 768
[  214.743916][   T29] usb 5-1: device descriptor read/64, error -71
[  214.750261][ T5886] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.765304][ T5886] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  214.774554][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.782702][ T5886] usb 3-1: Product: syz
[  214.787456][ T5886] usb 3-1: Manufacturer: syz
[  214.792070][ T5886] usb 3-1: SerialNumber: syz
[  214.798675][ T5886] usb 3-1: config 0 descriptor??
[  214.804993][ T9680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  214.813845][ T5886] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  214.825603][ T5886] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  214.837151][ T5886] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  214.998009][   T29] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  215.028191][ T9697] netlink: 'syz.1.1262': attribute type 25 has an invalid length.
[  215.031165][ T5886] usb 3-1: USB disconnect, device number 60
[  215.043736][ T9697] netlink: 'syz.1.1262': attribute type 28 has an invalid length.
[  215.070919][ T5886] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  215.089935][ T5886] cyberjack 3-1:0.69: device disconnected
[  215.146359][   T29] usb 5-1: device descriptor read/64, error -71
[  215.256735][   T29] usb usb5-port1: attempt power cycle
[  215.606139][   T29] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  215.637489][   T29] usb 5-1: device descriptor read/8, error -71
[  215.683365][ T9723] fuse: Bad value for 'fd'
[  215.896448][   T29] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  215.916651][   T29] usb 5-1: device descriptor read/8, error -71
[  216.028136][   T29] usb usb5-port1: unable to enumerate USB device
[  216.048275][ T5990] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  216.227510][ T5990] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  216.238468][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.249446][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.259210][ T5990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  216.273453][ T5990] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  216.282625][ T5990] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  216.290733][ T5990] usb 3-1: Manufacturer: syz
[  216.296286][   T29] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  216.297542][ T5990] usb 3-1: config 0 descriptor??
[  216.446101][   T29] usb 1-1: Using ep0 maxpacket: 32
[  216.453091][   T29] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  216.461691][   T29] usb 1-1: config 0 has no interface number 0
[  216.467873][   T29] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  216.480103][   T29] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  216.489341][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.497582][   T29] usb 1-1: Product: syz
[  216.501762][   T29] usb 1-1: Manufacturer: syz
[  216.506511][   T29] usb 1-1: SerialNumber: syz
[  216.515555][   T29] usb 1-1: config 0 descriptor??
[  216.529329][   T29] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  216.539164][   T29] em28xx 1-1:0.132: Video interface 132 found:
[  216.723265][ T5990] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  216.738906][ T5990] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  216.930638][   T29] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  217.042088][ T5886] usb 3-1: USB disconnect, device number 61
[  217.161385][ T9753] binder: BINDER_SET_CONTEXT_MGR already set
[  217.170432][ T9753] binder: 9750:9753 ioctl 4018620d 200000000480 returned -16
[  217.183675][ T9751] binder: 9750:9751 ioctl 80186e82 200000000240 returned -22
[  217.191875][ T9751] binder: 9750:9751 ioctl c0306201 200000000040 returned -22
[  217.194243][ T9752] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.352356][   T29] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  217.365371][   T29] em28xx 1-1:0.132: board has no eeprom
[  217.426168][   T29] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  217.434215][   T29] em28xx 1-1:0.132: analog set to bulk mode.
[  217.440813][  T802] em28xx 1-1:0.132: Registering V4L2 extension
[  217.459533][   T29] usb 1-1: USB disconnect, device number 66
[  217.472493][   T29] em28xx 1-1:0.132: Disconnecting em28xx
[  217.543419][  T802] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  217.551903][  T802] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  217.559750][  T802] em28xx 1-1:0.132: No AC97 audio processor
[  217.572944][  T802] usb 1-1: Decoder not found
[  217.580671][  T802] em28xx 1-1:0.132: failed to create media graph
[  217.587606][  T802] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  217.599701][  T802] em28xx 1-1:0.132: Remote control support is not available for this card.
[  217.610373][   T29] em28xx 1-1:0.132: Closing input extension
[  217.629926][   T29] em28xx 1-1:0.132: Freeing device
[  217.646113][ T5886] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  217.796117][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  217.803120][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  217.814660][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  217.824757][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  217.834907][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  217.848921][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  217.859274][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.075748][ T5886] usb 5-1: GET_CAPABILITIES returned 0
[  218.082227][ T5886] usbtmc 5-1:16.0: can't read capabilities
[  218.289800][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.298862][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.478919][ T5886] usb 5-1: USB disconnect, device number 49
[  218.951689][ T9796] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1294'.
[  219.049781][ T5990] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  219.169080][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'.
[  219.222997][ T5990] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  219.232957][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.242982][ T5990] usb 1-1: Product: syz
[  219.247996][ T5990] usb 1-1: Manufacturer: syz
[  219.252626][ T5990] usb 1-1: SerialNumber: syz
[  219.262172][ T5990] usb 1-1: config 0 descriptor??
[  219.366635][ T5293] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  219.470043][ T5990] usb 1-1: ignoring: probably an ADSL modem
[  219.506065][ T8533] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  219.527514][ T5293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.537744][ T5293] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.552760][ T5293] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  219.561856][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.569867][ T5293] usb 3-1: Product: syz
[  219.574041][ T5293] usb 3-1: Manufacturer: syz
[  219.579327][ T5293] usb 3-1: SerialNumber: syz
[  219.589605][ T5293] hub 3-1:1.0: bad descriptor, ignoring hub
[  219.596992][ T5293] hub 3-1:1.0: probe with driver hub failed with error -5
[  219.666383][ T8533] usb 5-1: Using ep0 maxpacket: 16
[  219.673268][ T8533] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  219.682383][ T8533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.692695][ T8533] usb 5-1: config 0 descriptor??
[  219.702731][ T8533] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  219.872150][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'.
[  219.883448][ T5990] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  219.905672][ T8533] usb 5-1: Detected FT232B
[  219.912428][ T5990] usb 1-1: USB disconnect, device number 67
[  220.263551][ T9846] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1
[  220.272360][ T9846] PKCS7: Only support pkcs7_signedData type
[  220.308669][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.319779][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.341767][ T8533] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  220.359332][ T8533] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  220.376303][ T8533] usb 5-1: USB disconnect, device number 50
[  220.392921][ T8533] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  220.410753][ T8533] ftdi_sio 5-1:0.0: device disconnected
[  220.427875][ T5293] usb 3-1: USB disconnect, device number 62
[  220.986200][ T8533] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  221.136002][ T8533] usb 3-1: Using ep0 maxpacket: 32
[  221.161457][ T8533] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  221.188764][ T8533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.204103][ T8533] usb 3-1: config 0 descriptor??
[  221.230419][ T8533] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  221.301599][ T9902] netlink: 'syz.4.1329': attribute type 8 has an invalid length.
[  221.313742][ T9902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1329'.
[  221.336202][  T802] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  221.439834][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  221.468527][ T8533] gspca_vc032x: reg_r err -71
[  221.480324][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.485789][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.491572][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.497519][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.506169][  T802] usb 1-1: Using ep0 maxpacket: 16
[  221.509074][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.525601][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.531551][  T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.532126][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.556055][  T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.563535][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.571488][  T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  221.579859][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.584908][  T802] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  221.593217][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.597776][  T802] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.608663][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.624031][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.638930][  T802] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  221.649175][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.657589][  T802] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  221.658911][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.672581][  T802] usb 1-1: Manufacturer: syz
[  221.706501][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.713093][  T802] usb 1-1: config 0 descriptor??
[  221.718900][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.734893][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.742522][ T8533] gspca_vc032x: I2c Bus Busy Wait 00
[  221.751197][ T8533] gspca_vc032x: Unknown sensor...
[  221.757761][ T8533] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  221.776629][ T8533] usb 3-1: USB disconnect, device number 63
[  221.882352][ T9915] fuse: Unknown parameter ''
[  221.996076][  T802] rc_core: IR keymap rc-hauppauge not found
[  222.006025][  T802] Registered IR keymap rc-empty
[  222.012612][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.046271][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.067185][  T802] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  222.098774][  T802] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27
[  222.128636][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.148914][ T9926] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1339'.
[  222.156738][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.159932][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'.
[  222.196147][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.227054][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.246173][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.274597][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.306601][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.326096][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.334989][ T9937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1343'.
[  222.348671][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.357078][ T9938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1343'.
[  222.386115][  T802] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  222.406088][ T5886] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  222.418441][  T802] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  222.443687][  T802] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  222.453981][ T9940] overlayfs: failed to resolve './file0': -2
[  222.476142][  T802] usb 1-1: USB disconnect, device number 68
[  222.566989][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  222.579501][ T5886] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  222.602733][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.611251][ T5886] usb 3-1: Product: syz
[  222.615685][ T5886] usb 3-1: Manufacturer: syz
[  222.621237][ T5886] usb 3-1: SerialNumber: syz
[  222.632930][ T5886] usb 3-1: config 0 descriptor??
[  222.825605][ T9959] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  222.863114][  T802] usb 3-1: USB disconnect, device number 64
[  223.126066][ T8533] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  223.217117][ T5293] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  223.285993][ T8533] usb 5-1: Using ep0 maxpacket: 16
[  223.292906][ T8533] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  223.301670][ T8533] usb 5-1: config 0 has no interface number 0
[  223.309675][ T8533] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  223.318828][ T8533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.327486][ T8533] usb 5-1: Product: syz
[  223.331666][ T8533] usb 5-1: Manufacturer: syz
[  223.336772][ T8533] usb 5-1: SerialNumber: syz
[  223.343678][ T8533] usb 5-1: config 0 descriptor??
[  223.352238][ T8533] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  223.381735][ T5293] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  223.392323][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.401435][ T5293] usb 1-1: Product: syz
[  223.406205][ T5293] usb 1-1: Manufacturer: syz
[  223.411028][ T5293] usb 1-1: SerialNumber: syz
[  223.639122][ T5293] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO
[  223.654030][ T5293] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  223.666905][ T5293] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  223.679585][ T5293] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  223.690625][ T5293] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  223.700110][ T9984] syzkaller1: entered promiscuous mode
[  223.700130][ T9984] syzkaller1: entered allmulticast mode
[  223.716789][ T5293] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  223.734706][ T5293] usb 1-1: USB disconnect, device number 69
[  223.825877][ T9986] nbd: must specify an index to disconnect
[  223.826714][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'.
[  223.836226][ T5886] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  223.996161][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  224.003801][ T5886] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  224.012343][ T5886] usb 3-1: config 0 has no interface number 0
[  224.018639][ T5886] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  224.030654][ T5886] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  224.039955][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.048018][ T5886] usb 3-1: Product: syz
[  224.052196][ T5886] usb 3-1: Manufacturer: syz
[  224.056852][ T5886] usb 3-1: SerialNumber: syz
[  224.063781][ T5886] usb 3-1: config 0 descriptor??
[  224.069642][ T9979] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  224.206031][ T5293] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  224.281793][ T9979] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  224.356062][ T5293] usb 1-1: Using ep0 maxpacket: 32
[  224.362097][ T9963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.364424][ T5293] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  224.371419][ T9963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.380234][ T5293] usb 1-1: config 0 has no interface number 0
[  224.393488][ T5293] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  224.406248][ T5293] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  224.416692][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.424740][ T5293] usb 1-1: Product: syz
[  224.429086][ T5293] usb 1-1: Manufacturer: syz
[  224.433731][ T5293] usb 1-1: SerialNumber: syz
[  224.444554][ T5293] usb 1-1: config 0 descriptor??
[  224.450473][ T9991] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  224.605942][ T8533] gspca_spca1528: reg_w err -71
[  224.611665][ T8533] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  224.625405][ T8533] usb 5-1: USB disconnect, device number 51
[  224.679698][ T9997] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  224.732040][T10000] netlink: 'syz.1.1364': attribute type 8 has an invalid length.
[  224.741478][T10000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1364'.
[  224.816441][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1365'.
[  224.826396][T10002] openvswitch: netlink: Flow key attr not present in new flow.
[  224.900571][ T5886] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  224.914523][ T5886] asix 3-1:0.188: probe with driver asix failed with error -71
[  224.931864][ T5886] usb 3-1: USB disconnect, device number 65
[  225.459354][ T8533] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  225.535726][T10018] netlink: 'syz.0.1373': attribute type 8 has an invalid length.
[  225.544134][T10018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1373'.
[  225.628461][ T8533] usb 5-1: Using ep0 maxpacket: 32
[  225.640172][ T8533] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  225.649222][ T8533] usb 5-1: config 0 has no interface number 0
[  225.658102][ T8533] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  225.667795][ T8533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.677662][ T8533] usb 5-1: Product: syz
[  225.681904][ T8533] usb 5-1: Manufacturer: syz
[  225.694715][ T8533] usb 5-1: SerialNumber: syz
[  225.702913][ T8533] usb 5-1: config 0 descriptor??
[  225.708052][ T5990] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  225.709725][T10027] netlink: 'syz.1.1377': attribute type 1 has an invalid length.
[  225.719519][ T8533] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  225.726289][   T51] Bluetooth: hci2: adv larger than maximum supported
[  225.734873][   T51] Bluetooth: hci2: Malformed LE Event: 0x0d
[  225.743579][T10027] netlink: 'syz.1.1377': attribute type 2 has an invalid length.
[  225.876333][ T5990] usb 3-1: device descriptor read/64, error -71
[  225.924668][ T8533] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  225.938130][ T8533] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  226.136293][ T5990] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  226.276119][ T5990] usb 3-1: device descriptor read/64, error -71
[  226.332344][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  226.333472][ T5886] usb 5-1: USB disconnect, device number 52
[  226.351314][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  226.370300][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  226.383234][ T5886] quatech2 5-1:0.51: device disconnected
[  226.398217][ T5990] usb usb3-port1: attempt power cycle
[  226.609213][T10051] netlink: 'syz.0.1385': attribute type 8 has an invalid length.
[  226.619654][T10051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1385'.
[  226.766463][ T5990] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  226.806702][ T5990] usb 3-1: device descriptor read/8, error -71
[  226.902731][   T51] Bluetooth: hci4: unexpected event for opcode 0x041c
[  226.942230][T10060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28
[  227.041863][T10064] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  227.048413][T10064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  227.056546][T10064] vhci_hcd vhci_hcd.0: Device attached
[  227.066062][ T5990] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  227.092269][T10065] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0
[  227.108749][   T12] vhci_hcd vhci_hcd.4: stop threads
[  227.111793][ T5990] usb 3-1: device descriptor read/8, error -71
[  227.118967][   T12] vhci_hcd vhci_hcd.4: release socket
[  227.133419][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  227.139528][T10068] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  227.157975][T10068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  227.168509][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'.
[  227.182786][T10068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.192779][T10068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.247996][ T5990] usb usb3-port1: unable to enumerate USB device
[  227.976338][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.989044][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.026132][T10082] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.032991][T10082] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.040792][T10082] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.047259][T10082] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.053886][T10082] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.060347][T10082] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.066822][T10082] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.073234][T10082] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.079719][T10082] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.086152][T10082] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.136962][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'.
[  229.557369][T10129] netlink: 'syz.1.1410': attribute type 8 has an invalid length.
[  229.571964][T10129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1410'.
[  229.697169][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'.
[  229.737551][ T5293] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110
[  229.749793][ T5293] asix 1-1:0.188: probe with driver asix failed with error -110
[  229.795967][    T9] usb 3-1: new low-speed USB device number 70 using dummy_hcd
[  229.852261][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.862801][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.926393][    T9] usb 3-1: device descriptor read/64, error -71
[  230.176543][    T9] usb 3-1: new low-speed USB device number 71 using dummy_hcd
[  230.306050][    T9] usb 3-1: device descriptor read/64, error -71
[  230.367801][T10154] overlayfs: failed to resolve './file0': -2
[  230.418868][    T9] usb usb3-port1: attempt power cycle
[  230.442023][T10157] fuse: Bad value for 'fd'
[  230.493248][T10162] netlink: 'syz.0.1421': attribute type 8 has an invalid length.
[  230.501217][T10162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1421'.
[  230.597618][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.612135][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.739870][   T51] Bluetooth: hci4: unexpected event for opcode 0x204e
[  230.758804][    T9] usb 3-1: new low-speed USB device number 72 using dummy_hcd
[  230.808103][    T9] usb 3-1: device descriptor read/8, error -71
[  231.076031][    T9] usb 3-1: new low-speed USB device number 73 using dummy_hcd
[  231.096063][ T5293] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  231.104013][    T9] usb 3-1: device descriptor read/8, error -71
[  231.150536][T10192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1430'.
[  231.218951][    T9] usb usb3-port1: unable to enumerate USB device
[  231.258314][ T5293] usb 5-1: Using ep0 maxpacket: 8
[  231.265443][ T5293] usb 5-1: unable to get BOS descriptor or descriptor too short
[  231.277401][ T5293] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  231.286255][ T5293] usb 5-1: config 0 has no interface number 0
[  231.292411][ T5293] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  231.303745][ T5293] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  231.313875][ T5293] usb 5-1: config 0 interface 88 has no altsetting 0
[  231.324325][ T5293] usb 5-1: string descriptor 0 read error: -22
[  231.331953][ T5293] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  231.342409][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  231.353843][ T5293] usb 5-1: config 0 descriptor??
[  231.373587][ T5293] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input29
[  231.495597][ T5833] udevd[5833]: Error opening device "/dev/input/event5": Input/output error
[  231.508844][T10200] netlink: 'syz.0.1432': attribute type 8 has an invalid length.
[  231.518707][ T5833] udevd[5833]: Unable to EVIOCGABS device "/dev/input/event5"
[  231.526644][T10200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1432'.
[  231.536760][ T5833] udevd[5833]: Unable to EVIOCGABS device "/dev/input/event5"
[  231.572468][ T5293] usb 5-1: USB disconnect, device number 53
[  231.929627][T10226] netlink: 'syz.0.1444': attribute type 8 has an invalid length.
[  231.937546][T10226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1444'.
[  232.028285][   T51] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  232.039034][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.053406][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.445959][ T5293] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  232.578260][ T5293] usb 5-1: device descriptor read/64, error -71
[  232.825937][ T5293] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  232.854385][T10257] netlink: 'syz.2.1456': attribute type 8 has an invalid length.
[  232.864080][T10257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1456'.
[  232.935750][T10261] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1458'.
[  232.976015][ T5293] usb 5-1: device descriptor read/64, error -71
[  233.088093][ T5293] usb usb5-port1: attempt power cycle
[  233.295982][ T8533] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  233.413917][T10283] netlink: 'syz.1.1466': attribute type 8 has an invalid length.
[  233.428345][T10283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1466'.
[  233.448457][ T5293] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  233.486087][ T8533] usb 3-1: Using ep0 maxpacket: 16
[  233.491878][ T5293] usb 5-1: device descriptor read/8, error -71
[  233.499998][ T8533] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  233.509631][ T8533] usb 3-1: config 0 has no interface number 0
[  233.526435][ T8533] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  233.537874][ T8533] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  233.548356][ T8533] usb 3-1: config 0 interface 41 has no altsetting 0
[  233.557687][ T8533] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  233.567002][ T8533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.575017][ T8533] usb 3-1: Product: syz
[  233.584321][ T8533] usb 3-1: Manufacturer: syz
[  233.589196][ T8533] usb 3-1: SerialNumber: syz
[  233.596762][T10289] netlink: 'syz.1.1468': attribute type 4 has an invalid length.
[  233.597361][ T8533] usb 3-1: config 0 descriptor??
[  233.616305][T10267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  233.623654][T10267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  233.746143][ T5293] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  233.786962][ T5293] usb 5-1: device descriptor read/8, error -71
[  233.836342][T10267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  233.843763][T10267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  233.906477][ T5293] usb usb5-port1: unable to enumerate USB device
[  233.947471][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.958076][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.054879][ T8533] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[  234.131632][T10315] netlink: 'syz.0.1475': attribute type 8 has an invalid length.
[  234.140363][T10315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1475'.
[  234.261772][ T8533] usb 3-1: USB disconnect, device number 74
[  234.355635][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.366881][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.489270][T10327] netlink: 624 bytes leftover after parsing attributes in process `syz.2.1480'.
[  234.530205][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'.
[  234.592968][T10333] netlink: 'syz.1.1482': attribute type 27 has an invalid length.
[  234.655811][T10338] netlink: 'syz.1.1484': attribute type 8 has an invalid length.
[  235.023499][T10364] netlink: 'syz.2.1495': attribute type 8 has an invalid length.
[  235.075789][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.088899][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.281982][T10375] input: syz1 as /devices/virtual/input/input30
[  235.847608][   T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  236.025923][   T24] usb 5-1: Using ep0 maxpacket: 8
[  236.032877][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  236.045647][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  236.055876][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  236.072764][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.097356][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  236.114963][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.165386][T10396] netlink: 'syz.1.1506': attribute type 8 has an invalid length.
[  236.173302][T10396] __nla_validate_parse: 4 callbacks suppressed
[  236.173319][T10396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1506'.
[  236.340890][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  236.349989][   T24] usbtmc 5-1:16.0: can't read capabilities
[  236.551078][T10377] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71
[  236.560587][    T9] usb 5-1: USB disconnect, device number 58
[  236.566696][ T8533] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  236.756885][ T8533] usb 3-1: Using ep0 maxpacket: 32
[  236.764188][ T8533] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  236.772880][ T8533] usb 3-1: config 0 has no interface number 0
[  236.783076][ T8533] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  236.792390][ T8533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.805215][ T8533] usb 3-1: Product: syz
[  236.809722][ T8533] usb 3-1: Manufacturer: syz
[  236.814460][ T8533] usb 3-1: SerialNumber: syz
[  236.824143][ T8533] usb 3-1: config 0 descriptor??
[  236.837556][ T8533] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  236.856215][ T8533] usb 3-1: selecting invalid altsetting 1
[  236.868360][ T8533] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  236.896697][ T8533] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  236.912898][ T8533] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  236.921725][ T8533] usb 3-1: media controller created
[  236.951033][ T8533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.218530][T10437] net_ratelimit: 13095 callbacks suppressed
[  237.218573][T10437] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  237.601412][ T8533] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  237.622342][ T8533] zl10353_read_register: readreg error (reg=127, ret==-71)
[  237.651576][ T8533] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  237.744201][T10457] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  237.750329][ T8533] usb 3-1: USB disconnect, device number 75
[  237.784551][T10457] overlayfs: failed to set xattr on upper
[  237.815611][T10457] overlayfs: ...falling back to redirect_dir=nofollow.
[  237.842364][T10457] overlayfs: ...falling back to index=off.
[  238.132913][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  238.249116][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'.
[  238.405686][T10477] kvm: pic: non byte write
[  238.448995][T10484] netlink: 'syz.2.1529': attribute type 8 has an invalid length.
[  238.464148][T10484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1529'.
[  238.690234][T10495] netlink: 'syz.0.1531': attribute type 21 has an invalid length.
[  238.721918][T10495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1531'.
[  238.752106][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.772437][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.152807][T10515] netlink: 'syz.1.1538': attribute type 8 has an invalid length.
[  239.162138][T10515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1538'.
[  239.198986][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'.
[  239.346277][ T5990] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  239.465605][T10530] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in;
[  239.465605][T10530]    program syz.0.1544 not setting count and/or reply_len properly
[  239.538518][ T5990] usb 5-1: Using ep0 maxpacket: 16
[  239.554222][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  239.581193][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  239.612668][ T5990] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  239.625867][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.642965][ T5990] usb 5-1: Product: syz
[  239.647527][T10536] netlink: 'syz.0.1546': attribute type 62 has an invalid length.
[  239.658863][ T5990] usb 5-1: Manufacturer: syz
[  239.663811][ T5990] usb 5-1: SerialNumber: syz
[  239.674340][T10536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1546'.
[  239.685415][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1546'.
[  239.696046][ T5990] usb 5-1: config 0 descriptor??
[  239.707702][ T5990] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  239.717584][ T5990] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  240.201525][T10541] netlink: 'syz.0.1548': attribute type 8 has an invalid length.
[  240.214260][T10541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'.
[  240.344744][ T5990] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  240.359824][ T5990] em28xx 5-1:0.0: Config register raw data: 0xf4
[  240.375457][ T5990] em28xx 5-1:0.0: I2S Audio (3 sample rate(s))
[  240.386306][ T5990] em28xx 5-1:0.0: No AC97 audio processor
[  240.596218][   T24] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[  240.746307][   T24] usb 3-1: device descriptor read/64, error -71
[  241.005935][   T24] usb 3-1: new low-speed USB device number 77 using dummy_hcd
[  241.156219][   T24] usb 3-1: device descriptor read/64, error -71
[  241.286134][   T24] usb usb3-port1: attempt power cycle
[  241.636050][   T24] usb 3-1: new low-speed USB device number 78 using dummy_hcd
[  241.700031][   T24] usb 3-1: device descriptor read/8, error -71
[  241.787212][T10563] syzkaller1: entered promiscuous mode
[  241.801051][T10563] syzkaller1: entered allmulticast mode
[  241.855229][T10563] Can't find a SQUASHFS superblock on nullb0
[  241.881999][T10563] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  241.956078][   T24] usb 3-1: new low-speed USB device number 79 using dummy_hcd
[  241.986489][   T24] usb 3-1: device descriptor read/8, error -71
[  242.106243][   T24] usb usb3-port1: unable to enumerate USB device
[  242.151242][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.176452][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.300772][    T9] usb 5-1: USB disconnect, device number 59
[  242.966942][T10568] netlink: 'syz.4.1558': attribute type 8 has an invalid length.
[  242.989728][T10568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1558'.
[  243.083417][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.106892][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.328317][    T9] IPVS: starting estimator thread 0...
[  243.446218][T10579] IPVS: using max 32 ests per chain, 76800 per kthread
[  243.595927][ T5886] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  243.748922][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  243.764812][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  243.781453][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.790317][ T5886] usb 5-1: Product: syz
[  243.794708][ T5886] usb 5-1: Manufacturer: syz
[  243.801513][ T5886] usb 5-1: SerialNumber: syz
[  243.812250][ T5886] usb 5-1: config 0 descriptor??
[  243.854373][T10600] 9p: Could not find request transport: t
[  243.860799][T10600] overlayfs: unescaped trailing colons in lowerdir mount option.
[  244.028017][ T5886] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  244.158558][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.170006][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.228641][ T5886] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  244.323214][T10618] delete_channel: no stack
[  244.327790][T10618] delete_channel: no stack
[  244.598500][ T5886] usb 5-1: USB disconnect, device number 60
[  245.009977][T10656] fuse: Bad value for 'group_id'
[  245.014986][T10656] fuse: Bad value for 'group_id'
[  245.022092][T10656] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  245.034048][T10656] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  245.135902][ T5886] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  245.233543][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.245549][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.327629][ T5886] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  245.335767][ T5886] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  245.345308][ T5886] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34
[  245.354823][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.369440][ T5886] usb 5-1: config 0 descriptor??
[  245.379219][ T5886] usb 5-1: Waiting for MOTU Microbook II to boot up...
[  245.386218][ T5886] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22
[  245.394350][ T5886] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  245.515860][    T9] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[  245.578864][ T5886] usb 5-1: USB disconnect, device number 61
[  245.677321][    T9] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[  245.685876][    T9] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  245.696461][    T9] usb 3-1: config 201 has no interface number 0
[  245.702746][    T9] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  245.716450][    T9] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  245.729149][    T9] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  245.743120][    T9] usb 3-1: config 201 interface 249 has no altsetting 0
[  245.752229][    T9] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  245.761643][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.769982][    T9] usb 3-1: Product: syz
[  245.774375][    T9] usb 3-1: Manufacturer: syz
[  245.779199][    T9] usb 3-1: SerialNumber: syz
[  246.003144][    T9] ath6kl: Failed to submit usb control message: -71
[  246.014398][    T9] ath6kl: unable to send the bmi data to the device: -71
[  246.023535][    T9] ath6kl: Unable to send get target info: -71
[  246.038499][    T9] ath6kl: Failed to init ath6kl core: -71
[  246.045582][    T9] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71
[  246.060627][    T9] usb 3-1: USB disconnect, device number 80
[  246.281455][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.295280][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.923686][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1600'.
[  247.234933][  T128] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.340655][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'.
[  247.473466][  T128] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.604312][  T128] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.644764][T10737] fuse: Unknown parameter '��Droot��V������mode'
[  247.679039][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.688269][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.697707][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.709947][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.717753][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.727795][  T128] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.074037][  T128] bond0: left allmulticast mode
[  248.095893][  T128] bond_slave_0: left allmulticast mode
[  248.103203][  T128] bond_slave_1: left allmulticast mode
[  248.115315][  T128] bridge0: port 3(bond0) entered disabled state
[  248.143272][  T128] bridge_slave_1: left allmulticast mode
[  248.153233][  T128] bridge_slave_1: left promiscuous mode
[  248.166383][  T128] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.201895][  T128] bridge_slave_0: left allmulticast mode
[  248.207919][  T128] bridge_slave_0: left promiscuous mode
[  248.213819][  T128] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.246511][  T128] tipc: Resetting bearer <eth:geneve1>
[  248.509831][  T128] tipc: Disabling bearer <eth:geneve1>
[  248.585271][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1615'.
[  248.596427][  T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.600028][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'.
[  248.621275][  T128] bond_slave_0: left promiscuous mode
[  248.630491][  T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.640756][  T128] bond_slave_1: left promiscuous mode
[  248.648734][  T128] bond0 (unregistering): Released all slaves
[  248.812941][T10773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  248.834138][  T128] tipc: Left network mode
[  249.537764][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.575883][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.647365][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.698539][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.752498][T10738] chnl_net:caif_netlink_parms(): no params data found
[  249.805465][ T5886] IPVS: starting estimator thread 0...
[  249.828146][   T51] Bluetooth: hci3: command tx timeout
[  249.888944][ T5879] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  249.922536][T10806] overlayfs: failed to clone upperpath
[  249.950914][T10802] IPVS: using max 39 ests per chain, 93600 per kthread
[  250.062501][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.080558][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.103922][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  250.123722][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.131957][ T5879] usb 5-1: Product: syz
[  250.139021][ T5879] usb 5-1: Manufacturer: syz
[  250.146522][T10738] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.153637][ T5879] usb 5-1: SerialNumber: syz
[  250.160810][T10738] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.178495][ T5879] usb 5-1: 0:2 : does not exist
[  250.185064][T10738] bridge_slave_0: entered allmulticast mode
[  250.197893][T10738] bridge_slave_0: entered promiscuous mode
[  250.227987][T10738] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.247204][T10738] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.263959][T10738] bridge_slave_1: entered allmulticast mode
[  250.277064][T10738] bridge_slave_1: entered promiscuous mode
[  250.394713][ T5879] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  250.539658][T10738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.574274][ T5879] usb 5-1: USB disconnect, device number 62
[  250.593506][T10738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.680458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  250.690591][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  250.722525][ T7997] udevd[7997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.756819][T10738] team0: Port device team_slave_0 added
[  250.765828][  T128] hsr_slave_0: left promiscuous mode
[  250.772003][  T128] hsr_slave_1: left promiscuous mode
[  250.778167][  T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.785574][  T128] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.794129][  T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.801758][  T128] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.816326][  T128] veth1_macvtap: left promiscuous mode
[  250.822583][  T128] veth0_macvtap: left allmulticast mode
[  250.847514][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.032673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  251.055628][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'.
[  251.088964][  T128] team0 (unregistering): Port device team_slave_1 removed
[  251.130877][  T128] team0 (unregistering): Port device team_slave_0 removed
[  251.263388][T10738] team0: Port device team_slave_1 added
[  251.269179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.279064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.290610][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.299992][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.312439][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  251.416088][ T8533] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  251.450063][T10738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.461555][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.488521][T10738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.546685][T10738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.565821][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.605894][ T8533] usb 5-1: Using ep0 maxpacket: 32
[  251.619519][T10738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.632043][ T8533] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  251.662508][ T8533] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  251.674869][ T8533] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  251.712102][ T8533] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  251.747903][ T8533] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  251.759242][ T8533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.772486][ T8533] usb 5-1: Product: syz
[  251.780130][T10738] hsr_slave_0: entered promiscuous mode
[  251.788150][T10738] hsr_slave_1: entered promiscuous mode
[  251.795396][T10738] debugfs: 'hsr0' already exists in 'hsr'
[  251.801302][ T8533] usb 5-1: Manufacturer: syz
[  251.806253][T10738] Cannot create hsr debugfs directory
[  251.820672][ T8533] usb 5-1: SerialNumber: syz
[  251.877973][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  251.896130][   T51] Bluetooth: hci3: command tx timeout
[  251.926561][ T8533] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input32
[  252.017386][  T128] IPVS: stop unused estimator thread 0...
[  252.096896][ T8533] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  252.105363][ T8533]  (id 0x00)
[  252.205400][T10862] overlayfs: failed to clone upperpath
[  252.235994][ T8533] rc_core: IR keymap rc-imon-pad not found
[  252.247842][ T8533] Registered IR keymap rc-empty
[  252.262775][ T8533] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  252.294367][ T8533] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  252.338675][ T8533] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  252.372122][ T8533] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input33
[  252.421273][ T8533] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:63> initialized
[  252.498304][T10738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  252.577251][T10738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  252.652704][T10738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  252.680229][T10880] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  252.683366][T10738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  252.699360][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'.
[  252.976628][T10738] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.009877][T10738] 8021q: adding VLAN 0 to HW filter on device team0
[  253.043614][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.052399][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.097416][T10906] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1640'.
[  253.124938][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.132179][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.408636][T10925] syzkaller1: entered promiscuous mode
[  253.427406][T10925] syzkaller1: entered allmulticast mode
[  253.449285][T10919] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1643'.
[  253.612807][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.648458][T10935] netlink: 'syz.0.1645': attribute type 8 has an invalid length.
[  253.659284][T10935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1645'.
[  253.795300][T10942] use of bytesused == 0 is deprecated and will be removed in the future,
[  253.805289][T10942] use the actual size instead.
[  253.860115][    T9] usb 5-1: USB disconnect, device number 63
[  253.866466][T10931] imon:send_packet: packet tx failed (-71)
[  253.919134][T10898] befs: (nbd4): No write support. Marking filesystem read-only
[  253.933689][T10931] imon:vfd_write: send packet #4 failed
[  253.976031][   T51] Bluetooth: hci3: command tx timeout
[  254.000045][T10949] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1648'.
[  254.114006][T10738] veth0_vlan: entered promiscuous mode
[  254.136075][T10738] veth1_vlan: entered promiscuous mode
[  254.175328][T10738] veth0_macvtap: entered promiscuous mode
[  254.191299][T10738] veth1_macvtap: entered promiscuous mode
[  254.225430][T10738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.248422][T10738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.273161][ T1006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.283631][ T1006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.295753][ T1006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.306833][ T1006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.321178][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'.
[  254.452963][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.469796][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.578835][T10963] netlink: 'syz.0.1653': attribute type 8 has an invalid length.
[  254.587267][T10963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1653'.
[  254.602524][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.612172][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.812993][T10974] netlink: 'syz.4.1656': attribute type 1 has an invalid length.
[  254.843013][T10971] sp0: Synchronizing with TNC
[  255.049560][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1660'.
[  255.195249][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  255.214203][T10992] netlink: 'syz.5.1662': attribute type 8 has an invalid length.
[  255.228155][T10992] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1662'.
[  255.242349][T10997] netlink: 'syz.0.1664': attribute type 10 has an invalid length.
[  255.272638][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.281446][T10997] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.363976][T10997] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.371254][T10997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.378975][T10997] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.386205][T10997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.412226][T10997] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  255.890037][T11027] Cannot find add_set index 46338 as target
[  255.938110][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1675'.
[  256.024077][T11032] netlink: 'syz.0.1676': attribute type 8 has an invalid length.
[  256.042795][T11032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1676'.
[  256.056001][   T51] Bluetooth: hci3: command tx timeout
[  256.174842][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.186234][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.200744][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.211907][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.539008][T11047] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in;
[  256.539008][T11047]    program syz.5.1683 not setting count and/or reply_len properly
[  256.811440][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1686'.
[  256.930745][T11062] netlink: 'syz.5.1688': attribute type 8 has an invalid length.
[  256.947810][T11062] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1688'.
[  257.328750][T11078] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  257.371956][T11078] veth0_vlan: entered allmulticast mode
[  257.386021][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  257.436015][T11080] binder: 11079:11080 ioctl c0306201 2000000001c0 returned -14
[  257.564655][T11088] netlink: 'syz.1.1699': attribute type 8 has an invalid length.
[  257.572918][   T10] usb 6-1: Using ep0 maxpacket: 32
[  257.581520][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  257.597340][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  257.612618][   T10] usb 6-1: can't read configurations, error -61
[  257.686236][ T5879] usb 5-1: new low-speed USB device number 64 using dummy_hcd
[  257.755992][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  257.817340][ T5879] usb 5-1: device descriptor read/64, error -71
[  257.915837][   T10] usb 6-1: Using ep0 maxpacket: 32
[  257.922877][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  257.932267][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  257.940184][   T10] usb 6-1: can't read configurations, error -61
[  257.946971][   T10] usb usb6-port1: attempt power cycle
[  258.056189][ T5879] usb 5-1: new low-speed USB device number 65 using dummy_hcd
[  258.185902][ T5879] usb 5-1: device descriptor read/64, error -71
[  258.296808][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  258.297265][ T5879] usb usb5-port1: attempt power cycle
[  258.327934][   T10] usb 6-1: Using ep0 maxpacket: 32
[  258.339657][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  258.350748][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  258.358544][   T10] usb 6-1: can't read configurations, error -61
[  258.390520][T11108] validate_nla: 2 callbacks suppressed
[  258.390532][T11108] netlink: 'syz.0.1707': attribute type 3 has an invalid length.
[  258.486698][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  258.506246][   T10] usb 6-1: Using ep0 maxpacket: 32
[  258.516106][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  258.524975][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  258.532997][   T10] usb 6-1: can't read configurations, error -61
[  258.539890][   T10] usb usb6-port1: unable to enumerate USB device
[  258.657655][ T5879] usb 5-1: new low-speed USB device number 66 using dummy_hcd
[  258.686386][ T5879] usb 5-1: device descriptor read/8, error -71
[  258.925944][ T5879] usb 5-1: new low-speed USB device number 67 using dummy_hcd
[  258.958638][ T5879] usb 5-1: device descriptor read/8, error -71
[  259.066354][ T5879] usb usb5-port1: unable to enumerate USB device
[  259.889556][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.900044][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.812910][T11160] netlink: 'syz.5.1723': attribute type 1 has an invalid length.
[  260.835259][T11160] __nla_validate_parse: 3 callbacks suppressed
[  260.835278][T11160] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1723'.
[  260.893759][T11160] netlink: 'syz.5.1723': attribute type 1 has an invalid length.
[  260.915852][ T5886] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  260.926399][T11160] netlink: 638 bytes leftover after parsing attributes in process `syz.5.1723'.
[  260.965971][T11160] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1723'.
[  261.084022][T11165] Option 'TX��Ʈ�' to dns_resolver key: bad/missing value
[  261.087684][ T5886] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  261.114837][ T5886] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  261.124968][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.144911][ T5886] usb 5-1: Product: syz
[  261.150820][ T5886] usb 5-1: Manufacturer: syz
[  261.165627][ T5886] usb 5-1: SerialNumber: syz
[  261.185990][ T5886] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  261.600690][ T5886] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  261.660282][T11173] vcan0: tx drop: invalid sa for name 0x0000000000001000
[  261.667961][T11172] program syz.4.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.926093][ T5293] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  262.073724][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  262.089067][ T5293] usb 6-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config
[  262.101003][ T5293] usb 6-1: too many endpoints for config 1 interface 0 altsetting 5: 138, using maximum allowed: 30
[  262.112398][ T5293] usb 6-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 138
[  262.125982][ T5293] usb 6-1: config 1 interface 0 has no altsetting 0
[  262.135202][ T5293] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  262.144875][ T5293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.153245][ T5293] usb 6-1: Product: syz
[  262.158272][ T5293] usb 6-1: Manufacturer: syz
[  262.162998][ T5293] usb 6-1: SerialNumber: syz
[  262.382534][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.393820][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.398039][ T5293] usb 6-1: USB disconnect, device number 6
[  263.378462][T11211] binder: 11210:11211 ioctl c0386105 200000000080 returned -22
[  263.653902][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  263.716264][ T5293] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  263.728786][T11234] overlayfs: failed to clone lowerpath
[  263.740720][    T9] usb 5-1: USB disconnect, device number 68
[  263.838075][T11237] netlink: 'syz.4.1748': attribute type 8 has an invalid length.
[  263.848222][T11237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1748'.
[  263.897492][ T5293] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  263.915147][ T5293] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  263.944591][ T5293] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  263.971740][ T5293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.010709][ T5293] usb 6-1: Product: syz
[  264.019430][ T5293] usb 6-1: Manufacturer: syz
[  264.028971][T11249] netlink: 'syz.0.1750': attribute type 11 has an invalid length.
[  264.037299][ T5293] usb 6-1: SerialNumber: syz
[  264.047706][ T5293] usb 6-1: config 0 descriptor??
[  264.061472][ T5293] gspca_main: sunplus-2.14.0 probing 055f:c630
[  264.081522][T11250] ALSA: mixer_oss: invalid OSS volume 'L
'
[  264.104441][T11250] overlayfs: failed to resolve './file0': -2
[  264.248619][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'.
[  264.334109][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1753'.
[  264.545271][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.554669][ T5886] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  264.564626][T11270] 9p: Could not find request transport: ufix
[  264.567020][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.637416][T11280] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  264.649277][T11280] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  264.662900][T11281] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  264.673570][T11280] netlink: 'syz.1.1759': attribute type 11 has an invalid length.
[  264.728043][ T5886] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  264.739458][T11286] netlink: 'syz.1.1760': attribute type 12 has an invalid length.
[  264.750002][ T5886] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  264.765562][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.784074][ T5886] usb 5-1: Product: syz
[  264.789155][ T5886] usb 5-1: Manufacturer: syz
[  264.793812][ T5886] usb 5-1: SerialNumber: syz
[  264.814643][ T5886] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  265.154558][T11311] netlink: 484 bytes leftover after parsing attributes in process `syz.1.1764'.
[  265.840663][ T5886] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  266.073790][   T51] Bluetooth: hci2: unexpected event for opcode 0x040d
[  266.086361][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.113198][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.172340][T11350] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  266.198106][T11350] overlayfs: missing 'lowerdir'
[  266.223729][   T10] usb 6-1: USB disconnect, device number 7
[  266.426282][T11365] bpf: Bad value for 'gid'
[  266.469935][T11368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.485643][T11368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.589250][T11375] netlink: 'syz.1.1778': attribute type 8 has an invalid length.
[  266.598701][T11375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1778'.
[  266.869184][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1784'.
[  266.878410][T11388] bridge_slave_1: left allmulticast mode
[  266.884092][T11388] bridge_slave_1: left promiscuous mode
[  266.891980][T11388] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.902468][T11388] bridge_slave_0: left allmulticast mode
[  266.913836][T11388] bridge_slave_0: left promiscuous mode
[  266.919771][T11388] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.054072][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.080589][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.263236][T11397] could not open pipe file descriptor
[  267.300034][T11399] netlink: 'syz.1.1788': attribute type 8 has an invalid length.
[  267.308176][T11399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1788'.
[  267.339981][   T31] INFO: task syz.3.413:7108 blocked for more than 143 seconds.
[  267.351305][ T5886] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  267.360069][   T31]       Tainted: G             L      syzkaller #0
[  267.366831][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.375579][   T31] task:syz.3.413       state:D stack:25600 pid:7108  tgid:7106  ppid:5831   task_flags:0x400040 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  267.388091][   T31] Call Trace:
[  267.392973][   T31]  <TASK>
[  267.405847][   T31]  __schedule+0x1665/0x5590
[  267.410481][   T31]  ? finish_task_switch+0x41f/0xbe0
[  267.427335][   T31]  ? __pfx___schedule+0x10/0x10
[  267.440467][   T31]  ? schedule+0x90/0x360
[  267.452902][   T10] usb 5-1: USB disconnect, device number 69
[  267.453326][   T31]  schedule+0x164/0x360
[  267.495257][   T31]  schedule_preempt_disabled+0x13/0x30
[  267.517295][   T31]  rwsem_down_read_slowpath+0x6d9/0x940
[  267.540714][   T31]  ? rwsem_down_read_slowpath+0x596/0x940
[  267.566630][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  267.573204][   T31]  down_read+0x99/0x2e0
[  267.588648][   T31]  ? __mm_populate+0x173/0x390
[  267.597462][   T31]  __mm_populate+0x182/0x390
[  267.606313][   T31]  ? __pfx___mm_populate+0x10/0x10
[  267.616013][   T31]  do_mlock+0x646/0x750
[  267.627730][   T31]  ? __pfx_do_mlock+0x10/0x10
[  267.637574][   T31]  ? rcu_is_watching+0x15/0xb0
[  267.647647][   T31]  __x64_sys_mlock+0x60/0x70
[  267.658405][   T31]  do_syscall_64+0x14d/0xf80
[  267.667776][   T31]  ? trace_irq_disable+0x3b/0x150
[  267.677915][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.686660][   T24] usb 1-1: USB disconnect, device number 70
[  267.697620][   T31]  ? clear_bhb_loop+0x40/0x90
[  267.712996][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.719355][   T31] RIP: 0033:0x7f7eb699c799
[  267.724616][   T31] RSP: 002b:00007f7eb7873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  267.733392][   T31] RAX: ffffffffffffffda RBX: 00007f7eb6c16090 RCX: 00007f7eb699c799
[  267.741576][   T31] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  267.749761][   T31] RBP: 00007f7eb6a32c99 R08: 0000000000000000 R09: 0000000000000000
[  267.757856][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.766037][   T31] R13: 00007f7eb6c16128 R14: 00007f7eb6c16090 R15: 00007ffd49dc7568
[  267.774061][   T31]  </TASK>
[  267.777240][   T31] INFO: task syz.3.413:7110 blocked for more than 143 seconds.
[  267.784827][   T31]       Tainted: G             L      syzkaller #0
[  267.792901][   T31]       Blocked by coredump.
[  267.797635][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.806378][   T31] task:syz.3.413       state:D stack:29328 pid:7110  tgid:7106  ppid:5831   task_flags:0x40044c flags:0x00080000
[  267.818459][   T31] Call Trace:
[  267.821776][   T31]  <TASK>
[  267.824748][   T31]  __schedule+0x1665/0x5590
[  267.830178][   T31]  ? __pfx___schedule+0x10/0x10
[  267.835094][   T31]  ? schedule+0x90/0x360
[  267.839453][   T31]  schedule+0x164/0x360
[  267.843645][   T31]  schedule_preempt_disabled+0x13/0x30
[  267.849241][   T31]  rwsem_down_read_slowpath+0x6d9/0x940
[  267.854829][   T31]  ? rwsem_down_read_slowpath+0x596/0x940
[  267.860608][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  267.866782][   T31]  ? do_futex+0x395/0x420
[  267.871140][   T31]  down_read+0x99/0x2e0
[  267.875285][   T31]  ? exit_mm+0x64/0x250
[  267.879609][   T31]  exit_mm+0x73/0x250
[  267.883614][   T31]  ? unwind_deferred_task_exit+0x67/0xa0
[  267.889351][   T31]  do_exit+0x8b9/0x2490
[  267.893542][   T31]  ? __pfx_do_exit+0x10/0x10
[  267.898261][   T31]  do_group_exit+0x21b/0x2d0
[  267.902861][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.908110][   T31]  get_signal+0x1284/0x1330
[  267.912652][   T31]  arch_do_signal_or_restart+0xbc/0x830
[  267.918318][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  267.924512][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  267.930807][   T31]  ? lock_acquire+0xf0/0x2e0
[  267.935458][   T31]  exit_to_user_mode_loop+0x86/0x480
[  267.940821][   T31]  ? rcu_is_watching+0x15/0xb0
[  267.945594][   T31]  ret_from_fork+0x59d/0xb90
[  267.950238][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  267.955358][   T31]  ? __switch_to+0xc7d/0x1450
[  267.960140][   T31]  ret_from_fork_asm+0x1a/0x30
[  267.964937][   T31]  </TASK>
[  267.968345][   T31] 
[  267.968345][   T31] Showing all locks held in the system:
[  267.993422][   T31] 2 locks held by kworker/0:1/10:
[  268.000955][   T31] 1 lock held by ksoftirqd/0/15:
[  268.008644][   T31] 1 lock held by khungtaskd/31:
[  268.013541][   T31]  #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  268.023873][   T31] 5 locks held by kworker/u8:7/1023:
[  268.029590][   T31] 2 locks held by getty/5590:
[  268.035073][   T31]  #0: ffff88803869a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  268.045262][   T31]  #1: ffffc9000332b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  268.087361][   T31] 5 locks held by kworker/1:5/5886:
[  268.107462][   T31]  #0: ffff888021afa940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  268.156798][   T31]  #1: ffffc90004fd7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  268.182495][   T31]  #2: ffff88802b525190 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  268.221995][   T31]  #3: ffff88802b4de518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30
[  268.251337][   T31]  #4: ffff88802b3a3860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30
[  268.285995][   T31] 1 lock held by syz.3.413/7108:
[  268.299364][   T31]  #0: ffff88813fe373b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  268.335894][   T31] 1 lock held by syz.3.413/7110:
[  268.347695][   T31]  #0: ffff88813fe373b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250
[  268.385832][   T31] 3 locks held by syz.4.779/8146:
[  268.394056][   T31] 2 locks held by syz.1.1788/11398:
[  268.415812][   T31] 
[  268.425852][   T31] =============================================
[  268.425852][   T31] 
[  268.456106][   T31] NMI backtrace for cpu 1
[  268.456129][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  268.456153][   T31] Tainted: [L]=SOFTLOCKUP
[  268.456160][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.456171][   T31] Call Trace:
[  268.456179][   T31]  <TASK>
[  268.456186][   T31]  dump_stack_lvl+0xe8/0x150
[  268.456221][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  268.456245][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  268.456272][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  268.456297][   T31]  sys_info+0x135/0x170
[  268.456315][   T31]  watchdog+0x1002/0x1060
[  268.456350][   T31]  ? watchdog+0x1da/0x1060
[  268.456375][   T31]  kthread+0x388/0x470
[  268.456397][   T31]  ? __pfx_watchdog+0x10/0x10
[  268.456415][   T31]  ? __pfx_kthread+0x10/0x10
[  268.456436][   T31]  ret_from_fork+0x51e/0xb90
[  268.456463][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  268.456487][   T31]  ? __switch_to+0xc7d/0x1450
[  268.456513][   T31]  ? __pfx_kthread+0x10/0x10
[  268.456533][   T31]  ret_from_fork_asm+0x1a/0x30
[  268.456564][   T31]  </TASK>
[  268.456590][   T31] Sending NMI from CPU 1 to CPUs 0:
[  268.575915][    C0] NMI backtrace for cpu 0
[  268.575933][    C0] CPU: 0 UID: 0 PID: 11398 Comm: syz.1.1788 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  268.575957][    C0] Tainted: [L]=SOFTLOCKUP
[  268.575963][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.575974][    C0] RIP: 0010:check_preemption_disabled+0x1d/0xe0
[  268.575999][    C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 a7 d1 a4 07 65 8b 0d 9c d1 a4 07 f7 c1 ff ff ff 7f 74 0c 5b <41> 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea 65
[  268.576014][    C0] RSP: 0018:ffffc900056cef00 EFLAGS: 00000202
[  268.576029][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000001
[  268.576040][    C0] RDX: ffff88802846bd00 RSI: ffffffff8c4a5c60 RDI: ffffffff8c4a5c20
[  268.576052][    C0] RBP: ffffea00015769c0 R08: ffff88802846bd00 R09: 0000000000000002
[  268.576064][    C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffc900056cf060
[  268.576075][    C0] R13: ffff888078b93478 R14: 0000000000000000 R15: 1ffff92000ad9e0f
[  268.576087][    C0] FS:  0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000
[  268.576100][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  268.576112][    C0] CR2: 000055a051ba9ee8 CR3: 000000000e94a000 CR4: 00000000003526f0
[  268.576127][    C0] Call Trace:
[  268.576133][    C0]  <TASK>
[  268.576140][    C0]  rcu_is_watching+0x15/0xb0
[  268.576158][    C0]  rcu_read_lock_held+0x15/0x50
[  268.576176][    C0]  xas_find+0x489/0x990
[  268.576196][    C0]  find_lock_entries+0x215/0xb20
[  268.576222][    C0]  ? find_lock_entries+0x126/0xb20
[  268.576247][    C0]  ? __pfx_find_lock_entries+0x10/0x10
[  268.576277][    C0]  shmem_undo_range+0x2d6/0x1660
[  268.576302][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  268.576328][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[  268.576359][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  268.576396][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  268.576423][    C0]  shmem_evict_inode+0x289/0xae0
[  268.576442][    C0]  ? inode_wait_for_writeback+0x16d/0x3b0
[  268.576459][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  268.576484][    C0]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  268.576500][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  268.576524][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  268.576544][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[  268.576570][    C0]  evict+0x61e/0xb10
[  268.576589][    C0]  ? __pfx_evict+0x10/0x10
[  268.576605][    C0]  ? _raw_spin_unlock+0x28/0x50
[  268.576627][    C0]  ? iput+0xb25/0xe80
[  268.576652][    C0]  __dentry_kill+0x1a2/0x5e0
[  268.576669][    C0]  ? shrink_kill+0x8d/0x2c0
[  268.576691][    C0]  shrink_kill+0xa9/0x2c0
[  268.576713][    C0]  shrink_dentry_list+0x2e0/0x5e0
[  268.576738][    C0]  shrink_dcache_tree+0xcf/0x310
[  268.576762][    C0]  ? __pfx_select_collect_umount+0x10/0x10
[  268.576780][    C0]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  268.576810][    C0]  shrink_dcache_for_umount+0xa8/0x1f0
[  268.576842][    C0]  generic_shutdown_super+0x6f/0x2d0
[  268.576867][    C0]  kill_anon_super+0x3b/0x70
[  268.576891][    C0]  deactivate_locked_super+0xbc/0x130
[  268.576914][    C0]  cleanup_mnt+0x437/0x4d0
[  268.576942][    C0]  task_work_run+0x1d9/0x270
[  268.576963][    C0]  ? __pfx_task_work_run+0x10/0x10
[  268.576984][    C0]  ? kmem_cache_free+0x189/0x640
[  268.576999][    C0]  ? do_exit+0x921/0x2490
[  268.577020][    C0]  do_exit+0x926/0x2490
[  268.577042][    C0]  ? __pfx_do_exit+0x10/0x10
[  268.577059][    C0]  ? cgroup1_freezing+0x20/0x350
[  268.577082][    C0]  do_group_exit+0x21b/0x2d0
[  268.577101][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.577125][    C0]  get_signal+0x1284/0x1330
[  268.577157][    C0]  arch_do_signal_or_restart+0xbc/0x830
[  268.577181][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  268.577210][    C0]  exit_to_user_mode_loop+0x86/0x480
[  268.577232][    C0]  ? rcu_is_watching+0x15/0xb0
[  268.577252][    C0]  do_syscall_64+0x32d/0xf80
[  268.577266][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.577283][    C0]  ? clear_bhb_loop+0x40/0x90
[  268.577302][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.577319][    C0] RIP: 0033:0x7f0203f9c799
[  268.577332][    C0] Code: Unable to access opcode bytes at 0x7f0203f9c76f.
[  268.577341][    C0] RSP: 002b:00007ffcd46b1618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  268.577357][    C0] RAX: 0000000000000000 RBX: 00007ffcd46b1700 RCX: 00007f0203f9c799
[  268.577368][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  268.577378][    C0] RBP: 00000000000415f0 R08: 0000000000000001 R09: 0000000000000000
[  268.577388][    C0] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007ffcd46b1740
[  268.577399][    C0] R13: 00007f0204215fac R14: 0000000000041664 R15: 00007f0204215fa0
[  268.577418][    C0]  </TASK>
[  269.041410][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  269.048272][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  269.058964][   T31] Tainted: [L]=SOFTLOCKUP
[  269.063299][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  269.073366][   T31] Call Trace:
[  269.076650][   T31]  <TASK>
[  269.079582][   T31]  vpanic+0x56c/0xa60
[  269.083573][   T31]  ? __pfx___schedule+0x10/0x10
[  269.088436][   T31]  ? __pfx_vpanic+0x10/0x10
[  269.092945][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  269.099115][   T31]  panic+0xc5/0xd0
[  269.102849][   T31]  ? __pfx_panic+0x10/0x10
[  269.107270][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  269.112663][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  269.118917][   T31]  watchdog+0x105b/0x1060
[  269.123263][   T31]  ? watchdog+0x1da/0x1060
[  269.127697][   T31]  kthread+0x388/0x470
[  269.131773][   T31]  ? __pfx_watchdog+0x10/0x10
[  269.136458][   T31]  ? __pfx_kthread+0x10/0x10
[  269.141075][   T31]  ret_from_fork+0x51e/0xb90
[  269.145679][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  269.150791][   T31]  ? __switch_to+0xc7d/0x1450
[  269.155467][   T31]  ? __pfx_kthread+0x10/0x10
[  269.160082][   T31]  ret_from_fork_asm+0x1a/0x30
[  269.164848][   T31]  </TASK>
[  269.168355][   T31] Kernel Offset: disabled
[  269.172669][   T31] Rebooting in 86400 seconds..