last executing test programs:

1m12.014722684s ago: executing program 0 (id=1):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000140)="1707aef851f26b08ffae9057528a9c03", 0x10}], 0x1, 0x9, 0x6eb5c74f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0xa8af, 0x0, 0x0, 0x3d7}, &(0x7f0000ff0000), &(0x7f0000000000))
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b)
setsockopt(r1, 0x10d, 0x800000000d, 0x0, 0x0)

1m10.818278349s ago: executing program 0 (id=7):
kexec_load(0x5, 0x2, &(0x7f0000000140)=[{&(0x7f0000000000)="38d2909e81500a0272e0b28fd7b321aac629cc4fdf98989a0ee38a044bebe6fb94a43f47ba5c8a9ecfccf045e51672d5a82a12722b3455dbb4361b59d365876a985e57d22c4bed97c6f10c051a46a6e10f4ccfec73fc3a55d97bf05962da7088880db0eeefe833fcf9b82d38365cb1489e1de5a2d77bf5f7be5b900dc8bd37b8588be2", 0x83, 0x8, 0x7}, {&(0x7f00000000c0)="2cd1d8e69137f6f5505d919b0f5ab47c25619e76e0ff910fdb8a3fb9b9b39d689960f0ffdd4040e11883dd3d642a4e8197c8a8f30d93325f5169110f25179b5b35f2de42b519a8c4ca60cde376f92fcf9b722199133dfcea0e4b2276fbf17378f5f5e125392f8e858784070d97f75c30da7accac59", 0x75, 0x6c, 0x638}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x3002}, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x20, 0x72, 0x333, 0x70bd2c, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

1m10.395601973s ago: executing program 0 (id=8):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20402)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001740)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x6, 0x4})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x9, 0x0, 0x0, [<r5=>0x0], [], [0x0, 0x0, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001780)={<r6=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000017c0)={<r7=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000001800)={r1, 0x3ff, 0x4, 0x7, 0x0, [r5, r6, r7], [0xffff8000, 0x3, 0x5, 0xf713], [0x7, 0x5, 0x6, 0x1ff], [0xfff, 0x347b, 0x7fffffff, 0x400]})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r9 = socket(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000100)="c10e00", 0x3, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/23)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14c, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29f4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4fb8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x24044081)
r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r12, &(0x7f00000006c0)=""/4117, 0x1015)
r13 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000000200)={0x6, @raw_data="98fe6404cf625acfeb28dab7e6d302fa41d603e654530adfc86e6de429a5c423dea3163539765c8bb504d9bb98811dc9b0ec716ad4204bf3905d4259a432c139bc30b99a3090f761f570251524eac6683f7ea95677bf4dbc8c0f34d58fc8a2ff41e5dae8eaa63bb7da7f484daca02d7cd565d96d5e8695f57a4fb3dc96422672507efa68c66781fb294a0bc84b61784cf4003b548bc4b1a251d83e1630c40520e82f3bfd10663f097190cfc72b9c2dfed700e315a95d527c5ded47f4b5dad398b164473fea66532c"})

1m9.789933284s ago: executing program 32 (id=8):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20402)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001740)={&(0x7f0000000180)=[<r1=>0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x6, 0x4})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x9, 0x0, 0x0, [<r5=>0x0], [], [0x0, 0x0, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001780)={<r6=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000017c0)={<r7=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000001800)={r1, 0x3ff, 0x4, 0x7, 0x0, [r5, r6, r7], [0xffff8000, 0x3, 0x5, 0xf713], [0x7, 0x5, 0x6, 0x1ff], [0xfff, 0x347b, 0x7fffffff, 0x400]})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r9 = socket(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000100)="c10e00", 0x3, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/23)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14c, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29f4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4fb8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x24044081)
r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r12, &(0x7f00000006c0)=""/4117, 0x1015)
r13 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f0000000200)={0x6, @raw_data="98fe6404cf625acfeb28dab7e6d302fa41d603e654530adfc86e6de429a5c423dea3163539765c8bb504d9bb98811dc9b0ec716ad4204bf3905d4259a432c139bc30b99a3090f761f570251524eac6683f7ea95677bf4dbc8c0f34d58fc8a2ff41e5dae8eaa63bb7da7f484daca02d7cd565d96d5e8695f57a4fb3dc96422672507efa68c66781fb294a0bc84b61784cf4003b548bc4b1a251d83e1630c40520e82f3bfd10663f097190cfc72b9c2dfed700e315a95d527c5ded47f4b5dad398b164473fea66532c"})

1m0.89125019s ago: executing program 3 (id=29):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xdfc, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x2d, {0x9, 0x21, 0x3, 0xc0, 0x1, {0x22, 0x8a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xff, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x8, 0x0, 0x3, 0x10, 0xf8}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x35, "6c309b58998a1041690c2b003e557144"}, @generic={0x5, 0x10, 0x2, "39f5"}, @ptm_cap={0x3}]}, 0x2, [{0x39, &(0x7f0000000140)=@string={0x39, 0x3, "f93fe6b2b359966a738173b1ce0c5a9c6b3c04708e148c96bfae99b5d421a4da5efde0022c6157592f7c990333f3ff3b65ba5d27eada3b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x861}}]})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x40045402, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})

57.10150734s ago: executing program 3 (id=39):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x1}}, 0x4)
write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc094, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x31, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x4c, 0x2, 0x3, 0x1, 0x3, 0x68, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0xe14}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000240)="e6f5ef", 0x3)
tee(r5, r4, 0x3, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-avx2)\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
sendto$unix(r8, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x85, 0x0, &(0x7f00000000c0))
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb71d)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x325)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
fcntl$setlease(r0, 0x400, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ea08668d188f80aea26678a473d0e917840949aee2d627ee078a8363ace8c5fd85960e2613af2f2e4f6c715e96c9261b9708f87a19c95a5f4b9903576458dcbce2cc12f0397b0e2e6afc5eb40cfc45778ca528fc9be60900000000000000cb6a51e840ec426af40ba32bbc41ce118611c4749300"/127, @ANYRES16, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

55.689969485s ago: executing program 3 (id=45):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000440)={0xc, &(0x7f0000000280)={0x20, 0xb, 0xec, {0xec, 0x31, "8312a6024659b05d368157978bc9a94519ebf20283b637e38214fdd37daff42d04ba5ea174d7c580ebe315f3c754213a9a429f18128fa1e4d0219c9fc5aa4609dbf2820258be0746a5db890b65a60fc27d644aa816618bf93ff639c9c1065632d3464e7ed7a82e8c30bbc675a184d36f9631cb10679e544b4db38e7c3f6a69698d9e111e9245f5a0ca8c583ac5664bae8eb58936e177283706256b9456d32f7157c9337964d5c07001c93a68e89e22513e6a7a369577fec734e240ef7d35cfe7e4d31c2b64923af03793a930544aad5a858d37a0af6b81838d009bd593b552ca90dc924e18f689d25762"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="00038a0000008a03e5998c77e2f6259f274f7062c0e34275dab901c32da2b5ae55113a078bcbd0ba2cf2464f975cb4a531426b30432c3dddb227d16fd2e669dc00af2f3745e40b2feee2749ee869cd8e1d1c9b53e5b515f7071acbdb2a386a4a4ee7559fb3d4a004afd7456cba85c8e5e7df4b6faf606ddc250703794514a9864197ca8041d2bb09b7c5c2e85f230c82"]}, &(0x7f0000000640)={0x1c, &(0x7f0000000480)={0x0, 0xe, 0x51, "85ee87e3f8597030f212af0998a8a6f0fb607fe5a7e0258eb1317ed40847fef369826ab09791a29c7b49525856890fb85d65a4a01a646eef4557473448e64e4bfc631a1eacb84abfecbe0d954131e61bbe"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x2d, {0x2b, "bd018b75eeb32858355fa3f7bbd7bbddd1a3893ae06de2dcf104c3d33edb8170bb19118a99673522161a7a"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0xe0}})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})

52.13474804s ago: executing program 3 (id=57):
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x810, 0xffffffffffffffff, 0x8000000)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4010, 0xffffffffffffffff, 0x10000000)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r5}})
syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x20, 0x0, @fd_index=0x3, 0xd, 0x0, 0x2, 0x0, 0x1, {0x0, r5}})
r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d000100000000090400050503000d0009210002080122940309058103000000000009050203000009"], 0x0)
syz_usb_connect$uac1(0x3, 0x8b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x6, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0xe, 0x2, "8df90d", "aa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf3, 0x1, 0x2, {0x7, 0x25, 0x1, 0x82, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe6, 0x4, 0x5, {0x7, 0x25, 0x1, 0x3, 0xb, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x40, 0x6, 0x40, 0x2}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x6, [@ext_cap={0x1c, 0x10, 0x2, 0x1c, 0x9, 0xc, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x1, 0x53}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "0be2afd79f1995b71a6ff6459d6b2a73"}, @ptm_cap={0xffffffffffffff07}, @wireless={0xb, 0x10, 0x1, 0x4, 0x48, 0xff, 0xc, 0x8, 0x40}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x81, &(0x7f00000002c0)=@string={0x81, 0x3, "d2687bfac1df064c2a4c3113f4fe77fb57d075d15b753ddb8ff7390c5bfd9e7e0d640f8741f3865f45db4431c52916ddeb495fd3ba4b7f23eec29859fa8d1cdda5c17f13238253fcfdc66ebb5d55fe010ddb48c1c3801727d29cf5db5fced45a80f824cf88c45d35f6032bd4c2697ef67862adf086840d5403e6160e05abfc"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1009}}, {0x6a, &(0x7f0000000380)=@string={0x6a, 0x3, "e9dabbb5178b1ac372212e3665827fef9cd03bccee323f1b134ce2353d9cfe15c5eb0df38c3aff3f0032126744099a4bde5e30fe55cd9de1f315bcb6186c5087a04b2213248860531b4eb4edf3c3c5116c063793d213603ae46f82ab397633a761f692b9da844059"}}, {0x4, &(0x7f0000000680)=@string={0x0, 0x3, "f25ab229d332c115bba7fa4da1bfb7c6c1b3cd56fc042524205d0da7d9a1b4c78aae54aeb7b6fc16e61ad83b11f1f71653090382b11ecb2d123fab51c9a98e1fb7ef0bfb69ce8b4da44148ae786ea3915229735efe72e7e8b993e2febde71334a47760aba847165a9e79726d1faf55b86ce66145e5e9e2980f1dffa0efe2ba7a41afb25e88acf6e66417c06349301682dbf2245112cfc3dd948ad24f2af1c20f90a20d07c3ebb15d20dd90bb4551131f91fd6cdd"}}, {0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508", @ANYRES8=r6, @ANYRES16], 0x0}, 0x0)

50.29037742s ago: executing program 3 (id=63):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="ffa5cd68ceb616f5e934fa8c7618d5dbe7e0430bf772c5047e207dc1651732ca15acb8686683599f77cf00d91f3f62c9245ff35cb2cf950999b1272605ce7fda61f7323068eb6a29c3070fdc654fd408d95cd13b571230780907d2944a390d8cbb59a776cbbd024c9cc251d7afed5bd811e1d4332b2186df34e327a7b0cbe84c776402a1924dc52bf329cfb834e487de6e9fcadb28a832a4cad56295082386cb3c298a8fd1820f3b16e15609fd542748341edb63d4417ed12d9a624e119dff8677943f96317dbbfd8bf28d084eb212063db508a7db1fd63cf86f7c56ace51eff159ef873d69acdbfc60f6cc0083091", @ANYRESOCT], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x3cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x1ef18376fe36f8b4, 0x40, 0xa}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x81, 0x4, 0x8, 0x10, 0x10}, 0x75, &(0x7f0000000240)={0x5, 0xf, 0x75, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x66, "945bf3f098de039cec70952801a6b648"}, @generic={0x59, 0x10, 0x3, "6e741befcb42fec64f03da74d339920b599b19cfe4361574477e3faaa74d88bed671c04cab56555cfec5cfff38d45b321b79691b97b20c0f2f4039fd8a9068f6c53a0fe73a5264f9d8096d6c793b49ed09766172127b"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = epoll_create(0x7)
syz_mount_image$fuse(0x0, 0x0, 0x4004a, 0x0, 0x8, 0x8, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x90000000})

48.372716151s ago: executing program 3 (id=70):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r1, r1, 0x0, 0x24002de8)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
r4 = gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c80000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000088ff1280000001006272696467255f736c010065000000000000058000011d00000000000000020060000000000004000000000000001900030000000000060000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8041}, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x20040600)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000210000000000008003b000005001b000100000008001900", @ANYRES32=0x0, @ANYBLOB="d3060c"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000150008002cbd7000fbdbdf250a7820fe", @ANYRES32=r3, @ANYBLOB="14000200fc000000000000000000000000000001080009aa287ec5c29fab365b0749245300090000400800080002000000080009000600000014000200fc0000"], 0x58}}, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="48f81223243ddac3f14b8df2a689ffd05eed3e429f78", 0x16}], 0x1}, 0x40)
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0)
lseek(r7, 0xfffffffffffffff5, 0x1)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
write$rfkill(r0, &(0x7f00000000c0)={0x405, 0x0, 0x3, 0xfd}, 0x8)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a0000070000000000bd00fddbdf2505001a0000000000000000000000000000000000ff0100000000000000000000000000010a0080"], 0x38}}, 0x0)

33.2918827s ago: executing program 33 (id=70):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r1, r1, 0x0, 0x24002de8)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
r4 = gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c80000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000088ff1280000001006272696467255f736c010065000000000000058000011d00000000000000020060000000000004000000000000001900030000000000060000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8041}, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x20040600)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000210000000000008003b000005001b000100000008001900", @ANYRES32=0x0, @ANYBLOB="d3060c"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000150008002cbd7000fbdbdf250a7820fe", @ANYRES32=r3, @ANYBLOB="14000200fc000000000000000000000000000001080009aa287ec5c29fab365b0749245300090000400800080002000000080009000600000014000200fc0000"], 0x58}}, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="48f81223243ddac3f14b8df2a689ffd05eed3e429f78", 0x16}], 0x1}, 0x40)
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x0)
lseek(r7, 0xfffffffffffffff5, 0x1)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
write$rfkill(r0, &(0x7f00000000c0)={0x405, 0x0, 0x3, 0xfd}, 0x8)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a0000070000000000bd00fddbdf2505001a0000000000000000000000000000000000ff0100000000000000000000000000010a0080"], 0x38}}, 0x0)

22.737497864s ago: executing program 4 (id=183):
r0 = socket(0x1, 0x1, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x600)
writev(r0, &(0x7f0000002500)=[{&(0x7f0000000040)="8795641b822f46ce043419cc66d88fda6c11502097ac8ada420cd82d6d1b5fc1f4de57bc111ab17a8ca77e62c33897b67c2cd4ba4ea78758318266fcacd4e576e7673b1cfec423e261a0d01436d81e417a8f331eb675a2d90eeb6fc09d12853edab96accb567eaaeacfaed8afd8cf9889d5817d7259923ed7cb573fc6bccc3bcbab97b435d54f39f23758bd1f630e1d2c23f2fe100acef982438e06a52a93730f617a6c33130f84eaa98760687958d2c80d625d0e40ac2745256c9e9c931a439411334f8af6a670708dfe35362faa7543cad0f8f6204ac1fd317938b8f58db6389fd10ac9860f67cf0aec96f", 0xec}, {&(0x7f0000000240)="4f4726f04e586d76ecc52e7fba46042dc886ce8dc68988c9171396f904b0a25e20ab3e13f29748a8d7e3a74506c74b798c5343120daca6e8e3455960b5595c30232536b7c10e88fc2a598293e1a06acde6447d5001991195270658ea95efb52cfe26038a09e28e458ff3c2db960819ba7bb9f2e73a142e9fcb8de4518e6d0d76986cd34fffc72d2dbeba9ad147833285eb88d62d5f6f59d68e560c128a10e6866e58efe6dc5d88c2fdad845d85003ecf2b2053a5ca801bdf0e15ed7035c8e583e5375efc2699c12263238bf15168ead384ad3f8572722323d17782ee03add4c7e77115", 0xe3}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="7db0f7742206b2008f05d9ffad62bbdf2ec65cb8164acd9b6c746b595d5eb2a79a2f00bedadf177a97205069ee81ee82209baa9ecd8962297a8cfe13eae8b8194311d1e53f79bdf6f68e6f9de5dbc74b83137831bbc1b68a45bd9ebe25c59b87f925a4c0186bca34c8f1a7a01f6da3cec94d4b0dde18a63aca81aeed23b3c98e9af6b96ad3742fb6", 0x88}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="e18a5fc833334e547b7541caf48844834a48aacbec983f5caecb08954e3d6df371559bb4f810452059e10c52f07fc15898a84c70eb411ea9bd0509e92a95cae2fd101be0905fc4cdefa1b38e145b78af4ca1ccfbca5dee9aef68035b1ea7493128789bfeb41a1273ce496408b8aa52ccbab5c05c331dcdcd81d861006a340d7d6dc4c7b85309b957a4a00d7f02ec3ab7307e0a63e3c510a8c416c3fd270ec0ba88a61930e2b5a7d7341ac9dfe64cc6aebe65594f8f95df192f8f11e5661ff3bd8fe450f429b7d54df0421586f65899ca7948bd6836084e73447223c817cec4aa779c1583129c455059f06274f752506a92", 0xf1}], 0x6)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x2, @output={0x0, 0x1, {0xa, 0xfbc}, 0x80, 0xa3d}})
ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125})

22.685403714s ago: executing program 4 (id=184):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

21.843417725s ago: executing program 5 (id=189):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {}, 0xff}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x30, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_VOICE_SETTING={{0x6}, 0x84}}}, 0x7)
sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x4000001)

21.838903477s ago: executing program 5 (id=190):
syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000021000100000000000000000081"], 0x38}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0xc80, 0x640, 0x550, 0x4b0, 0x40d, 0x26d63682, 0x0, 0x1, {0x101, 0x7fffffff, 0x1}, {0x2d8a4262, 0x7}, {0x1, 0x2, 0x1}, {0x7fff, 0x1000}, 0x2, 0x100, 0x4, 0xfffffffd, 0x1, 0x3, 0x80000000, 0x2, 0x8, 0x7fffffff, 0x9, 0x8, 0x6, 0x100, 0x3, 0x2})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ppoll(&(0x7f0000000a00)=[{r3, 0x43e0}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0)
r4 = dup(r0)
ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000200)={0x5, "796b9502845139e118e0bede0a3636a425802c6ccae19aa13d56e65b231b5512", 0x3})
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="070000f31e1a0a0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x2})
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r11, &(0x7f0000000280), 0x9)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@multicast2, @empty, 0xffffffffffffffff, "374ff0334ca4df80bfd8144aaac202624b312aca8ac98fd707efc9e516e1e3c2", 0x5, 0x3, 0xf5}, 0x3c)
openat$cgroup_ro(r12, 0x0, 0x275a, 0x0)

21.78800251s ago: executing program 2 (id=191):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000004580))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a010800000000000000000100000a090001"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080)

21.749809342s ago: executing program 5 (id=192):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c090}, 0xa111)
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={<r3=>0x0, 0x8}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0xf19a}, 0x8)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x7, @vifc_lcl_addr=@loopback, @multicast1}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x9, @vifc_lcl_addr=@remote, @rand_addr=0x64010100}, 0x10)

21.655511974s ago: executing program 2 (id=193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0a010800200000000000000100000a090001"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080)

21.652991576s ago: executing program 5 (id=194):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x8dff, 0x20a6})

21.646269355s ago: executing program 2 (id=195):
syz_emit_ethernet(0x22, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x84, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)

20.227616209s ago: executing program 1 (id=199):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x8040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 64)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905", @ANYRES64], 0x0) (async, rerun: 64)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x10, 0x2aa, 0x3efe, 0x25d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0x28, 0x4d, 0x9a}}]}}]}}, 0x0) (async)
mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000410000/0x1000)=nil) (async)
syz_clone(0x2141200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001980)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x60, '\x00', @loopback}}}}}}, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64)
getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c)

19.823503836s ago: executing program 1 (id=200):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x3f00, 0xac0, 0x20, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0x200}, {}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x1, 0x1})

19.784880144s ago: executing program 1 (id=201):
syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000021000100000000000000000081"], 0x38}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0xc80, 0x640, 0x550, 0x4b0, 0x40d, 0x26d63682, 0x0, 0x1, {0x101, 0x7fffffff, 0x1}, {0x2d8a4262, 0x7}, {0x1, 0x2, 0x1}, {0x7fff, 0x1000}, 0x2, 0x100, 0x4, 0xfffffffd, 0x1, 0x3, 0x80000000, 0x2, 0x8, 0x7fffffff, 0x9, 0x8, 0x6, 0x100, 0x3, 0x2})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ppoll(&(0x7f0000000a00)=[{r3, 0x43e0}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0)
r4 = dup(r0)
ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000200)={0x5, "796b9502845139e118e0bede0a3636a425802c6ccae19aa13d56e65b231b5512", 0x3})
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="070000f31e1a0a0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x2})
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r11, &(0x7f0000000280), 0x9)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@multicast2, @empty, 0xffffffffffffffff, "374ff0334ca4df80bfd8144aaac202624b312aca8ac98fd707efc9e516e1e3c2", 0x5, 0x3, 0xf5}, 0x3c)
openat$cgroup_ro(r12, 0x0, 0x275a, 0x0)

19.725981515s ago: executing program 1 (id=202):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x101382)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x2, 0x9, 0x7fe, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363b18d9acc6c25af29ca21ebd2e8054caaddfb80a82dc81700000000000004", [0xfffffffe, 0xe]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={<r1=>0x0}, &(0x7f0000000480)=0xc)
prlimit64(r1, 0xe, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffff)
r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x102, 0x0)
syz_usb_connect(0x3, 0x64d, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x31, 0x3b, 0xcd, 0x40, 0x413c, 0x4004, 0x3772, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63b, 0x1, 0x29, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xee, 0x40, 0x9, 0xcb, 0xfa, 0xb6, 0xf2, [], [{{0x9, 0x5, 0x0, 0x3, 0x40, 0x2, 0x6, 0x2, [@generic={0xc1, 0x3, "5e606144cbb8425b3167d20226ac69ca77ec8792611fecf0f3970352dee5edba18db759ca606c9c03db39f6cdc46a5b4d0bafb3edda4535a50bb957489554396402f0c2c30cd838b5dedb1cd5faf807052a9673375417fb50ee8924154d5d1c762f788e93081c83acaa45fed1c91512ba4f4e44b13cb341eb507405ab84782aab4f5543dd62e80475b13ebb5fbf56ee9c2bbe4c1af433e9911eeacd9ba4af46017598b3b733b7a3f567efb040631b78ac9f12615c19f2b5467ecb53faf8577"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xa}, @generic={0xec, 0x5, "2f315ecd4859fba6b399ba971e7c17fd7d91965cd230c4ac06f5f7d50bcad5f9ecb0df5d0b5e94406cc75e5b001aa153d958967f83e2091569c2f86d8f8b02d65aa9874e686aeb3e2e7d91d06ea1adef59b66db09de8b7b46decf3e4d8eee8623897511835f663e223e1d80a6b16c475e28968e61815a00faf8fcbfdbaae494de4ac81fd34a3c757da1a9ce78e38fdb740d336fa1593124dc09868a841dbabbfe56610043203cf1436eacf65e9a12f6ac1885e2f7c4cf79241fd58e63ee2f83242cd476d47a73e0eb35f5562198bb94e8b187d5c374927ef77d8fbf17f169f6fcb1a5cc0e0a79f8c76a0"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0xa375}, @generic={0xde, 0x10, "8e661153977b39a45a5725280896311ba9075dd686605180e25132facfc8ca205d8136ec6cd1e60bc6cefcaba4edd3c94ca072494a12c9d214c25cdd191a6760a33cff4d12d0c9e280668a763605f00e3e57bf88ded32b5478144e66ae8bcce65a0bed6c705114ff04e25835d741cae3f663074b696a1a95ea680e33e57b85e5bcb4f30da928f6e9935227bae5d5f966c79c1f1b512e246bd4c9afa4ef80a8f0eb778c11241b5c97ff739d858feff25c3462f13584e260e7cc39401472ca200be3d439883f3018278d1ca5d4a6b540bff917b213efcee9e707fb7c0a"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x40, 0xd2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0x78, 0x3, "33d459dca5c2ce3045e7819599317b06b61b88f9757f2dd0abcee99195e24f1d035bfbfb54eb59ae69a79e412c091174f5d7ba0a1709efa1d6bfd0ce323a52a8a7d8e6981059212aa33ff0dc38dc89a9752a8667f39a4d5d3295bd0521b7a07b428acbd264aa7babf49aba32b649374effd8c4bddf17"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x2, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0xc, 0x0, [@generic={0x65, 0x30, "d0da2b40febc8868d09298496fc70cb9d56df269742f2196138da988e86661b4533edb66b1087fd0406d9c7659feda58368acaf8080454ed733bafcefee013224a0e71e650a71eb2994fd8ce0ed9e5e18821936eb73abb856d7a78eccb509280001af4"}, @generic={0xb8, 0x7f, "b956590e94710b79aa84bd3fe984dd2ccb4b7ef0d9382ed57652f6b9a8af7b90bfaba0da44e0eb7733493153fdb1bb6baf9cc4e12189ec7bc38ee7b2dbe0d1698cd4e1cbdb8516adad3e9a6843de53ca7f36d455b6afea9922c089e709bf036f2a35ae127f00114cf116fe384622fcd11d5835492c2f0d69a9761ee79fc1039dc37773ec97fa1f2f0b3c991b26ba40a40a1b3fb3c9dd944ba5cb20889fdf3347f213c70f296fe1902a40bd78b64f48bc4ebae63737a8"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0xb, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}, @generic={0x98, 0xf, "f6a35859c8fde7f9007a97e9d0170d8660526b33b9942ba301600ecba8e1ff770fef044212e6204e0c7dea875f058e2505134b2dd224042e3ab74c956faa2750964e714ac00493216fde11667de964ba4d7231e83c5a6aad72b66c3c98c7eae2ae2fcb2b18f67b7f0d088e2821a21555735be8426b56f5a523e8e93d41ca986f7f1a192499ce749eeeb7dc9af56740859f3abc4a2f50"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x81, 0xc, 0x1, [@generic={0xef, 0x7, "e2ade9a27bb8413b1ebccdbaaec4d8741158bb09b4a3f24ca7666d54b5da11ec6e8e266b9d6d4d65a86b93d6c04736554c6249f6f4323c604fafb3aefa58cb09303de7d0e314f5acfe4a110a45d36038c9f7991daaf696352faff078d0bb058546710c60b888f5fdb19d2ff7eed44a7a77e0df8a323a13b3f837c76cbf163a602e13680ae69c6dc141dc3eeabf24c60d5b7577e2174e8b3e185211d421214a405a26df95c7ca024807d5016124a9d1c2a23717c4b54a858171050ff0188139acdfe2ffd95087b48eea46cedd52be608f3884401efbaad8d03aa8b97ed92f0fe327ba3e365ba66ce6f3310f7c3b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x9}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x9, 0x9, 0x2, 0x10}, 0x86, &(0x7f0000000b80)={0x5, 0xf, 0x86, 0x2, [@generic={0x77, 0x10, 0x4, "0279904345fe972ab9ddc7042a0608730e7481ebd6fea0f641aee9666745511b66e7989faf671048467028d230d4ba88c463cee3df89686a14fc41ed6748c3aa1ec94fa631fd0880f23da892a13243a32a8bffbc4e65d641176b1b3b7017892611538c6c0af1624de0863200fa839773aad66270"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x6, 0x7}]}, 0x6, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x100c}}, {0xa7, &(0x7f0000000c80)=@string={0xa7, 0x3, "5c18989040acf947e108b16843e2c751a1a4c6e877617126ae4d0b95b685eecfa991f6415d1c94ab6ee6b3256f3ca794bef3f603e08139bac049d1c2ca84b0ea881ff3a966ef1d2ff7e9d99a50b51139753fe08410037088f30f3253ee83e9d706b450d24d6e5e884c4190d5a0dfb7ae0abb1fdba40ce044135c587f456625c541c82246c44a0ff8b14a628d58b4ecb889bb9c72b19cd59e6fb20d961f967d261b9b23161a"}}, {0xb3, &(0x7f0000000d40)=@string={0xb3, 0x3, "f17329c897735dccc3a8713b2e4668c320bd874e318db534d0d31c872ecddb351612d2a5473816892348719038d35a403fbaf6f83435a2a2c536bb6bc993a0a47941dbab55a4682cd1a315010f52a40eceb0913f9bb4d00340abf0f5897f2e6b31dd1c838330753039b9db8007202776cf7b6a8bea9d5303c970ba3904a93e7202551a38f7f3df9aa9787a0afb76ab47373bd9fd26ed629c46b56370babdfadf447b9b9bbe59a406f922b94916d86d2e44"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x140c}}, {0x54, &(0x7f0000000e40)=@string={0x54, 0x3, "cf0f65bd9ba04a42ae6cc5b9e94bc4e387d1e0886d61273ff987bb235f5f49c65daafbbd024361bb5056000e941cfcb2bd58978e50e84ea336dd4b261dbbf739a62bcc572247c7e5701228a99213698d233d"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x480a}}]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x8}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0xd4, 0x0, &(0x7f0000000340)="a14c29c359ab835ae28e097043aaabe908f818db0b2c78a78654ebe9bf5914d8939ba4f713a69c63619808fc2fb2e6af7c09eef2d9df14a7a8ed4e85a33dd32963fcc9bce33d3936431b428bb163ad68ad29aebed6e121911ac0ea50213a94fc3b17e409f8fb844fe30b9ae6b2a6e2142e2fa440a27b5b44ad262548aab8097c6fe4c04a44199da463fedc83e691976c26d477632a78b9dab41e90442a7666b42b6b0a622b751a3f08770b31d07c42ccdddae0912d9822c7ad98c2bf616dd61c33e28941a6e8f80aec87cd5f49940937d9a65cae"})

19.595491614s ago: executing program 4 (id=203):
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x41, 0x0, 0x0, 0x0) (fail_nth: 9)

19.524633159s ago: executing program 4 (id=204):
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000000c0)=0x8, 0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x60000, 0x0)
syz_io_uring_setup(0x118, &(0x7f0000000340)={0x0, 0xd4a1, 0x800, 0x2, 0x396, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000440))
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="cc080000", @ANYRES16=r0, @ANYBLOB="000227bd7000ffdbdf25390000000c00990000000000180000005c005a802c000380140003000100330004000001010006000900f90a14000500008506000600050007000e00090000022c000380050006000100000005000700010000001700010004300518030c0548060c3616020204180b01360014015a804c0003800600010005010000050004000000000013000100180505363001090248010918041b3600140005000100ffff0e0096ed0100010001008000050004000100000005000700020000000c00008005000400020000003800038005000400000000000500040002000000050006000000000005000700020000001400030000800004000008000d000000ff0705001c000180160002001b030d145114200e18221053514200251724000040000280050007000200000014000300020007000000b6b902000700000000001f00010001061b4809f90b0605300b05600606041609e06f16124836020c020024000080050006000200000018000100066c09161804361248301b0c0304030504360660fc005a8038000080050007000200000005000600020000000500040001000000050007000100000014000500ff0703000004570001800500190007000c00018005000400000000006c00028014000300260008000001000108006cba060009000500060000000000110001000604280c1401040604023060240000002600020004402c393c313f2c0647150f0d112e1e264610411119105631471d4856570f282f180000050004000000000005000400010000004800038005000700020000003c0002000751491b512a3443514e31fd4cd971e11844d7d7211c360e49310d502c411c3332393942203b3d02381b021822281113211e53397f9b39f3f2adb5906b1ed3867bd20f24184908422908410c2a014a1364015a804000018014000500000007000800ff0001000800060004001400030092560600008007000200e200ff0f0600140003000a000900040091000600060000fefaff8000038014000300010016010500060003004b00050009001400030010007f0c7f001dda000099fd52040000370002003200103011191c063a2c2206104448104e36510a3251523306553e05340257144d095315281e252d350a3319190919292848070005000600000000001400030001008c220600bb080001070009000c00a0000180140003000800e3009b03ffff06000080070004001400020050564b2338191a0545142e4d22070f2405000600000000000500070002000000340002004639532a2607341417164047431c274a5336300a23124135473827100f0e263e0b081020174615532a140f490d110b1705000400020000001400030004000180040003000300020004000d0014000300050001fe4e000200ff0703000600070064025a802c0000800500060001000000140002000151543f15430925231a512c160c16480a000100051206306c0600001400038005000700000000000500040001000000280000800500070001000000050004000000000014000300050004005b1903000400b9a409000300e00001804800020007550124413e11180a0d0a44192130430f3f201c322057212104100d4038411c2f102a101703242331534109284d06302444513e084511313c1b31083f2d09372830313314000300090001040500050007000400060031c91e000100060512240b18060248020c0c02330409f6300c01480518241648000035000200133133343e0d214d0744283a2307003a4b484b19080f05043250365214482a220c1a353d1a3550280f053054302309004f0000000500060001000000050004000200000005000700010000001000010030052416061248120c3606187c00008005000600000000000c0002004a1d003052214d0105000600010000004700020002271e510f2c400c213d5234090c3618071d2c31480e505013300141362e05343030194940161605242a0a481a4a23110c091638002f083e141248293f1a024021390a00140005000200e90108000100ff070500db001400840003800500060002000000050006000000000014000500ed1200000500000099080100070004000b0002003335204b4e0138002700020013574a1f1030401b230b4a3f4b4a21274c3433433b1148ff3d293a370703230a2a270000120001001601362e03031b0648012409166000001400050004000600490a0900c5960700610e0300180001801400030000040100000004000a009d0f6001030088005a80840003802300010006160605180c06484806060b0b0560064836061806186c0b06023606066c04000500040000000000050007000100000043000200004512363f07563e30003b0d0d2c0f441a522a08192a210e47010549332c293328185248224d1b190f501f20542a401700423f002210512f15114d1e1d1535000500040002000000f0015a801c000380050007000000000005000600000000000500040000000000840003800500070002000000050006000100000005000700000000000500060000000000140005000600020001040e0004000000010404001200020040443f493dc1eaabbb357bab45410000120002000d2539501c2422352607234956480000050007000200000005000600010000001400050007000100ff00d60e01000500928f09001800038014000300070027000200070003005a7cfdff8f00300000801a0001001b16240b24fe36480c0302480b000548050c300c037a0000050007000200000005000700000000005c000380140005000200080008000100c0e00300977907000500060080000000140005000100ff0f40000300070040000800000005000400000000000d0001004812600660246c2424000000050006000100000005000400010000004c00008014000300ff0707000800f7ff7f0001009c00a300100002001c20313a261035030f37361f0500060000000000050007000100000014000500060076650400000001000400000001001400018005000700000000000500060001000000480001801400050008007000ff00060003001f00020005000500070001000000150001001818060b1602090405051b0302126c160c0000000500"], 0x8cc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000008000000000000c00078008000840bcf280160500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

19.450098946s ago: executing program 4 (id=205):
fsopen(&(0x7f0000000000)='smb3\x00', 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x7a, 0xa8, 0x10, 0x3f0, 0x2101, 0xf26a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x2, 0x40, 0xf, [{{0x9, 0x4, 0xdd, 0x9, 0x0, 0xff, 0x2, 0x2, 0x4a}}]}}]}}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x400caed0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x81)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8)
write$cgroup_int(r7, &(0x7f0000000080)=0x400000008002, 0x12)
socket(0x200000000000011, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x0, 0x0, 0x4, 0xfd, 0x1, 0xc8, 0x4, 0xe00}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000005)
close_range(r4, 0xffffffffffffffff, 0x0)

18.539431665s ago: executing program 5 (id=206):
io_setup(0x8, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x140)
ppoll(&(0x7f0000000040)=[{r0, 0x4236}, {r0, 0x108}, {r0, 0x8}], 0x3, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
syz_open_dev$dri(0x0, 0x0, 0x543c02)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
ioctl$RTC_UIE_ON(r2, 0x7003)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x1, 0x3b000000, 0x0, 0x3, 0x6, 0x60, 0x3, 0x4, 0x1}})
openat$iommufd(0xffffffffffffff9c, 0x0, 0xc00, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
waitid(0x2, 0x0, 0x0, 0x1, 0x0)

18.539059123s ago: executing program 2 (id=207):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}, 0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000001240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r2, 0x0, 0x24)
write$cgroup_type(r3, &(0x7f0000000000), 0x9)

17.705824477s ago: executing program 5 (id=208):
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r3 = dup(r1)
pipe2(&(0x7f0000000000)={<r4=>0x0, <r5=>0x0}, 0x0)
write$FUSE_INIT(r5, &(0x7f0000003100)={0x50}, 0x50)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='/dev/rfkill\x00', &(0x7f0000000140)="b2968a5c570a6b7da1187512be3491aebb711aa6482066e40fae0d3652948cc33194f54947a6ca6a693f4fb685f52895cf498b0220f41f1eb45eebb070dc2ba4a77b107d337eb20d958ea353be039a4ae0b733cdb8584689a20c9b916ac3b747f67f8e02644b8e3cb48d392930054d3e6b1ee59c943af8c820", 0x79)
tee(r4, r3, 0xfffffffffffffffe, 0x4)

16.685831196s ago: executing program 1 (id=209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
unshare(0x20040600)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
openat(r3, &(0x7f0000000040)='./file0\x00', 0x4a8100, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
process_madvise(r4, 0x0, 0x0, 0x19, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0x10, 0xb}, {0x2, 0x2, 0x0, 0x8}, {0x3, 0x4, 0x10, 0x9}, {0x5, 0x2, 0x9, 0xa}, {0x5, 0x1, 0x8, 0xb}, {0x0, 0x5, 0x5, 0xb}], 0x10, 0x1, @void, @value}, 0x94)
close_range(r5, r0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf253500000008000300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0xe010)

16.599425675s ago: executing program 1 (id=210):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0xe, 0xa6, {0xa6, 0x23, "55744054ec556f202f172e13af88f9e52ea633a4acee381ae55225f9d4672589990e99476e06bb331bc2d1f02cf278c19919e699c32e043b648ec7b662fa11c4c37d75d16b8de8d2e0f770de28801fd13b9ba6519d7eed34613de94f55c06de431d43466cbb166ad761006635c21bcc6904e0d54c5f89b7f711bf0659908b12c6e13671c08c047aa70a719d1fe5ceaa2599a0d699a3d8908eec37c5597266aa813b2d682"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "28962109ceab330aa60f503906a1735b2964e144738b55318bf49a430e70df49a237f82405b6c4aa585872dea2200ed71d382356cdce45e1010c37e62834abd4173824e439a40e3a1de768a43647eab04fbebbe1b3838f0f2f61653e5130e3f1bd26b2d800377183118bc77084d94cc688c8553b962f90c1415ecf69bef18faf2fd1ccb8e62967e0e3dc79b031bfda804af7dc817adbacc0e81e6830795e5ec22f15a62fad"}}}, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x0, 0x18, 0xae, "9d1732ba6f7b5b3bec52bf7557ce88c3df0ab4ec80b5ccf19bbc9238f0d10a8c347c3672d1058888ab9b282073e27a2030358f714b662750c2059e9f6e269fe82c0c7a77de91c447b0557d774e4b6cad0bb379059ad70b252e5cff16c5f10c1a5c0f016f61f92f583f24d18ff03a0606c8b05d88b48ad038fca46c1bb438034295b097af4c8949a3f0694fcc1d642e47e04ddd44d83ddd2ea2f4cd0f6ed2b11df619b73a76d881803bf7b40070d8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000380)={0x20, 0x81, 0x1, "aa"}, &(0x7f0000000540)={0x20, 0x82, 0xfdaf, '9'}, &(0x7f0000000580)={0x20, 0x83, 0x3, "a983a5"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "881721c0"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "00f800"}})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00')
write$P9_RMKDIR(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000180)=0x2, 0x4)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x0, 0x10, 0x1, "03"}, 0x0, 0x0})
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28)
close(r3)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

16.396098567s ago: executing program 4 (id=211):
syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000021000100000000000000000081"], 0x38}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0xc80, 0x640, 0x550, 0x4b0, 0x40d, 0x26d63682, 0x0, 0x1, {0x101, 0x7fffffff, 0x1}, {0x2d8a4262, 0x7}, {0x1, 0x2, 0x1}, {0x7fff, 0x1000}, 0x2, 0x100, 0x4, 0xfffffffd, 0x1, 0x3, 0x80000000, 0x2, 0x8, 0x7fffffff, 0x9, 0x8, 0x6, 0x100, 0x3, 0x2})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ppoll(&(0x7f0000000a00)=[{r3, 0x43e0}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0)
r4 = dup(r0)
ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000200)={0x5, "796b9502845139e118e0bede0a3636a425802c6ccae19aa13d56e65b231b5512", 0x3})
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="070000f31e1a0a0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x2})
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r11, &(0x7f0000000280), 0x9)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@multicast2, @empty, 0xffffffffffffffff, "374ff0334ca4df80bfd8144aaac202624b312aca8ac98fd707efc9e516e1e3c2", 0x5, 0x3, 0xf5}, 0x3c)
openat$cgroup_ro(r12, 0x0, 0x275a, 0x0)

15.528490022s ago: executing program 2 (id=212):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580fff001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

15.435465523s ago: executing program 2 (id=213):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000282b5f202a9948527d53587cc50577c35cb04afdd463f8e4ade1bc8d96a55336c91504e837ace70c16bb468537f9a958af255030a710ca99013ed5c6569a3bb86153b47a5914afda08095a20c5253d9c3028c7"], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000282b5f202a9948527d53587cc50577c35cb04afdd463f8e4ade1bc8d96a55336c91504e837ace70c16bb468537f9a958af255030a710ca99013ed5c6569a3bb86153b47a5914afda08095a20c5253d9c3028c7"], 0x0}, 0x0) (async)

2.003108465s ago: executing program 34 (id=208):
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x2)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r3 = dup(r1)
pipe2(&(0x7f0000000000)={<r4=>0x0, <r5=>0x0}, 0x0)
write$FUSE_INIT(r5, &(0x7f0000003100)={0x50}, 0x50)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='/dev/rfkill\x00', &(0x7f0000000140)="b2968a5c570a6b7da1187512be3491aebb711aa6482066e40fae0d3652948cc33194f54947a6ca6a693f4fb685f52895cf498b0220f41f1eb45eebb070dc2ba4a77b107d337eb20d958ea353be039a4ae0b733cdb8584689a20c9b916ac3b747f67f8e02644b8e3cb48d392930054d3e6b1ee59c943af8c820", 0x79)
tee(r4, r3, 0xfffffffffffffffe, 0x4)

1.505564348s ago: executing program 35 (id=210):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0xe, 0xa6, {0xa6, 0x23, "55744054ec556f202f172e13af88f9e52ea633a4acee381ae55225f9d4672589990e99476e06bb331bc2d1f02cf278c19919e699c32e043b648ec7b662fa11c4c37d75d16b8de8d2e0f770de28801fd13b9ba6519d7eed34613de94f55c06de431d43466cbb166ad761006635c21bcc6904e0d54c5f89b7f711bf0659908b12c6e13671c08c047aa70a719d1fe5ceaa2599a0d699a3d8908eec37c5597266aa813b2d682"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "28962109ceab330aa60f503906a1735b2964e144738b55318bf49a430e70df49a237f82405b6c4aa585872dea2200ed71d382356cdce45e1010c37e62834abd4173824e439a40e3a1de768a43647eab04fbebbe1b3838f0f2f61653e5130e3f1bd26b2d800377183118bc77084d94cc688c8553b962f90c1415ecf69bef18faf2fd1ccb8e62967e0e3dc79b031bfda804af7dc817adbacc0e81e6830795e5ec22f15a62fad"}}}, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x0, 0x18, 0xae, "9d1732ba6f7b5b3bec52bf7557ce88c3df0ab4ec80b5ccf19bbc9238f0d10a8c347c3672d1058888ab9b282073e27a2030358f714b662750c2059e9f6e269fe82c0c7a77de91c447b0557d774e4b6cad0bb379059ad70b252e5cff16c5f10c1a5c0f016f61f92f583f24d18ff03a0606c8b05d88b48ad038fca46c1bb438034295b097af4c8949a3f0694fcc1d642e47e04ddd44d83ddd2ea2f4cd0f6ed2b11df619b73a76d881803bf7b40070d8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000380)={0x20, 0x81, 0x1, "aa"}, &(0x7f0000000540)={0x20, 0x82, 0xfdaf, '9'}, &(0x7f0000000580)={0x20, 0x83, 0x3, "a983a5"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "881721c0"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "00f800"}})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00')
write$P9_RMKDIR(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000180)=0x2, 0x4)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000980)={0x0, 0x6, 0x1, 'N'}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x0, 0x10, 0x1, "03"}, 0x0, 0x0})
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28)
close(r3)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

486.194925ms ago: executing program 36 (id=211):
syz_open_dev$video4linux(&(0x7f0000000140), 0x4, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000021000100000000000000000081"], 0x38}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0xc80, 0x640, 0x550, 0x4b0, 0x40d, 0x26d63682, 0x0, 0x1, {0x101, 0x7fffffff, 0x1}, {0x2d8a4262, 0x7}, {0x1, 0x2, 0x1}, {0x7fff, 0x1000}, 0x2, 0x100, 0x4, 0xfffffffd, 0x1, 0x3, 0x80000000, 0x2, 0x8, 0x7fffffff, 0x9, 0x8, 0x6, 0x100, 0x3, 0x2})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ppoll(&(0x7f0000000a00)=[{r3, 0x43e0}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0)
r4 = dup(r0)
ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000200)={0x5, "796b9502845139e118e0bede0a3636a425802c6ccae19aa13d56e65b231b5512", 0x3})
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="070000f31e1a0a0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000340)=<r9=>0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x2})
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r11, &(0x7f0000000280), 0x9)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@multicast2, @empty, 0xffffffffffffffff, "374ff0334ca4df80bfd8144aaac202624b312aca8ac98fd707efc9e516e1e3c2", 0x5, 0x3, 0xf5}, 0x3c)
openat$cgroup_ro(r12, 0x0, 0x275a, 0x0)

0s ago: executing program 37 (id=213):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000282b5f202a9948527d53587cc50577c35cb04afdd463f8e4ade1bc8d96a55336c91504e837ace70c16bb468537f9a958af255030a710ca99013ed5c6569a3bb86153b47a5914afda08095a20c5253d9c3028c7"], 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000282b5f202a9948527d53587cc50577c35cb04afdd463f8e4ade1bc8d96a55336c91504e837ace70c16bb468537f9a958af255030a710ca99013ed5c6569a3bb86153b47a5914afda08095a20c5253d9c3028c7"], 0x0}, 0x0) (async)

kernel console output (not intermixed with test programs):

im1: renamed from eth1
[   63.250600][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.260814][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.280216][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   63.309727][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.316990][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.333271][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.352501][  T191] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.359620][  T191] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.391327][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   63.421295][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.428418][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.464471][  T191] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.471613][  T191] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.494957][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.516752][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.568156][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   63.594189][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.605239][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.639120][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   63.652729][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.659870][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.681432][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.688561][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.697771][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.704837][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.750376][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.757522][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.772743][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.802310][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.822221][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.911269][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   63.923678][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.930822][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.961328][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.968457][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.987939][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.011203][ T5849] veth0_vlan: entered promiscuous mode
[   64.034718][ T5849] veth1_vlan: entered promiscuous mode
[   64.072099][ T5851] veth0_vlan: entered promiscuous mode
[   64.094158][ T5851] veth1_vlan: entered promiscuous mode
[   64.113139][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.161377][ T5854] veth0_vlan: entered promiscuous mode
[   64.175314][ T5849] veth0_macvtap: entered promiscuous mode
[   64.199348][ T5849] veth1_macvtap: entered promiscuous mode
[   64.213461][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.221804][ T5854] veth1_vlan: entered promiscuous mode
[   64.228417][ T5843] Bluetooth: hci2: command tx timeout
[   64.231162][ T5845] Bluetooth: hci0: command tx timeout
[   64.247516][ T5851] veth0_macvtap: entered promiscuous mode
[   64.265877][ T5852] veth0_vlan: entered promiscuous mode
[   64.275065][ T5851] veth1_macvtap: entered promiscuous mode
[   64.293867][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.302191][ T5845] Bluetooth: hci4: command tx timeout
[   64.307680][ T5845] Bluetooth: hci3: command tx timeout
[   64.307774][ T5843] Bluetooth: hci1: command tx timeout
[   64.329842][ T5852] veth1_vlan: entered promiscuous mode
[   64.343782][ T5854] veth0_macvtap: entered promiscuous mode
[   64.353296][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.370105][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.381745][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.393907][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.403318][ T5854] veth1_macvtap: entered promiscuous mode
[   64.414040][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.423222][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.432418][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.442138][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.463001][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.473644][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.484949][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.496404][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.505114][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.514375][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.523864][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.584684][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.599776][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.610090][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.621108][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.632410][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.663813][ T5853] veth0_vlan: entered promiscuous mode
[   64.673309][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.684810][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.696745][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.707527][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.718688][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.746895][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.754861][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.804691][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.812111][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.816771][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.833998][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.836159][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.850210][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.861848][ T5853] veth1_vlan: entered promiscuous mode
[   64.901723][ T5852] veth0_macvtap: entered promiscuous mode
[   64.940872][ T5852] veth1_macvtap: entered promiscuous mode
[   64.952648][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.971210][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.001147][ T5853] veth0_macvtap: entered promiscuous mode
[   65.024414][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.061865][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.075207][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.085916][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.099215][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.109398][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.120937][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.132485][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.142741][ T5853] veth1_macvtap: entered promiscuous mode
[   65.153378][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.170218][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.204779][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.216102][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.232126][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.243234][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.259473][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.270384][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.281384][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.304635][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.313938][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.323319][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.332491][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.378076][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.392991][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.417572][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.439063][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.455078][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.471497][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.481867][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.492985][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.504351][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.515200][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.527394][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.590281][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.615672][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.635531][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.668072][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.701505][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.714211][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.730066][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.751975][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.763384][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.798912][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.820133][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.833630][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.844590][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.866812][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.882589][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.935650][  T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.949595][  T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.029776][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.040911][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.160805][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.189986][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.292148][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.301396][ T5843] Bluetooth: hci0: command tx timeout
[   66.308072][ T5839] Bluetooth: hci2: command tx timeout
[   66.328642][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.375733][ T5843] Bluetooth: hci3: command tx timeout
[   66.381940][ T5839] Bluetooth: hci4: command tx timeout
[   66.387463][ T5839] Bluetooth: hci1: command tx timeout
[   66.540527][ T5910] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.685810][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.695227][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.730182][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   66.781112][ T5851] syz-executor (5851) used greatest stack depth: 18640 bytes left
[   66.906359][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   66.992473][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.105956][   T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.121584][ T5889] usb 5-1: config 0 has no interfaces?
[   67.200783][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   67.213355][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.261472][ T5889] usb 5-1: Product: syz
[   67.281164][ T5889] usb 5-1: Manufacturer: syz
[   67.287632][   T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.298486][   T57] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   67.309975][   T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.329404][ T5889] usb 5-1: SerialNumber: syz
[   67.349033][   T57] usb 2-1: config 0 descriptor??
[   67.362680][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.381379][   T57] pwc: Askey VC010 type 2 USB webcam detected.
[   67.396392][ T5889] usb 5-1: config 0 descriptor??
[   67.545477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.605837][   T57] pwc: send_video_command error -71
[   67.621311][   T57] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   67.716565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.744780][   T57] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[   67.748655][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.799068][ T5905] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   67.814623][ T5905] process 'syz.4.5' launched '/dev/fd/11' with NULL argv: empty string added
[   67.873120][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   67.880779][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.918080][   T57] usb 2-1: USB disconnect, device number 2
[   68.115684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   68.197802][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short
[   68.206660][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.223576][ T5889] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   68.233607][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.253371][ T5846] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   68.262594][ T5889] usb 4-1: config 1 has no interface number 1
[   68.273533][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   68.286972][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.324529][ T5846] usb 3-1: config 0 descriptor??
[   68.343479][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.360128][ T5846] pwc: Askey VC010 type 2 USB webcam detected.
[   68.371516][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.379643][ T5845] Bluetooth: hci2: command tx timeout
[   68.385688][ T5889] usb 4-1: Product: syz
[   68.389931][ T5889] usb 4-1: Manufacturer: syz
[   68.395076][ T5889] usb 4-1: SerialNumber: syz
[   68.426446][   T57] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   68.465553][ T5845] Bluetooth: hci3: command tx timeout
[   68.466524][ T5843] Bluetooth: hci1: command tx timeout
[   68.471320][ T5845] Bluetooth: hci4: command tx timeout
[   68.523366][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.532093][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.544083][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.553727][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.574171][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.582821][ T5846] pwc: send_video_command error -71
[   68.590640][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.592593][   T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.600371][ T5846] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   68.639080][ T5846] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[   68.654567][ T5846] usb 3-1: USB disconnect, device number 2
[   68.717976][   T57] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   68.754233][ T3462] bridge_slave_1: left allmulticast mode
[   68.772276][ T3462] bridge_slave_1: left promiscuous mode
[   68.773283][   T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.782154][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.811571][ T3462] bridge_slave_0: left allmulticast mode
[   68.813015][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'.
[   68.825589][ T3462] bridge_slave_0: left promiscuous mode
[   68.835571][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'.
[   68.843301][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.845411][   T57] usb 2-1: config 0 descriptor??
[   68.875233][   T57] pwc: Askey VC010 type 2 USB webcam detected.
[   69.105611][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   69.251585][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.264486][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.276348][ T3462] bond0 (unregistering): Released all slaves
[   69.277073][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.311275][ T5899] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   69.320304][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.320906][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.329197][   T57] pwc: recv_control_msg error -32 req 02 val 2b00
[   69.388736][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.414037][   T57] pwc: recv_control_msg error -32 req 02 val 2700
[   69.429842][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.446962][ T5899] usb 3-1: config 0 descriptor??
[   69.452726][   T57] pwc: recv_control_msg error -32 req 02 val 2c00
[   69.476132][ T5899] pwc: Askey VC010 type 2 USB webcam detected.
[   69.484821][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.551403][   T57] pwc: recv_control_msg error -32 req 04 val 1000
[   69.590579][   T57] pwc: recv_control_msg error -32 req 04 val 1300
[   69.632670][   T57] pwc: recv_control_msg error -32 req 04 val 1400
[   69.669710][ T5886] usb 5-1: USB disconnect, device number 2
[   69.860735][   T57] pwc: recv_control_msg error -32 req 02 val 2100
[   69.895332][   T57] pwc: recv_control_msg error -32 req 04 val 1500
[   69.909240][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00
[   69.916258][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.924813][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.958686][ T5935] chnl_net:caif_netlink_parms(): no params data found
[   69.963810][ T5899] pwc: recv_control_msg error -32 req 02 val 2700
[   69.978549][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.995635][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00
[   70.012621][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.028576][ T3462] hsr_slave_0: left promiscuous mode
[   70.035879][ T5899] pwc: recv_control_msg error -32 req 04 val 1000
[   70.042461][ T3462] hsr_slave_1: left promiscuous mode
[   70.043661][ T5899] pwc: recv_control_msg error -32 req 04 val 1300
[   70.057725][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.066099][ T5899] pwc: recv_control_msg error -32 req 04 val 1400
[   70.067402][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.073582][ T5899] pwc: recv_control_msg error -32 req 02 val 2000
[   70.100989][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.118235][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.152267][   T57] pwc: recv_control_msg error -71 req 02 val 2400
[   70.169968][ T3462] veth1_macvtap: left promiscuous mode
[   70.180685][   T57] pwc: recv_control_msg error -71 req 02 val 2600
[   70.181316][ T3462] veth0_macvtap: left promiscuous mode
[   70.187290][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   70.195336][ T3462] veth1_vlan: left promiscuous mode
[   70.206108][ T3462] veth0_vlan: left promiscuous mode
[   70.215224][   T57] pwc: recv_control_msg error -71 req 02 val 2900
[   70.232911][   T57] pwc: recv_control_msg error -71 req 02 val 2800
[   70.239970][   T57] pwc: recv_control_msg error -71 req 04 val 1100
[   70.247630][   T57] pwc: recv_control_msg error -71 req 04 val 1200
[   70.262228][   T57] pwc: Registered as video103.
[   70.270224][   T57] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   70.290144][   T57] usb 2-1: USB disconnect, device number 3
[   70.303732][ T5899] pwc: recv_control_msg error -71 req 04 val 1500
[   70.331328][ T5899] pwc: recv_control_msg error -71 req 02 val 2500
[   70.356271][ T5899] pwc: recv_control_msg error -71 req 02 val 2400
[   70.377155][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.387903][ T5899] pwc: recv_control_msg error -71 req 02 val 2600
[   70.401409][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   70.411145][ T5899] pwc: recv_control_msg error -71 req 02 val 2900
[   70.425965][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.446378][ T5899] pwc: recv_control_msg error -71 req 02 val 2800
[   70.455399][ T5886] usb 5-1: config 0 descriptor??
[   70.462945][ T5899] pwc: recv_control_msg error -71 req 04 val 1100
[   70.479669][ T5886] pwc: Askey VC010 type 2 USB webcam detected.
[   70.486785][ T5899] pwc: recv_control_msg error -71 req 04 val 1200
[   70.501080][ T5899] pwc: Registered as video103.
[   70.514628][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[   70.532806][ T5899] usb 3-1: USB disconnect, device number 3
[   70.601946][ T5889] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc
[   70.683541][ T5886] pwc: send_video_command error -71
[   70.686672][ T5889] usb 4-1: USB disconnect, device number 2
[   70.698290][ T5839] Bluetooth: hci0: command tx timeout
[   70.723518][ T5886] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   70.797107][ T5886] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[   70.861342][ T5886] usb 5-1: USB disconnect, device number 3
[   71.151829][ T3462] team0 (unregistering): Port device team_slave_1 removed
[   71.200422][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   71.245772][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   71.270335][ T3462] team0 (unregistering): Port device team_slave_0 removed
[   71.377650][ T5889] usb 4-1: Using ep0 maxpacket: 8
[   71.392564][ T5889] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[   71.402325][ T5889] usb 4-1: config 6 has no interface number 0
[   71.408799][ T5889] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   71.419043][ T5889] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   71.427202][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.432071][ T5889] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   71.451036][ T5886] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   71.468002][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.477216][ T5889] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   71.492218][ T5886] usb 5-1: config 0 descriptor??
[   71.502980][ T5886] pwc: Askey VC010 type 2 USB webcam detected.
[   71.508623][ T5889] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   71.518729][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.529343][ T5889] usb 4-1: Product: syz
[   71.530108][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   71.533501][ T5889] usb 4-1: Manufacturer: syz
[   71.533519][ T5889] usb 4-1: SerialNumber: syz
[   71.554126][ T5889] hso 4-1:6.2: Failed to find BULK IN ep
[   71.565634][   T57] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   71.573756][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.663875][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[   71.671048][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[   71.695867][ T5899] usb 2-1: Using ep0 maxpacket: 16
[   71.703190][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.714931][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.725793][ T5899] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   71.735094][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.749812][   T57] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[   71.759998][ T5899] usb 2-1: config 0 descriptor??
[   71.765008][   T57] usb 3-1: config 0 has no interface number 0
[   71.772850][   T57] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   71.790094][   T57] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   71.801684][   T57] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   71.814696][   T57] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   71.835560][   T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.843644][   T57] usb 3-1: Product: syz
[   71.847971][   T57] usb 3-1: Manufacturer: syz
[   71.852617][   T57] usb 3-1: SerialNumber: syz
[   71.867072][   T57] usb 3-1: config 0 descriptor??
[   71.872949][ T5968] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   71.884918][   T57] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   71.909036][ T2150] usb 4-1: USB disconnect, device number 3
[   71.929405][   T57] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[   71.931575][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.942298][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00
[   71.956551][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.972065][   T57] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   71.994538][ T5964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.037027][ T5964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.056265][ T5886] pwc: recv_control_msg error -32 req 02 val 2700
[   72.064882][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00
[   72.066304][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.085650][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.141775][ T5886] pwc: recv_control_msg error -32 req 04 val 1000
[   72.163739][ T5886] pwc: recv_control_msg error -32 req 04 val 1300
[   72.200217][ T5886] pwc: recv_control_msg error -32 req 04 val 1400
[   72.200627][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.231308][ T5886] pwc: recv_control_msg error -32 req 02 val 2000
[   72.250909][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.262874][ T5886] pwc: recv_control_msg error -32 req 02 val 2100
[   72.276848][ T5935] bridge_slave_0: entered allmulticast mode
[   72.292691][ T5935] bridge_slave_0: entered promiscuous mode
[   72.329981][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.353708][ T5899] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[   72.355647][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.386854][ T5935] bridge_slave_1: entered allmulticast mode
[   72.399086][ T5935] bridge_slave_1: entered promiscuous mode
[   72.450402][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.469652][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.496155][ T5886] pwc: recv_control_msg error -71 req 02 val 2500
[   72.508976][ T5899] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71).
[   72.532038][ T5886] pwc: recv_control_msg error -71 req 02 val 2400
[   72.555835][ T5886] pwc: recv_control_msg error -71 req 02 val 2600
[   72.576526][ T5899] usb 2-1: USB disconnect, device number 4
[   72.594105][ T5886] pwc: recv_control_msg error -71 req 02 val 2900
[   72.619280][ T5886] pwc: recv_control_msg error -71 req 02 val 2800
[   72.651696][ T5886] pwc: recv_control_msg error -71 req 04 val 1100
[   72.667329][ T5886] pwc: recv_control_msg error -71 req 04 val 1200
[   72.687090][ T5935] team0: Port device team_slave_0 added
[   72.697415][ T5886] pwc: Registered as video103.
[   72.703278][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[   72.721195][ T5935] team0: Port device team_slave_1 added
[   72.749706][ T5886] usb 5-1: USB disconnect, device number 4
[   72.777772][ T5839] Bluetooth: hci0: command tx timeout
[   72.821191][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.835479][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.861424][    C0] vkms_vblank_simulate: vblank timer overrun
[   72.912439][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.926650][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.933644][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.960726][ T5932] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   72.963290][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.043000][ T5935] hsr_slave_0: entered promiscuous mode
[   73.049487][ T5935] hsr_slave_1: entered promiscuous mode
[   73.119408][ T5932] usb 4-1: Using ep0 maxpacket: 8
[   73.130231][ T5932] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   73.139227][ T5932] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[   73.150329][ T5932] usb 4-1: config 179 has no interface number 0
[   73.193273][ T5932] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   73.207423][ T5932] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   73.218780][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.365647][ T5935] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.388457][ T5935] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.416486][ T5935] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.452232][ T5935] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.492620][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   73.579872][ T5886] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   73.662747][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.708986][ T5935] 8021q: adding VLAN 0 to HW filter on device team0
[   73.724890][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.732120][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.749907][ T5886] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[   73.768226][ T5886] usb 2-1: config 0 has no interface number 0
[   73.774563][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   73.786261][ T5886] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   73.804450][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.811627][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.813084][   T57] usb 4-1: USB disconnect, device number 4
[   73.843360][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   73.863675][ T5886] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   73.884858][ T5886] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   73.916386][ T5886] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   73.936665][ T5899] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   73.961021][ T5886] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   73.970548][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.980537][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.002676][ T5886] usb 2-1: config 0 descriptor??
[   74.016766][ T5992] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   74.026883][ T5992] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   74.047387][ T5886] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   74.075204][ T5935] veth0_vlan: entered promiscuous mode
[   74.107064][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   74.127260][ T5935] veth1_vlan: entered promiscuous mode
[   74.136125][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   74.162307][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   74.171748][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   74.180072][ T5899] usb 5-1: SerialNumber: syz
[   74.183308][ T5935] veth0_macvtap: entered promiscuous mode
[   74.199619][ T5899] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[   74.209302][ T5935] veth1_macvtap: entered promiscuous mode
[   74.216088][ T5899] usb-storage 5-1:1.0: USB Mass Storage device detected
[   74.229348][ T5899] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   74.243385][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.285545][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.285564][ T5899] scsi host1: usb-storage 5-1:1.0
[   74.303530][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.310102][ T5886] usb 2-1: USB disconnect, device number 5
[   74.313980][    C1] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[   74.325896][ T5889] usb 3-1: USB disconnect, device number 4
[   74.350551][ T5889] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   74.355744][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.371687][ T5889] cyberjack 3-1:0.69: device disconnected
[   74.441150][ T5886] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[   74.456001][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.494372][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.522028][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.535358][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.547262][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.571426][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.583793][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.597091][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.607971][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.623966][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.634872][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.645782][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.656892][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.669232][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.702013][ T5935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.720680][ T5935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.731744][ T5935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.744071][ T5935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.766209][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   74.856688][ T5839] Bluetooth: hci0: command tx timeout
[   74.869868][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.887128][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.919458][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.938963][ T5889] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   74.964105][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.967559][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.006490][ T5889] usb 3-1: config 0 descriptor??
[   75.038417][ T5889] gspca_main: spca508-2.14.0 probing 8086:0110
[   75.215856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   75.234340][ T5889] gspca_spca508: reg_read err -32
[   75.394530][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   75.455324][ T5889] gspca_spca508: reg_read err -71
[   75.468523][ T5889] gspca_spca508: reg_read err -71
[   75.505919][ T5889] gspca_spca508: reg_read err -71
[   75.511711][ T5889] gspca_spca508: reg write: error -71
[   75.532049][ T5889] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[   75.634856][ T5889] usb 3-1: USB disconnect, device number 5
[   75.705716][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.795940][  T908] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   75.880641][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.918417][ T6060] vcan0: entered promiscuous mode
[   75.924145][ T6060] vlan2: entered promiscuous mode
[   75.939268][ T6060] vcan0: left promiscuous mode
[   75.978466][  T908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.003722][  T908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.114365][  T908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   76.189361][  T908] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   76.311723][  T908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.405967][  T908] usb 6-1: config 0 descriptor??
[   76.493560][ T5886] usb 5-1: USB disconnect, device number 5
[   76.607959][ T6077] bridge0: entered promiscuous mode
[   76.663354][ T6077] vlan2: entered promiscuous mode
[   76.692144][ T6077] bridge0: left promiscuous mode
[   76.795768][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   76.848450][  T908] usbhid 6-1:0.0: can't add hid device: -71
[   76.864687][  T908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   76.909729][  T908] usb 6-1: USB disconnect, device number 2
[   76.936744][ T5839] Bluetooth: hci0: command tx timeout
[   76.946796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.966033][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   76.982876][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.045888][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   77.092111][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.113899][ T5899] usb 4-1: config 0 descriptor??
[   77.130127][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.153197][ T5899] pwc: Askey VC010 type 2 USB webcam detected.
[   77.176712][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   77.214971][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.243630][ T5888] usb 3-1: config 0 descriptor??
[   77.246901][ T6087] vcan0: entered promiscuous mode
[   77.266354][ T6087] vlan2: entered promiscuous mode
[   77.279667][ T5888] pwc: Askey VC010 type 2 USB webcam detected.
[   77.311742][ T6087] vcan0: left promiscuous mode
[   77.354751][ T5899] pwc: send_video_command error -71
[   77.365113][ T5899] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   77.381905][ T5899] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[   77.404793][ T5899] usb 4-1: USB disconnect, device number 5
[   77.451628][ T6093] vcan0: entered promiscuous mode
[   77.464292][ T5888] pwc: send_video_command error -71
[   77.482597][ T5888] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   77.499477][ T6093] vlan2: entered promiscuous mode
[   77.530886][ T5888] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[   77.531284][ T6093] vcan0: left promiscuous mode
[   77.568217][ T5888] usb 3-1: USB disconnect, device number 6
[   77.885604][   T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   77.935750][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   77.992108][ T6110] fuse: Bad value for 'user_id'
[   77.993616][ T2150] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   78.004771][ T6110] fuse: Bad value for 'user_id'
[   78.045717][ T5888] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   78.076966][   T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.105730][   T57] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   78.132117][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.144769][   T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.152921][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   78.166314][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.179357][   T57] usb 6-1: config 0 descriptor??
[   78.190446][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.198991][ T2150] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   78.210205][   T57] pwc: Askey VC010 type 2 USB webcam detected.
[   78.224121][ T5899] usb 4-1: config 0 descriptor??
[   78.224152][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.236389][ T6117] bond_slave_0: entered promiscuous mode
[   78.245171][ T6117] bond_slave_1: entered promiscuous mode
[   78.251392][ T2150] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.260939][ T6117] vlan2: entered promiscuous mode
[   78.267235][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   78.269677][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.288032][ T5899] pwc: Askey VC010 type 2 USB webcam detected.
[   78.291250][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.305108][ T6117] bond0: entered promiscuous mode
[   78.314189][ T6117] bond0: left promiscuous mode
[   78.319984][ T6117] bond_slave_0: left promiscuous mode
[   78.325503][ T6117] bond_slave_1: left promiscuous mode
[   78.329932][ T5888] usb 3-1: config 0 descriptor??
[   78.348232][ T2150] usb 5-1: config 0 descriptor??
[   78.358759][ T5888] pwc: Askey VC010 type 2 USB webcam detected.
[   78.410805][   T57] pwc: send_video_command error -71
[   78.424331][   T57] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   78.435248][   T57] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[   78.462460][   T57] usb 6-1: USB disconnect, device number 3
[   78.692593][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.695179][ T6123] bridge_slave_0: left allmulticast mode
[   78.706988][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00
[   78.733015][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.754922][ T6123] bridge_slave_0: left promiscuous mode
[   78.766467][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.771335][ T5899] pwc: recv_control_msg error -32 req 02 val 2700
[   78.775019][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00
[   78.795759][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.797849][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.811234][ T5888] pwc: recv_control_msg error -32 req 02 val 2700
[   78.812171][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00
[   78.827598][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00
[   78.829153][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.835150][ T5888] pwc: recv_control_msg error -32 req 04 val 1000
[   78.844884][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.858449][ T5888] pwc: recv_control_msg error -32 req 04 val 1300
[   78.868884][ T6123] bridge_slave_1: left allmulticast mode
[   78.874581][ T6123] bridge_slave_1: left promiscuous mode
[   78.880461][ T5888] pwc: recv_control_msg error -32 req 04 val 1400
[   78.910378][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.916194][   T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   78.950662][ T6123] bond0: (slave bond_slave_0): Releasing backup interface
[   78.970398][ T5899] pwc: recv_control_msg error -32 req 04 val 1000
[   78.992078][ T5899] pwc: recv_control_msg error -32 req 04 val 1300
[   79.000681][ T6123] bond0: (slave bond_slave_1): Releasing backup interface
[   79.010127][ T5899] pwc: recv_control_msg error -32 req 04 val 1400
[   79.019768][ T5899] pwc: recv_control_msg error -32 req 02 val 2000
[   79.027416][ T5899] pwc: recv_control_msg error -32 req 02 val 2100
[   79.078607][   T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.082279][ T5888] pwc: recv_control_msg error -32 req 02 val 2100
[   79.089312][   T57] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   79.107880][ T5888] pwc: recv_control_msg error -32 req 04 val 1500
[   79.112440][ T6123] team0: Port device team_slave_0 removed
[   79.165611][ T6123] team0: Port device team_slave_1 removed
[   79.180209][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.197842][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.217065][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.235071][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.305670][ T5899] pwc: recv_control_msg error -71 req 02 val 2500
[   79.325794][ T5899] pwc: recv_control_msg error -71 req 02 val 2400
[   79.329482][ T5888] pwc: recv_control_msg error -71 req 02 val 2400
[   79.355330][ T5888] pwc: recv_control_msg error -71 req 02 val 2600
[   79.355820][ T5899] pwc: recv_control_msg error -71 req 02 val 2600
[   79.366921][ T5888] pwc: recv_control_msg error -71 req 02 val 2900
[   79.385388][ T5888] pwc: recv_control_msg error -71 req 02 val 2800
[   79.392442][ T5888] pwc: recv_control_msg error -71 req 04 val 1100
[   79.396224][   T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.409076][ T5888] pwc: recv_control_msg error -71 req 04 val 1200
[   79.416221][ T5899] pwc: recv_control_msg error -71 req 02 val 2900
[   79.423338][ T5899] pwc: recv_control_msg error -71 req 02 val 2800
[   79.432126][ T5888] pwc: Registered as video103.
[   79.436577][   T57] usb 6-1: config 0 descriptor??
[   79.445845][ T5899] pwc: recv_control_msg error -71 req 04 val 1100
[   79.452631][   T57] pwc: Askey VC010 type 2 USB webcam detected.
[   79.467709][ T5899] pwc: recv_control_msg error -71 req 04 val 1200
[   79.472621][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[   79.484058][ T5899] videodev: could not get a free minor
[   79.496666][ T5899] pwc: Failed to register as video device (-23).
[   79.516698][ T5899] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23
[   79.521966][ T5888] usb 3-1: USB disconnect, device number 7
[   79.566199][ T5899] usb 4-1: USB disconnect, device number 6
[   79.853780][   T57] pwc: recv_control_msg error -32 req 02 val 2b00
[   79.861561][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.880571][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.910798][   T57] pwc: recv_control_msg error -32 req 02 val 2700
[   79.930739][   T57] pwc: recv_control_msg error -32 req 02 val 2c00
[   79.931116][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.968936][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.008974][   T57] pwc: recv_control_msg error -32 req 04 val 1000
[   80.017232][ T6147] vcan0: entered promiscuous mode
[   80.022440][ T6147] vlan2: entered promiscuous mode
[   80.030826][ T6147] vcan0: left promiscuous mode
[   80.033406][   T57] pwc: recv_control_msg error -32 req 04 val 1300
[   80.051644][   T57] pwc: recv_control_msg error -32 req 04 val 1400
[   80.060149][   T57] pwc: recv_control_msg error -32 req 02 val 2000
[   80.074303][   T57] pwc: recv_control_msg error -32 req 02 val 2100
[   80.305125][   T57] pwc: recv_control_msg error -71 req 02 val 2500
[   80.316609][   T57] pwc: recv_control_msg error -71 req 02 val 2400
[   80.323666][   T57] pwc: recv_control_msg error -71 req 02 val 2600
[   80.325312][   T29] audit: type=1326 audit(1741228302.092:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.1.40" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f40579 code=0x0
[   80.340510][   T57] pwc: recv_control_msg error -71 req 02 val 2900
[   80.372897][   T57] pwc: recv_control_msg error -71 req 02 val 2800
[   80.386118][   T57] pwc: recv_control_msg error -71 req 04 val 1100
[   80.403132][   T57] pwc: recv_control_msg error -71 req 04 val 1200
[   80.421049][   T57] pwc: Registered as video103.
[   80.428207][   T57] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[   80.472717][   T57] usb 6-1: USB disconnect, device number 4
[   80.546454][ T6162] syzkaller0: tun_chr_ioctl cmd 1074025677
[   80.558290][ T6162] syzkaller0: linktype set to 805
[   80.617799][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   80.775572][ T5899] usb 3-1: Using ep0 maxpacket: 16
[   80.776421][  T908] usb 5-1: USB disconnect, device number 6
[   80.782867][ T5899] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   80.819222][ T5899] usb 3-1: config 0 has no interface number 0
[   80.832461][ T5899] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   80.843094][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.853840][ T5899] usb 3-1: Product: syz
[   80.859527][ T5899] usb 3-1: Manufacturer: syz
[   80.864579][ T5899] usb 3-1: SerialNumber: syz
[   80.871803][ T5899] usb 3-1: config 0 descriptor??
[   80.880404][ T5899] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   81.126614][  T908] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   81.317605][   T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   81.361388][  T908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.394691][  T908] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   81.406764][  T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.425720][  T908] usb 5-1: config 0 descriptor??
[   81.438629][  T908] pwc: Askey VC010 type 2 USB webcam detected.
[   81.505679][   T57] usb 6-1: Using ep0 maxpacket: 8
[   81.526918][   T57] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[   81.534951][   T57] usb 6-1: config 6 has no interface number 0
[   81.560895][   T57] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   81.580234][   T57] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.596184][   T57] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   81.635549][   T57] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   81.799245][  T908] pwc: send_video_command error -71
[   81.804490][  T908] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   81.812358][   T57] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   81.837538][   T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.846056][  T908] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[   81.857737][   T57] usb 6-1: Product: syz
[   81.865592][  T908] usb 5-1: USB disconnect, device number 7
[   81.882500][   T57] usb 6-1: Manufacturer: syz
[   81.906162][    T8] cfg80211: failed to load regulatory.db
[   81.915256][   T57] usb 6-1: SerialNumber: syz
[   81.945009][   T57] hso 6-1:6.2: Failed to find BULK IN ep
[   81.955688][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   82.038178][ T6159] capability: warning: `syz.2.41' uses deprecated v2 capabilities in a way that may be insecure
[   82.322694][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.369728][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   82.380303][   T57] usb 6-1: USB disconnect, device number 5
[   82.381950][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.433129][ T5888] usb 4-1: config 0 descriptor??
[   82.456188][ T5843] Bluetooth: hci0: command 0x0405 tx timeout
[   82.456792][ T5888] pwc: Askey VC010 type 2 USB webcam detected.
[   82.505681][  T908] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   82.663603][ T5888] pwc: send_video_command error -71
[   82.675407][ T5888] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   82.683661][ T5888] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[   82.698554][  T908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.710729][ T5888] usb 4-1: USB disconnect, device number 7
[   82.716763][  T908] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   82.729352][  T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.739421][  T908] usb 5-1: config 0 descriptor??
[   82.748623][  T908] pwc: Askey VC010 type 2 USB webcam detected.
[   82.756714][ T5899] gspca_spca1528: reg_w err -110
[   82.761889][ T5899] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[   82.895553][   T57] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   83.027955][ T5899] usb 3-1: USB disconnect, device number 8
[   83.055576][   T57] usb 2-1: Using ep0 maxpacket: 32
[   83.078676][   T57] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   83.091973][   T57] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   83.103082][   T57] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   83.129758][   T57] usb 2-1: config 1 has no interface number 0
[   83.150322][   T57] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.152110][  T908] pwc: recv_control_msg error -32 req 02 val 2b00
[   83.163200][   T57] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   83.181873][  T908] pwc: recv_control_msg error -32 req 02 val 2700
[   83.188680][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   83.194950][   T57] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   83.196994][  T908] pwc: recv_control_msg error -32 req 02 val 2c00
[   83.210726][   T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.233978][  T908] pwc: recv_control_msg error -32 req 04 val 1000
[   83.243177][  T908] pwc: recv_control_msg error -32 req 04 val 1300
[   83.254126][   T57] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[   83.285942][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   83.293356][ T6200] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55013 - 0
[   83.302596][ T6200] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55013 - 0
[   83.311622][ T6200] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55013 - 0
[   83.320847][ T6200] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55013 - 0
[   83.330108][ T6200] geneve2: entered promiscuous mode
[   83.378680][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.389155][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   83.398823][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.409258][ T5888] usb 4-1: config 0 descriptor??
[   83.418457][ T5888] pwc: Askey VC010 type 2 USB webcam detected.
[   83.455841][ T5931] usb 6-1: Using ep0 maxpacket: 16
[   83.467346][  T908] pwc: recv_control_msg error -32 req 02 val 2000
[   83.475573][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.492984][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.503797][  T908] pwc: recv_control_msg error -32 req 02 val 2100
[   83.519509][ T5931] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   83.532616][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.544092][ T5931] usb 6-1: config 0 descriptor??
[   83.585590][ T5899] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[   83.618927][   T57] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[   83.715675][ T5899] usb 3-1: device descriptor read/64, error -71
[   83.732722][  T908] pwc: recv_control_msg error -71 req 02 val 2500
[   83.745936][  T908] pwc: recv_control_msg error -71 req 02 val 2400
[   83.759215][  T908] pwc: recv_control_msg error -71 req 02 val 2600
[   83.772171][  T908] pwc: recv_control_msg error -71 req 02 val 2900
[   83.779836][  T908] pwc: recv_control_msg error -71 req 02 val 2800
[   83.788293][  T908] pwc: recv_control_msg error -71 req 04 val 1100
[   83.796984][  T908] pwc: recv_control_msg error -71 req 04 val 1200
[   83.804461][  T908] pwc: Registered as video103.
[   83.811495][  T908] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[   83.823644][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.834594][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00
[   83.849596][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.867716][  T908] usb 5-1: USB disconnect, device number 8
[   83.893795][ T5888] pwc: recv_control_msg error -32 req 02 val 2700
[   83.915036][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00
[   83.934009][ T5888] pwc: recv_control_msg error -32 req 04 val 1000
[   83.960588][ T5931] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0
[   83.975642][ T5888] pwc: recv_control_msg error -32 req 04 val 1300
[   83.976530][ T5899] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[   84.048756][ T5931] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found
[   84.060415][ T5931] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found
[   84.155694][ T5899] usb 3-1: device descriptor read/64, error -71
[   84.169378][   T57] usb 6-1: USB disconnect, device number 6
[   84.196415][ T5888] pwc: recv_control_msg error -32 req 02 val 2000
[   84.203452][ T5888] pwc: recv_control_msg error -32 req 02 val 2100
[   84.286177][ T5899] usb usb3-port1: attempt power cycle
[   84.318363][ T5931] usb 2-1: USB disconnect, device number 6
[   84.327466][ T5931] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[   84.418888][ T5888] pwc: recv_control_msg error -71 req 02 val 2500
[   84.425756][ T5888] pwc: recv_control_msg error -71 req 02 val 2400
[   84.432487][ T5888] pwc: recv_control_msg error -71 req 02 val 2600
[   84.439653][ T5888] pwc: recv_control_msg error -71 req 02 val 2900
[   84.448401][ T5888] pwc: recv_control_msg error -71 req 02 val 2800
[   84.455270][ T5888] pwc: recv_control_msg error -71 req 04 val 1100
[   84.471055][ T5888] pwc: recv_control_msg error -71 req 04 val 1200
[   84.483829][ T5888] pwc: Registered as video103.
[   84.494696][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[   84.516279][ T5888] usb 4-1: USB disconnect, device number 8
[   84.625690][ T5899] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[   84.646865][ T5899] usb 3-1: device descriptor read/8, error -71
[   84.780764][   T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   84.885778][ T5899] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[   84.902529][ T6212] bond0: (slave macvlan2): Opening slave failed
[   84.927401][ T5899] usb 3-1: device descriptor read/8, error -71
[   84.947837][   T57] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   84.957478][   T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.978599][   T57] usb 5-1: config 0 descriptor??
[   84.997652][   T57] gspca_main: cpia1-2.14.0 probing 0813:0001
[   85.030432][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   85.030961][ T5885] IPVS: starting estimator thread 0...
[   85.047266][ T5899] usb usb3-port1: unable to enumerate USB device
[   85.155775][ T6217] IPVS: using max 24 ests per chain, 57600 per kthread
[   85.215583][ T5888] usb 6-1: Using ep0 maxpacket: 8
[   85.222426][ T5888] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[   85.234645][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[   85.243790][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.251857][ T5888] usb 6-1: Product: syz
[   85.256445][ T5888] usb 6-1: Manufacturer: syz
[   85.261064][ T5888] usb 6-1: SerialNumber: syz
[   85.269132][ T5888] usb 6-1: config 0 descriptor??
[   85.279941][ T5888] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[   85.376336][ T5931] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   85.392577][   T57] gspca_cpia1: usb_control_msg 03, error -32
[   85.445661][  T908] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   85.525682][ T5931] usb 4-1: Using ep0 maxpacket: 16
[   85.533678][ T5931] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.547381][ T5931] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.557880][ T5931] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[   85.568233][ T5931] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   85.584302][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0
[   85.593886][ T5931] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   85.603643][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.615269][  T908] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   85.633143][ T5931] usb 4-1: config 0 descriptor??
[   85.639726][  T908] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.649924][  T908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.665802][  T908] usb 2-1: config 0 descriptor??
[   85.679220][  T908] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   85.780923][   T57] gspca_cpia1: usb_control_msg 03, error -71
[   85.787458][   T57] gspca_cpia1: usb_control_msg 01, error -71
[   85.793551][   T57] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[   85.814198][   T57] usb 5-1: USB disconnect, device number 9
[   85.866737][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.875840][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.309436][ T5931] usbhid 4-1:0.0: can't add hid device: -71
[   86.327367][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   86.356721][ T5931] usb 4-1: USB disconnect, device number 9
[   87.215743][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   87.295684][   T57] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   87.353185][ T5888] gspca_zc3xx: reg_r err -32
[   87.401459][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.416023][ T5885] usb 4-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[   87.426946][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.437222][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10
[   87.454553][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50597, setting to 1024
[   87.465947][   T57] usb 3-1: Using ep0 maxpacket: 8
[   87.482023][   T57] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   87.494795][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   87.511413][   T57] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[   87.522138][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   87.530377][ T5885] usb 4-1: Product: syz
[   87.534668][   T57] usb 3-1: config 179 has no interface number 0
[   87.540990][ T5885] usb 4-1: Manufacturer: syz
[   87.545785][   T57] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   87.568493][ T6266] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   87.584237][   T57] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   87.594573][ T5885] cdc_wdm 4-1:1.0: skipping garbage
[   87.605499][ T5885] cdc_wdm 4-1:1.0: skipping garbage
[   87.613691][   T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.617357][ T5931] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   87.622406][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   87.622433][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol
[   87.785642][ T5931] usb 5-1: Using ep0 maxpacket: 32
[   87.793711][ T5931] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[   87.802745][ T5931] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   87.811633][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[   87.821621][ T5931] usb 5-1: config 1 has no interface number 0
[   87.831110][ T5931] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   87.842443][ T5931] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   87.855856][ T5931] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   87.864941][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.866080][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.879603][ T5931] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[   87.898376][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.938971][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   87.945668][ T5888] gspca_zc3xx: Unknown sensor - set to TAS5130C
[   87.945722][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   87.959138][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   87.960952][ T5888] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32
[   87.965742][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   87.965940][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   87.987189][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   87.994439][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.001061][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.007447][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.014058][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.020318][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.026933][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.034587][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.041210][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.047624][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.054239][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.060525][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.067154][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.073452][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[   88.080065][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[   88.179624][ T5931] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[   88.258210][ T5885] usb 2-1: USB disconnect, device number 7
[   88.292476][ T5931] usb 4-1: USB disconnect, device number 10
[   88.392711][ T5932] usb 3-1: USB disconnect, device number 13
[   88.683302][ T5931] usb 5-1: USB disconnect, device number 10
[   88.692084][ T5931] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[   88.921819][ T6307] netlink: 168 bytes leftover after parsing attributes in process `syz.3.70'.
[   89.245715][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   89.324275][ T5888] usb 6-1: USB disconnect, device number 7
[   89.415923][   T57] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   89.449625][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.470428][ T5885] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   89.482989][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   89.507034][ T5885] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[   89.523659][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.544691][ T5885] usb 4-1: Product: syz
[   89.565602][ T5885] usb 4-1: Manufacturer: syz
[   89.577651][ T5885] usb 4-1: SerialNumber: syz
[   89.585026][ T5885] usb 4-1: config 0 descriptor??
[   89.595705][   T57] usb 5-1: Using ep0 maxpacket: 16
[   89.603373][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   89.615634][ T5899] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[   89.633677][   T57] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   89.657375][   T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   89.681380][   T57] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   89.705647][   T57] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[   89.718495][   T57] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[   89.730820][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   89.740184][   T57] usb 5-1: Product: syz
[   89.744850][   T57] usb 5-1: Manufacturer: syz
[   89.753233][   T57] usb 5-1: SerialNumber: syz
[   89.768948][   T57] usb 5-1: config 0 descriptor??
[   89.786559][   T57] usb 5-1: NFC: intf ffff888021355000 id ffffffff8f525280
[   89.796345][ T5888] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   89.838923][ T5899] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   89.880631][   T57] nfcmrvl 5-1:0.0: NFC: registered with nci successfully
[   89.888282][ T5899] usb 3-1: config 0 has no interface number 0
[   89.894427][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   89.940633][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   89.961736][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   89.976550][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   89.976615][ T5888] usb 6-1: Using ep0 maxpacket: 8
[   90.004531][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[   90.042361][ T6307] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   90.052048][ T5888] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[   90.095100][ T5888] usb 6-1: Product: syz
[   90.108999][ T5888] usb 6-1: Manufacturer: syz
[   90.113657][ T5888] usb 6-1: SerialNumber: syz
[   90.123504][ T6307] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   90.131752][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   90.161386][ T5888] usb 6-1: config 0 descriptor??
[   90.183066][ T5888] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[   90.203956][  T908] usb 5-1: USB disconnect, device number 11
[   90.226853][  T908] usb 5-1: NFC: intf ffff888021355000
[   90.264687][ T6307] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   90.316306][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   90.355573][ T6307] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   90.380927][ T5932] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   90.412367][ T5888] gspca_zc3xx: reg_w_i err -71
[   90.425619][ T5899] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   90.435408][ T5888] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[   90.436623][ T5899] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   90.446042][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.458191][ T5899] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   90.475493][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.486775][ T6307] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   90.507170][ T5888] usb 6-1: USB disconnect, device number 8
[   90.525337][ T6307] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   90.534161][ T5899] usb 3-1: config 0 descriptor??
[   90.546273][ T5932] usb 2-1: config 0 descriptor??
[   90.556668][ T5932] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   90.579267][ T6307] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   90.588670][ T6307] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   90.593640][ T6325] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.610479][ T6307] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.641814][ T6307] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   90.641976][ T6325] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   90.679462][ T5899] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   91.027723][ T6368] FAULT_INJECTION: forcing a failure.
[   91.027723][ T6368] name failslab, interval 1, probability 0, space 0, times 1
[   91.087401][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.4.79 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[   91.087426][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   91.087436][ T6368] Call Trace:
[   91.087442][ T6368]  <TASK>
[   91.087449][ T6368]  dump_stack_lvl+0x241/0x360
[   91.087475][ T6368]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.087492][ T6368]  ? __pfx__printk+0x10/0x10
[   91.087510][ T6368]  ? fs_reclaim_acquire+0x93/0x130
[   91.087528][ T6368]  ? __pfx___might_resched+0x10/0x10
[   91.087552][ T6368]  should_fail_ex+0x40a/0x550
[   91.087579][ T6368]  should_failslab+0xac/0x100
[   91.087601][ T6368]  __kmalloc_noprof+0xdd/0x4c0
[   91.087620][ T6368]  ? tomoyo_encode+0x26f/0x540
[   91.087639][ T6368]  tomoyo_encode+0x26f/0x540
[   91.087660][ T6368]  tomoyo_realpath_from_path+0x59e/0x5e0
[   91.087686][ T6368]  tomoyo_check_open_permission+0x258/0x4f0
[   91.087710][ T6368]  ? tomoyo_check_open_permission+0x207/0x4f0
[   91.087731][ T6368]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[   91.087785][ T6368]  ? do_raw_spin_unlock+0x13c/0x8b0
[   91.087804][ T6368]  ? tomoyo_file_open+0x165/0x220
[   91.087826][ T6368]  security_file_open+0xac/0x250
[   91.087846][ T6368]  do_dentry_open+0x320/0x1960
[   91.087872][ T6368]  ? vfs_open+0x31/0x370
[   91.087895][ T6368]  vfs_open+0x3b/0x370
[   91.087925][ T6368]  path_openat+0x2c81/0x3590
[   91.087967][ T6368]  ? __pfx_path_openat+0x10/0x10
[   91.087999][ T6368]  do_filp_open+0x27f/0x4e0
[   91.088017][ T6368]  ? __pfx_do_filp_open+0x10/0x10
[   91.088032][ T6368]  ? do_raw_spin_lock+0x14f/0x370
[   91.088084][ T6368]  do_sys_openat2+0x13e/0x1d0
[   91.088106][ T6368]  ? __pfx_do_sys_openat2+0x10/0x10
[   91.088125][ T6368]  ? __fget_files+0x2a/0x410
[   91.088148][ T6368]  ? __fget_files+0x2a/0x410
[   91.088174][ T6368]  __ia32_compat_sys_openat+0x23f/0x290
[   91.088198][ T6368]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   91.088226][ T6368]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[   91.088248][ T6368]  ? lockdep_hardirqs_on+0x99/0x150
[   91.088269][ T6368]  __do_fast_syscall_32+0xb4/0x110
[   91.088291][ T6368]  ? exc_page_fault+0x590/0x8b0
[   91.088314][ T6368]  do_fast_syscall_32+0x34/0x80
[   91.088335][ T6368]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   91.088364][ T6368] RIP: 0023:0xf7fe2579
[   91.088382][ T6368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   91.088396][ T6368] RSP: 002b:00000000f5106100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[   91.088414][ T6368] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5106150
[   91.088425][ T6368] RDX: 0000000000002042 RSI: 0000000000000000 RDI: 00000000f746cff4
[   91.088435][ T6368] RBP: 0000000000002042 R08: 0000000000000000 R09: 0000000000000000
[   91.088444][ T6368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   91.088454][ T6368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   91.088478][ T6368]  </TASK>
[   91.088495][ T6368] ERROR: Out of memory at tomoyo_realpath_from_path.
[   91.264163][ T5899] usb 3-1: USB disconnect, device number 14
[   91.427377][ T5899] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[   91.585646][ T6383] netlink: 'syz.4.81': attribute type 10 has an invalid length.
[   91.605042][ T6383] veth0_vlan: entered allmulticast mode
[   91.634050][ T6383] veth0_vlan: left promiscuous mode
[   91.652414][ T6383] veth0_vlan: entered promiscuous mode
[   91.672724][ T6383] team0: Device veth0_vlan failed to register rx_handler
[   91.717075][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.82'.
[   91.883921][ T5885] usb 4-1: Found UVC 34.00 device syz (8086:0b5b)
[   91.922430][ T5885] usb 4-1: No valid video chain found.
[   91.938828][ T5885] usb 4-1: USB disconnect, device number 11
[   92.034153][ T6405] netlink: 'syz.2.85': attribute type 21 has an invalid length.
[   92.042074][ T6405] netlink: 128 bytes leftover after parsing attributes in process `syz.2.85'.
[   92.053692][ T6405] netlink: 'syz.2.85': attribute type 5 has an invalid length.
[   92.064644][ T6405] netlink: 3 bytes leftover after parsing attributes in process `syz.2.85'.
[   92.441765][ T6421] ebtables: wrong size: *len 264, entries_size 144, replsz 144
[   92.585687][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   92.745515][ T5932] usb 6-1: Using ep0 maxpacket: 8
[   92.752093][ T5932] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[   92.762509][ T5932] usb 6-1: config 6 has no interface number 0
[   92.768716][ T5932] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   92.782293][ T5932] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.801949][    T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[   92.810033][ T5932] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.821234][ T5932] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   92.834022][ T5932] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   92.843925][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.852042][ T5932] usb 6-1: Product: syz
[   92.856968][ T5932] usb 6-1: Manufacturer: syz
[   92.861580][ T5932] usb 6-1: SerialNumber: syz
[   92.882722][ T5889] usb 2-1: USB disconnect, device number 8
[   92.908361][ T5932] hso 6-1:6.2: Failed to find BULK IN ep
[   92.979127][    T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[   92.988375][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.997192][    T8] usb 3-1: Product: syz
[   93.001364][    T8] usb 3-1: Manufacturer: syz
[   93.006369][    T8] usb 3-1: SerialNumber: syz
[   93.013470][    T8] usb 3-1: config 0 descriptor??
[   93.124492][ T5885] usb 6-1: USB disconnect, device number 9
[   93.255634][ T5889] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   93.409726][ T5889] usb 2-1: Using ep0 maxpacket: 16
[   93.429595][ T5889] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   93.450743][    T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   93.466929][ T5889] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[   93.474169][ T5889] usb 2-1: config 0 has no interface number 0
[   93.485592][    T8] asix 3-1:0.0: probe with driver asix failed with error -71
[   93.516032][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   93.525559][    T8] usb 3-1: USB disconnect, device number 15
[   93.543596][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.569131][ T5889] usb 2-1: Product: syz
[   93.574335][ T5889] usb 2-1: Manufacturer: syz
[   93.589894][ T5889] usb 2-1: SerialNumber: syz
[   93.607802][ T5889] usb 2-1: config 0 descriptor??
[   93.622410][ T5889] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[   93.631308][ T5889] usb 2-1: No valid video chain found.
[   94.159052][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'.
[   94.435575][ T5885] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   94.615594][ T5885] usb 6-1: Using ep0 maxpacket: 32
[   94.622954][ T5885] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[   94.650652][ T5885] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   94.663892][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[   94.674538][ T5885] usb 6-1: config 1 has no interface number 0
[   94.681489][ T5885] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.692745][ T5885] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   94.708939][ T5885] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   94.718580][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.736646][ T5885] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[   95.036304][ T5885] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[   95.619152][ T5885] usb 6-1: USB disconnect, device number 10
[   95.639277][ T5885] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[   95.655905][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[   95.832726][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   95.849845][    T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   95.859057][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.873575][    T8] usb 3-1: config 0 descriptor??
[   95.883352][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   95.999596][ T5885] usb 2-1: USB disconnect, device number 9
[   96.265101][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.102'.
[   96.319059][ T5899] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   96.515678][ T5899] usb 6-1: Using ep0 maxpacket: 32
[   96.530243][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.541410][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.560336][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   96.571994][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.590013][ T5899] usb 6-1: config 0 descriptor??
[   96.597245][ T5899] hub 6-1:0.0: USB hub found
[   96.732657][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'.
[   96.800279][ T5899] hub 6-1:0.0: 1 port detected
[   97.415851][ T5899] hub 6-1:0.0: activate --> -90
[   97.622196][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.101'.
[   97.791160][ T5899] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[   97.800851][   T25] usb 6-1: USB disconnect, device number 11
[   98.185544][ T5885] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   98.335572][ T5885] usb 2-1: Using ep0 maxpacket: 8
[   98.342737][ T5885] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[   98.352436][ T5885] usb 2-1: config 6 has no interface number 0
[   98.360398][ T5885] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   98.370440][ T5885] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   98.384854][ T5885] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   98.400239][ T5885] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   98.454754][ T5899] usb 3-1: USB disconnect, device number 16
[   98.461214][ T5885] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   98.486148][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.494771][ T5885] usb 2-1: Product: syz
[   98.515998][ T5885] usb 2-1: Manufacturer: syz
[   98.521484][ T5885] usb 2-1: SerialNumber: syz
[   98.537747][ T5885] hso 2-1:6.2: Failed to find BULK IN ep
[   98.555986][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'.
[   98.629568][ T6606] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   98.638271][ T6606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.117'.
[   98.685583][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   98.746135][    T8] usb 2-1: USB disconnect, device number 10
[   98.835562][ T5889] usb 6-1: Using ep0 maxpacket: 16
[   98.842715][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.854037][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.870740][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   98.883800][ T5889] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   98.893236][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.902651][ T5889] usb 6-1: config 0 descriptor??
[   99.315089][ T5889] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   99.326676][ T5889] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   99.336786][ T5889] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[   99.347961][ T5889] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0
[   99.415727][    T8] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[   99.521937][ T5889] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[   99.535669][ T5889] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[   99.549484][ T5889] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -32
[   99.560872][ T6623] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.570118][ T6623] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.578901][ T6623] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.587669][ T6623] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.599036][    T8] usb 3-1: config 1 interface 0 has no altsetting 0
[   99.603581][ T6623] Zero length message leads to an empty skb
[   99.614666][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   99.633821][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.641994][    T8] usb 3-1: Product: syz
[   99.653226][    T8] usb 3-1: Manufacturer: syz
[   99.657982][    T8] usb 3-1: SerialNumber: syz
[   99.956422][ T5889] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  100.074317][    T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  100.105581][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  100.115090][ T5889] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  100.123585][ T5889] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  100.136115][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  100.154372][ T5889] usb 2-1: config 1 has no interface number 0
[  100.161165][ T5889] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  100.176786][ T5889] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  100.195252][ T5889] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  100.204382][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.223900][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  100.492872][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  100.991658][ T5889] usb 2-1: USB disconnect, device number 11
[  100.999169][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  101.463231][ T5885] usb 6-1: USB disconnect, device number 12
[  101.539543][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.127'.
[  101.611507][ T6640] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET)
[  101.855555][ T5888] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  101.965556][ T5889] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  102.006497][ T5888] usb 2-1: not running at top speed; connect to a high speed hub
[  102.015044][ T5888] usb 2-1: config 4 has an invalid interface number: 27 but max is 0
[  102.026737][ T5888] usb 2-1: config 4 has no interface number 0
[  102.033345][ T5888] usb 2-1: config 4 interface 27 has no altsetting 0
[  102.042694][ T5888] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  102.052834][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.060940][ T5888] usb 2-1: Product: syz
[  102.065131][ T5888] usb 2-1: Manufacturer: syz
[  102.069833][ T5888] usb 2-1: SerialNumber: syz
[  102.115546][ T5889] usb 6-1: Using ep0 maxpacket: 8
[  102.122316][ T5889] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  102.130772][ T5889] usb 6-1: config 6 has no interface number 0
[  102.137261][ T5889] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  102.147089][ T5889] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  102.158819][ T5889] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.169760][ T5889] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.181786][ T5889] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  102.190940][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.199178][ T5889] usb 6-1: Product: syz
[  102.203414][ T5889] usb 6-1: Manufacturer: syz
[  102.208094][ T5889] usb 6-1: SerialNumber: syz
[  102.220090][ T5889] hso 6-1:6.2: Failed to find BULK IN ep
[  102.287340][ T5888] usb 2-1: USB disconnect, device number 12
[  102.422985][ T5899] usb 6-1: USB disconnect, device number 13
[  102.974997][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'.
[  103.011376][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'.
[  103.024321][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'.
[  103.075170][   T29] audit: type=1326 audit(1741228324.842:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0
[  103.127954][ T6652] netlink: 172 bytes leftover after parsing attributes in process `syz.5.133'.
[  103.137061][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.133'.
[  103.151829][   T29] audit: type=1326 audit(1741228324.922:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  103.162354][ T6654] FAULT_INJECTION: forcing a failure.
[  103.162354][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.176594][   T29] audit: type=1326 audit(1741228324.932:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  103.194366][ T6654] CPU: 0 UID: 0 PID: 6654 Comm: syz.1.134 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  103.194390][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.194400][ T6654] Call Trace:
[  103.194406][ T6654]  <TASK>
[  103.194412][ T6654]  dump_stack_lvl+0x241/0x360
[  103.194437][ T6654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.194453][ T6654]  ? __pfx__printk+0x10/0x10
[  103.194471][ T6654]  ? __pfx_lock_release+0x10/0x10
[  103.194491][ T6654]  ? register_lock_class+0x102/0x980
[  103.194512][ T6654]  ? register_lock_class+0x102/0x980
[  103.194537][ T6654]  should_fail_ex+0x40a/0x550
[  103.194562][ T6654]  _copy_from_user+0x2d/0xb0
[  103.194582][ T6654]  ipv6_flowlabel_opt+0x113/0x29a0
[  103.194598][ T6654]  ? __lock_acquire+0x1397/0x2100
[  103.194630][ T6654]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  103.194649][ T6654]  ? mark_lock+0x9a/0x360
[  103.194667][ T6654]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  103.194691][ T6654]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  103.194716][ T6654]  ? __local_bh_enable_ip+0x168/0x200
[  103.194733][ T6654]  ? lockdep_hardirqs_on+0x99/0x150
[  103.194754][ T6654]  ? __local_bh_enable_ip+0x168/0x200
[  103.194772][ T6654]  ? do_ipv6_setsockopt+0xbb9/0x35b0
[  103.194800][ T6654]  do_ipv6_setsockopt+0xe41/0x35b0
[  103.194822][ T6654]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  103.194844][ T6654]  ? aa_label_sk_perm+0x4f3/0x6c0
[  103.194873][ T6654]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  103.194908][ T6654]  ? __pfx___might_resched+0x10/0x10
[  103.194930][ T6654]  ? __lock_acquire+0x1397/0x2100
[  103.194963][ T6654]  ipv6_setsockopt+0x5d/0x170
[  103.194982][ T6654]  rawv6_setsockopt+0x2ac/0x690
[  103.195001][ T6654]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  103.195017][ T6654]  ? __pfx_lock_acquire+0x10/0x10
[  103.195036][ T6654]  ? aa_sock_opt_perm+0x79/0x120
[  103.195058][ T6654]  ? sock_common_setsockopt+0x37/0xc0
[  103.195080][ T6654]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  103.195098][ T6654]  do_sock_setsockopt+0x3af/0x720
[  103.195125][ T6654]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  103.195147][ T6654]  ? __fget_files+0x2a/0x410
[  103.195169][ T6654]  ? __fget_files+0x395/0x410
[  103.195194][ T6654]  ? __fget_files+0x2a/0x410
[  103.195221][ T6654]  __ia32_sys_setsockopt+0x1f2/0x280
[  103.195249][ T6654]  __do_fast_syscall_32+0xb4/0x110
[  103.195270][ T6654]  ? exc_page_fault+0x590/0x8b0
[  103.195293][ T6654]  do_fast_syscall_32+0x34/0x80
[  103.195313][ T6654]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  103.195336][ T6654] RIP: 0023:0xf7f40579
[  103.195350][ T6654] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  103.195362][ T6654] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  103.195379][ T6654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[  103.195389][ T6654] RDX: 0000000000000020 RSI: 00000000800000c0 RDI: 0000000000000020
[  103.195399][ T6654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  103.195408][ T6654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  103.195418][ T6654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  103.195440][ T6654]  </TASK>
[  103.524167][   T29] audit: type=1326 audit(1741228324.952:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf746d579 code=0x7ffc0000
[  103.551638][   T29] audit: type=1326 audit(1741228324.952:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[  103.573675][ T5889] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  103.600842][   T29] audit: type=1326 audit(1741228324.952:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.5.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf746d579 code=0x7ffc0000
[  103.737688][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.749265][ T5889] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  103.759582][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.777597][ T5889] usb 2-1: config 0 descriptor??
[  103.790499][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  103.798307][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'.
[  103.992455][ T5889] pwc: send_video_command error -71
[  104.015383][ T5889] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  104.029702][ T5889] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  104.058253][ T5889] usb 2-1: USB disconnect, device number 13
[  104.495562][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  104.503255][ T5889] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  104.655646][    T9] usb 6-1: Using ep0 maxpacket: 8
[  104.662282][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.672805][ T5889] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  104.682129][    T9] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  104.690202][    T9] usb 6-1: config 6 has no interface number 0
[  104.696387][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.704957][    T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  104.715807][ T5889] usb 2-1: config 0 descriptor??
[  104.720962][    T9] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.732556][    T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.745283][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  104.751699][    T9] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  104.765073][    T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  104.774223][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.782352][    T9] usb 6-1: Product: syz
[  104.786591][    T9] usb 6-1: Manufacturer: syz
[  104.791231][    T9] usb 6-1: SerialNumber: syz
[  104.800675][    T9] hso 6-1:6.2: Failed to find BULK IN ep
[  105.004693][    T9] usb 6-1: USB disconnect, device number 14
[  105.155863][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00
[  105.156567][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.171339][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.184034][ T5889] pwc: recv_control_msg error -32 req 02 val 2700
[  105.195039][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00
[  105.195952][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.211952][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.224597][ T5889] pwc: recv_control_msg error -32 req 04 val 1000
[  105.232894][ T5889] pwc: recv_control_msg error -32 req 04 val 1300
[  105.241140][ T5889] pwc: recv_control_msg error -32 req 04 val 1400
[  105.249020][ T5889] pwc: recv_control_msg error -32 req 02 val 2000
[  105.464061][ T5889] pwc: recv_control_msg error -71 req 04 val 1500
[  105.470897][ T5889] pwc: recv_control_msg error -71 req 02 val 2500
[  105.477850][ T5889] pwc: recv_control_msg error -71 req 02 val 2400
[  105.484549][ T5889] pwc: recv_control_msg error -71 req 02 val 2600
[  105.492788][ T5889] pwc: recv_control_msg error -71 req 02 val 2900
[  105.499562][ T5889] pwc: recv_control_msg error -71 req 02 val 2800
[  105.506812][ T5889] pwc: recv_control_msg error -71 req 04 val 1100
[  105.513505][ T5889] pwc: recv_control_msg error -71 req 04 val 1200
[  105.522546][ T5889] pwc: Registered as video103.
[  105.529836][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  105.549022][ T5889] usb 2-1: USB disconnect, device number 14
[  105.865593][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  106.015546][    T9] usb 6-1: Using ep0 maxpacket: 8
[  106.024328][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  106.037156][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  106.053486][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.062112][    T9] usb 6-1: Product: syz
[  106.066472][    T9] usb 6-1: Manufacturer: syz
[  106.071093][    T9] usb 6-1: SerialNumber: syz
[  106.079059][    T9] usb 6-1: config 0 descriptor??
[  106.088087][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  106.295808][ T5889] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  106.445539][ T5889] usb 2-1: Using ep0 maxpacket: 8
[  106.451848][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  106.463315][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  106.472429][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.480551][ T5889] usb 2-1: Product: syz
[  106.484739][ T5889] usb 2-1: Manufacturer: syz
[  106.489419][ T5889] usb 2-1: SerialNumber: syz
[  106.496601][ T5889] usb 2-1: config 0 descriptor??
[  106.506333][ T5889] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  107.049487][ T5899] usb 3-1: USB disconnect, device number 17
[  107.067224][ T5899] usblp0: removed
[  107.242218][ T6690] vlan2: entered allmulticast mode
[  107.251406][ T6690] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  107.262803][ T6690] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  107.371945][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'.
[  107.820302][ T5885] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  107.975647][ T5885] usb 3-1: Using ep0 maxpacket: 32
[  107.986694][ T5885] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  107.994926][ T5885] usb 3-1: config 2 has no interface number 0
[  108.004836][ T5885] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  108.014107][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.022201][ T5885] usb 3-1: Product: syz
[  108.026409][ T5885] usb 3-1: Manufacturer: syz
[  108.031021][ T5885] usb 3-1: SerialNumber: syz
[  108.040732][ T5885] imon 3-1:2.157: unable to register, err -19
[  108.104719][    T9] gspca_zc3xx: reg_r err -32
[  108.239742][ T6700] FAULT_INJECTION: forcing a failure.
[  108.239742][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.253360][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.2.153 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  108.253385][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  108.253395][ T6700] Call Trace:
[  108.253401][ T6700]  <TASK>
[  108.253408][ T6700]  dump_stack_lvl+0x241/0x360
[  108.253432][ T6700]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.253449][ T6700]  ? __pfx__printk+0x10/0x10
[  108.253471][ T6700]  ? snprintf+0xda/0x120
[  108.253491][ T6700]  should_fail_ex+0x40a/0x550
[  108.253517][ T6700]  _copy_to_user+0x31/0xb0
[  108.253538][ T6700]  simple_read_from_buffer+0xca/0x150
[  108.253561][ T6700]  proc_fail_nth_read+0x1e9/0x250
[  108.253585][ T6700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  108.253609][ T6700]  ? rw_verify_area+0x243/0x630
[  108.253624][ T6700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  108.253647][ T6700]  vfs_read+0x1f8/0xb40
[  108.253664][ T6700]  ? fdget_pos+0x254/0x320
[  108.253684][ T6700]  ? __pfx___mutex_lock+0x10/0x10
[  108.253711][ T6700]  ? __pfx_vfs_read+0x10/0x10
[  108.253724][ T6700]  ? do_sys_openat2+0x17a/0x1d0
[  108.253748][ T6700]  ? __fget_files+0x2a/0x410
[  108.253771][ T6700]  ? __fget_files+0x395/0x410
[  108.253797][ T6700]  ? __fget_files+0x2a/0x410
[  108.253826][ T6700]  ksys_read+0x18f/0x2b0
[  108.253842][ T6700]  ? __pfx_ksys_read+0x10/0x10
[  108.253862][ T6700]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  108.253883][ T6700]  ? lockdep_hardirqs_on+0x99/0x150
[  108.253905][ T6700]  __do_fast_syscall_32+0xb4/0x110
[  108.253928][ T6700]  ? exc_page_fault+0x590/0x8b0
[  108.253951][ T6700]  do_fast_syscall_32+0x34/0x80
[  108.253971][ T6700]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  108.253994][ T6700] RIP: 0023:0xf7f03579
[  108.254007][ T6700] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  108.254019][ T6700] RSP: 002b:00000000f5026590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  108.254030][ T6700] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5026620
[  108.254037][ T6700] RDX: 000000000000000f RSI: 00000000f738cff4 RDI: 0000000000000000
[  108.254042][ T6700] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  108.254048][ T6700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  108.254053][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  108.254066][ T6700]  </TASK>
[  108.489350][    C0] vkms_vblank_simulate: vblank timer overrun
[  108.497725][ T5899] usb 3-1: USB disconnect, device number 18
[  108.695565][    T9] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  108.701914][    T9] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  108.741887][ T5889] gspca_zc3xx: reg_r err -32
[  108.845646][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  109.035661][ T5899] usb 3-1: Using ep0 maxpacket: 32
[  109.042152][ T5899] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  109.050486][ T5899] usb 3-1: config 2 has no interface number 0
[  109.060053][ T5899] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  109.069193][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.077256][ T5899] usb 3-1: Product: syz
[  109.081439][ T5899] usb 3-1: Manufacturer: syz
[  109.086138][ T5899] usb 3-1: SerialNumber: syz
[  109.094729][ T5899] imon 3-1:2.157: unable to register, err -19
[  109.298765][ T5888] usb 3-1: USB disconnect, device number 19
[  109.335905][ T5889] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  109.342237][ T5889] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  109.914877][ T5889] usb 6-1: USB disconnect, device number 15
[  110.085617][ T5885] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  110.235695][ T5885] usb 3-1: Using ep0 maxpacket: 16
[  110.248836][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  110.264385][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  110.265587][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  110.274786][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  110.292527][ T5885] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  110.313872][ T5885] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  110.324255][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  110.334051][ T5885] usb 3-1: Product: syz
[  110.338337][ T5885] usb 3-1: Manufacturer: syz
[  110.345007][ T5885] usb 3-1: SerialNumber: syz
[  110.352773][ T5885] usb 3-1: config 0 descriptor??
[  110.360972][ T5885] usb 3-1: NFC: intf ffff88807c251000 id ffffffff8f525280
[  110.437563][ T5889] usb 6-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  110.448033][ T5889] usb 6-1: too many endpoints for config 0 interface 0 altsetting 44: 235, using maximum allowed: 30
[  110.459029][ T5889] usb 6-1: config 0 interface 0 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 235
[  110.472266][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.480927][ T5889] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  110.493753][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.510050][ T5889] usb 6-1: config 0 descriptor??
[  110.521433][ T5899] usb 2-1: USB disconnect, device number 15
[  110.722120][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  110.729572][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  110.737801][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  110.745105][ T5889] usb 6-1: string descriptor 0 read error: -32
[  110.754485][ T5889] usb 6-1: USB disconnect, device number 16
[  111.164677][ T6740] FAULT_INJECTION: forcing a failure.
[  111.164677][ T6740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.186990][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.2.164 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  111.187015][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  111.187025][ T6740] Call Trace:
[  111.187031][ T6740]  <TASK>
[  111.187038][ T6740]  dump_stack_lvl+0x241/0x360
[  111.187062][ T6740]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.187079][ T6740]  ? __pfx__printk+0x10/0x10
[  111.187097][ T6740]  ? __pfx_lock_release+0x10/0x10
[  111.187126][ T6740]  should_fail_ex+0x40a/0x550
[  111.187153][ T6740]  _copy_from_user+0x2d/0xb0
[  111.187173][ T6740]  move_addr_to_kernel+0x82/0x150
[  111.187194][ T6740]  __sys_sendto+0x268/0x4c0
[  111.187221][ T6740]  ? __pfx___sys_sendto+0x10/0x10
[  111.187254][ T6740]  ? __fget_files+0x2a/0x410
[  111.187286][ T6740]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  111.187323][ T6740]  __ia32_sys_sendto+0xdd/0x100
[  111.187348][ T6740]  __do_fast_syscall_32+0xb4/0x110
[  111.187369][ T6740]  ? exc_page_fault+0x590/0x8b0
[  111.187393][ T6740]  do_fast_syscall_32+0x34/0x80
[  111.187413][ T6740]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  111.187436][ T6740] RIP: 0023:0xf7f03579
[  111.187450][ T6740] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  111.187465][ T6740] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  111.187483][ T6740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  111.187495][ T6740] RDX: 000000000000000e RSI: 0000000000000800 RDI: 0000000080000200
[  111.187505][ T6740] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  111.187515][ T6740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  111.187525][ T6740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  111.187548][ T6740]  </TASK>
[  111.436304][ T5899] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  111.587474][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0
[  111.596287][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  111.605676][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.613686][ T5899] usb 2-1: Product: syz
[  111.618093][ T5899] usb 2-1: Manufacturer: syz
[  111.622707][ T5899] usb 2-1: SerialNumber: syz
[  112.038551][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.049924][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.064649][ T5899] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  112.076944][ T5899] usb 2-1: USB disconnect, device number 16
[  112.083967][ T5899] usblp0: removed
[  112.327996][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.168'.
[  112.378981][ T6752] capability: warning: `syz.5.169' uses 32-bit capabilities (legacy support in use)
[  112.716359][   T57] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  112.871372][   T57] usb 2-1: config 1 interface 0 has no altsetting 0
[  112.879732][   T57] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  112.888952][   T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.896960][   T57] usb 2-1: Product: 氦
[  112.901104][   T57] usb 2-1: Manufacturer: 囄䴋Ꮖ픤咮抱ꙸꤻغ礿馶┞啠ச洠汁뮺纳ӡ⠇춨迥瀄፴㌖ꑝ㷙썶콲줳㼔諺ᮦ䑆卷듡ꄊ好늴줐඘뫛淳姕鞳亳朔ᢳ엂⪮눯ﴎ⻍磵叐ꟃ巏斱惂퐗狎≸괏潁掣筧檇淘ᑈ铽聎ይꚭ
[  112.927043][   T57] usb 2-1: SerialNumber: 䠊
[  113.140413][   T57] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  113.152833][   T57] usb 2-1: USB disconnect, device number 17
[  113.160257][   T57] usblp0: removed
[  113.775662][ T5899] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  113.784512][ T6767] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  113.937084][ T6771] FAULT_INJECTION: forcing a failure.
[  113.937084][ T6771] name failslab, interval 1, probability 0, space 0, times 0
[  113.950993][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.4.177 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  113.951018][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.951027][ T6771] Call Trace:
[  113.951033][ T6771]  <TASK>
[  113.951039][ T6771]  dump_stack_lvl+0x241/0x360
[  113.951064][ T6771]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.951080][ T6771]  ? __pfx__printk+0x10/0x10
[  113.951096][ T6771]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  113.951117][ T6771]  ? __pfx___might_resched+0x10/0x10
[  113.951148][ T6771]  should_fail_ex+0x40a/0x550
[  113.951174][ T6771]  should_failslab+0xac/0x100
[  113.951195][ T6771]  kmem_cache_alloc_node_noprof+0x77/0x380
[  113.951217][ T6771]  ? __alloc_skb+0x1c3/0x440
[  113.951242][ T6771]  __alloc_skb+0x1c3/0x440
[  113.951261][ T6771]  ? __lock_acquire+0x1397/0x2100
[  113.951285][ T6771]  ? __pfx___alloc_skb+0x10/0x10
[  113.951310][ T6771]  ? __lock_acquire+0x1397/0x2100
[  113.951333][ T6771]  alloc_skb_with_frags+0xc3/0x820
[  113.951365][ T6771]  sock_alloc_send_pskb+0x91a/0xa60
[  113.951396][ T6771]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  113.951426][ T6771]  ? __lock_acquire+0x1397/0x2100
[  113.951450][ T6771]  unix_dgram_sendmsg+0x5e8/0x1df0
[  113.951480][ T6771]  ? aa_sk_perm+0x96d/0xab0
[  113.951504][ T6771]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  113.951525][ T6771]  ? __import_iovec+0x3bf/0x830
[  113.951543][ T6771]  ? aa_sock_msg_perm+0x91/0x160
[  113.951569][ T6771]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  113.951583][ T6771]  __sock_sendmsg+0x221/0x270
[  113.951605][ T6771]  ____sys_sendmsg+0x53a/0x860
[  113.951627][ T6771]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.951647][ T6771]  ? __sys_sendmmsg+0x49b/0x720
[  113.951669][ T6771]  __sys_sendmmsg+0x46a/0x720
[  113.951693][ T6771]  ? __pfx___sys_sendmmsg+0x10/0x10
[  113.951717][ T6771]  ? __pfx_lock_acquire+0x10/0x10
[  113.951738][ T6771]  ? get_pid_task+0x23/0x1f0
[  113.951761][ T6771]  ? __pfx_lock_release+0x10/0x10
[  113.951781][ T6771]  ? kstrtouint_from_user+0x128/0x190
[  113.951821][ T6771]  ? __pfx_lock_release+0x10/0x10
[  113.951864][ T6771]  ? __mutex_unlock_slowpath+0x227/0x800
[  113.951894][ T6771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  113.951914][ T6771]  ? __fget_files+0x2a/0x410
[  113.951946][ T6771]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  113.951971][ T6771]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  113.952001][ T6771]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  113.952022][ T6771]  __do_fast_syscall_32+0xb4/0x110
[  113.952044][ T6771]  ? exc_page_fault+0x590/0x8b0
[  113.952067][ T6771]  do_fast_syscall_32+0x34/0x80
[  113.952088][ T6771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  113.952111][ T6771] RIP: 0023:0xf7fe2579
[  113.952125][ T6771] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  113.952139][ T6771] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  113.952158][ T6771] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002dc0
[  113.952170][ T6771] RDX: 00000000db7a66cb RSI: 0000000000000000 RDI: 0000000000000000
[  113.952180][ T6771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  113.952189][ T6771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  113.952199][ T6771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  113.952223][ T6771]  </TASK>
[  113.956421][ T5899] usb 6-1: Using ep0 maxpacket: 16
[  114.138049][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'.
[  114.143378][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  114.262065][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'.
[  114.268212][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  114.392721][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  114.409729][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  114.422850][ T5899] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  114.434449][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  114.445010][ T5899] usb 6-1: Product: syz
[  114.449277][ T5899] usb 6-1: Manufacturer: syz
[  114.454061][ T5899] usb 6-1: SerialNumber: syz
[  114.476473][ T5899] usb 6-1: config 0 descriptor??
[  114.484783][ T5899] usb 6-1: NFC: intf ffff88805c57c000 id ffffffff8f525280
[  114.695630][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  114.847402][ T5889] usb 2-1: config 0 has an invalid interface number: 246 but max is 0
[  114.855668][ T5889] usb 2-1: config 0 has no interface number 0
[  114.864196][ T5889] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  114.873371][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.881577][ T5889] usb 2-1: Product: syz
[  114.887336][ T5889] usb 2-1: Manufacturer: syz
[  114.891957][ T5889] usb 2-1: SerialNumber: syz
[  114.897792][ T5889] usb 2-1: config 0 descriptor??
[  114.903838][ T5889] peak_usb 2-1:0.246: probe with driver peak_usb failed with error 246
[  115.111279][ T6784] netlink: 'syz.1.181': attribute type 2 has an invalid length.
[  115.121562][ T6784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.139016][   T25] usb 2-1: USB disconnect, device number 18
[  115.373842][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.190'.
[  115.495869][ T6814] pimreg: entered allmulticast mode
[  115.965572][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  116.115628][    T9] usb 2-1: Using ep0 maxpacket: 16
[  116.122359][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.132264][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  116.142264][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  116.152009][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  116.164716][    T9] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  116.173811][    T9] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  116.182039][    T9] usb 2-1: Product: syz
[  116.186304][    T9] usb 2-1: Manufacturer: syz
[  116.190910][    T9] usb 2-1: SerialNumber: syz
[  116.197770][    T9] usb 2-1: config 0 descriptor??
[  116.204268][    T9] usb 2-1: NFC: intf ffff88805d145000 id ffffffff8f525280
[  117.428109][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.201'.
[  120.814523][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'.
[  133.108034][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.114461][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.541990][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.549094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  239.336086][   T30] INFO: task kworker/0:2:908 blocked for more than 143 seconds.
[  239.344054][   T30]       Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  239.352190][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  239.360984][   T30] task:kworker/0:2     state:D stack:20632 pid:908   tgid:908   ppid:2      task_flags:0x4288060 flags:0x00004000
[  239.379483][   T30] Workqueue: usb_hub_wq hub_event
[  239.384574][   T30] Call Trace:
[  239.388792][   T30]  <TASK>
[  239.391750][   T30]  __schedule+0x190e/0x4c90
[  239.396608][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  239.401659][   T30]  ? schedule+0x90/0x320
[  239.405974][   T30]  ? __pfx___schedule+0x10/0x10
[  239.410834][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.417534][   T30]  ? __pfx_lock_release+0x10/0x10
[  239.422579][   T30]  ? kick_pool+0x1bd/0x620
[  239.427037][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.432243][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  239.438334][   T30]  ? schedule+0x90/0x320
[  239.442600][   T30]  schedule+0x14b/0x320
[  239.446802][   T30]  schedule_preempt_disabled+0x13/0x30
[  239.452269][   T30]  __mutex_lock+0x817/0x1010
[  239.456923][   T30]  ? __mutex_lock+0x602/0x1010
[  239.461707][   T30]  ? rfkill_unregister+0xd0/0x230
[  239.466785][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  239.471824][   T30]  ? __pfx_device_del+0x10/0x10
[  239.477393][   T30]  rfkill_unregister+0xd0/0x230
[  239.482259][   T30]  nfc_unregister_device+0x96/0x2a0
[  239.487513][   T30]  nfcmrvl_nci_unregister_dev+0x45/0x140
[  239.493180][   T30]  nfcmrvl_disconnect+0xab/0xf0
[  239.498139][   T30]  usb_unbind_interface+0x25b/0x940
[  239.503362][   T30]  ? kernfs_find_ns+0x2bf/0x340
[  239.508739][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  239.514492][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[  239.520402][   T30]  device_release_driver_internal+0x503/0x7c0
[  239.526545][   T30]  bus_remove_device+0x34f/0x420
[  239.531492][   T30]  device_del+0x57a/0x9b0
[  239.536492][   T30]  ? kobject_put+0x272/0x480
[  239.541106][   T30]  ? __pfx_device_del+0x10/0x10
[  239.546045][   T30]  ? kobject_put+0x44d/0x480
[  239.550653][   T30]  usb_disable_device+0x3bf/0x850
[  239.555833][   T30]  usb_disconnect+0x340/0x950
[  239.560526][   T30]  hub_event+0x1ebc/0x5150
[  239.564938][   T30]  ? debug_object_deactivate+0x2d5/0x390
[  239.570632][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  239.576041][   T30]  ? __pfx_hub_event+0x10/0x10
[  239.580824][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  239.587189][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.593194][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.599639][   T30]  ? process_scheduled_works+0x9c6/0x18e0
[  239.605373][   T30]  process_scheduled_works+0xabe/0x18e0
[  239.611096][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.617213][   T30]  ? assign_work+0x364/0x3d0
[  239.621832][   T30]  worker_thread+0x870/0xd30
[  239.626500][   T30]  ? __kthread_parkme+0x169/0x1d0
[  239.631553][   T30]  ? __pfx_worker_thread+0x10/0x10
[  239.636838][   T30]  kthread+0x7a9/0x920
[  239.640924][   T30]  ? __pfx_kthread+0x10/0x10
[  239.645612][   T30]  ? __pfx_worker_thread+0x10/0x10
[  239.650734][   T30]  ? __pfx_kthread+0x10/0x10
[  239.655326][   T30]  ? __pfx_kthread+0x10/0x10
[  239.659998][   T30]  ? __pfx_kthread+0x10/0x10
[  239.664596][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.669869][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  239.675074][   T30]  ? __pfx_kthread+0x10/0x10
[  239.679794][   T30]  ret_from_fork+0x4b/0x80
[  239.684224][   T30]  ? __pfx_kthread+0x10/0x10
[  239.688943][   T30]  ret_from_fork_asm+0x1a/0x30
[  239.693734][   T30]  </TASK>
[  239.698659][   T30] INFO: task kworker/0:8:5931 blocked for more than 143 seconds.
[  239.706519][   T30]       Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  239.714153][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  239.722977][   T30] task:kworker/0:8     state:D stack:21648 pid:5931  tgid:5931  ppid:2      task_flags:0x4208060 flags:0x00004000
[  239.735039][   T30] Workqueue: events rfkill_global_led_trigger_worker
[  239.742259][   T30] Call Trace:
[  239.745856][   T30]  <TASK>
[  239.748851][   T30]  __schedule+0x190e/0x4c90
[  239.753380][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  239.758522][   T30]  ? schedule+0x90/0x320
[  239.762793][   T30]  ? __pfx___schedule+0x10/0x10
[  239.767714][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.773709][   T30]  ? __pfx_lock_release+0x10/0x10
[  239.778838][   T30]  ? kick_pool+0x1bd/0x620
[  239.783269][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.788504][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  239.793712][   T30]  ? schedule+0x90/0x320
[  239.798067][   T30]  schedule+0x14b/0x320
[  239.802235][   T30]  schedule_preempt_disabled+0x13/0x30
[  239.807746][   T30]  __mutex_lock+0x817/0x1010
[  239.812349][   T30]  ? __mutex_lock+0x602/0x1010
[  239.817263][   T30]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  239.823521][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  239.828603][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  239.834597][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.841061][   T30]  ? process_scheduled_works+0x9c6/0x18e0
[  239.846866][   T30]  rfkill_global_led_trigger_worker+0x27/0xd0
[  239.852946][   T30]  ? process_scheduled_works+0x9c6/0x18e0
[  239.858740][   T30]  process_scheduled_works+0xabe/0x18e0
[  239.864321][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.870369][   T30]  ? assign_work+0x364/0x3d0
[  239.874977][   T30]  worker_thread+0x870/0xd30
[  239.879709][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  239.885709][   T30]  ? __kthread_parkme+0x169/0x1d0
[  239.890761][   T30]  ? __pfx_worker_thread+0x10/0x10
[  239.896082][   T30]  kthread+0x7a9/0x920
[  239.900191][   T30]  ? __pfx_kthread+0x10/0x10
[  239.904794][   T30]  ? __pfx_worker_thread+0x10/0x10
[  239.909941][   T30]  ? __pfx_kthread+0x10/0x10
[  239.914542][   T30]  ? __pfx_kthread+0x10/0x10
[  239.919242][   T30]  ? __pfx_kthread+0x10/0x10
[  239.923845][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.929101][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  239.934317][   T30]  ? __pfx_kthread+0x10/0x10
[  239.938967][   T30]  ret_from_fork+0x4b/0x80
[  239.943393][   T30]  ? __pfx_kthread+0x10/0x10
[  239.948061][   T30]  ret_from_fork_asm+0x1a/0x30
[  239.952849][   T30]  </TASK>
[  239.956181][   T30] INFO: task syz.3.70:6307 blocked for more than 143 seconds.
[  239.963643][   T30]       Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  239.971326][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  239.980113][   T30] task:syz.3.70        state:D stack:24312 pid:6307  tgid:6303  ppid:5853   task_flags:0x400140 flags:0x20004006
[  239.992078][   T30] Call Trace:
[  239.995364][   T30]  <TASK>
[  239.998396][   T30]  __schedule+0x190e/0x4c90
[  240.002922][   T30]  ? __pfx___schedule+0x10/0x10
[  240.007846][   T30]  ? __pfx_lock_release+0x10/0x10
[  240.012889][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  240.018905][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  240.024827][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.031260][   T30]  ? schedule+0x90/0x320
[  240.035625][   T30]  schedule+0x14b/0x320
[  240.039802][   T30]  schedule_preempt_disabled+0x13/0x30
[  240.045265][   T30]  __mutex_lock+0x817/0x1010
[  240.049908][   T30]  ? __mutex_lock+0x602/0x1010
[  240.054684][   T30]  ? nfc_rfkill_set_block+0x50/0x310
[  240.060053][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  240.065100][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  240.070352][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  240.076378][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.082715][   T30]  nfc_rfkill_set_block+0x50/0x310
[  240.087899][   T30]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  240.093626][   T30]  rfkill_set_block+0x1f1/0x440
[  240.098554][   T30]  rfkill_fop_write+0x5b8/0x790
[  240.103418][   T30]  ? __pfx_rfkill_fop_write+0x10/0x10
[  240.108838][   T30]  ? bpf_lsm_inode_setsecurity+0x10/0x20
[  240.114481][   T30]  ? rw_verify_area+0x243/0x630
[  240.119449][   T30]  ? __pfx_rfkill_fop_write+0x10/0x10
[  240.124833][   T30]  vfs_write+0x29f/0xd10
[  240.129136][   T30]  ? __pfx_vfs_write+0x10/0x10
[  240.133903][   T30]  ? compat_restore_altstack+0x234/0x300
[  240.139759][   T30]  ? __pfx_compat_restore_altstack+0x10/0x10
[  240.145890][   T30]  ? __fget_files+0x2a/0x410
[  240.150599][   T30]  ? __fget_files+0x395/0x410
[  240.155283][   T30]  ? __fget_files+0x2a/0x410
[  240.160032][   T30]  ksys_write+0x18f/0x2b0
[  240.164389][   T30]  ? __pfx_ksys_write+0x10/0x10
[  240.169290][   T30]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  240.175961][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  240.181167][   T30]  __do_fast_syscall_32+0xb4/0x110
[  240.186330][   T30]  do_fast_syscall_32+0x34/0x80
[  240.191188][   T30]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  240.197643][   T30] RIP: 0023:0xf7f77579
[  240.201728][   T30] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  240.210197][   T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  240.218254][   T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000
[  240.226307][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  240.234282][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  240.242352][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  240.250369][   T30]  </TASK>
[  240.253674][   T30] 
[  240.253674][   T30] Showing all locks held in the system:
[  240.261454][   T30] 7 locks held by kworker/0:1/9:
[  240.266423][   T30]  #0: ffff888144ec9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  240.277940][   T30]  #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  240.289852][   T30]  #2: ffff888145b90190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150
[  240.298851][   T30]  #3: ffff88805d146190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.308167][   T30]  #4: ffff88805d145160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.317559][   T30]  #5: ffff888021ac8100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9c/0x320
[  240.327240][   T30]  #6: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0
[  240.337302][   T30] 1 lock held by khungtaskd/30:
[  240.342148][   T30]  #0: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  240.352061][   T30] 7 locks held by kworker/0:2/908:
[  240.357298][   T30]  #0: ffff888144ec9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  240.368731][   T30]  #1: ffffc900039b7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  240.380829][   T30]  #2: ffff888145bc0190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150
[  240.390072][   T30]  #3: ffff88807a5a8190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x103/0x950
[  240.399484][   T30]  #4: ffff888021355160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0
[  240.410101][   T30]  #5: ffff888021356100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  240.419916][   T30]  #6: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd0/0x230
[  240.430146][   T30] 4 locks held by udevd/5209:
[  240.434817][   T30]  #0: ffff88805e29d418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70
[  240.443711][   T30]  #1: ffff888032e46488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0
[  240.453199][   T30]  #2: ffff88805eb1bc38 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0
[  240.462716][   T30]  #3: ffff8880275bf100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340
[  240.471747][   T30] 2 locks held by getty/5594:
[  240.476529][   T30]  #0: ffff8880357920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  240.486368][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770
[  240.496563][   T30] 4 locks held by udevd/5850:
[  240.501235][   T30]  #0: ffff88805e29d2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70
[  240.510055][   T30]  #1: ffff888032e45c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0
[  240.519584][   T30]  #2: ffff88805dea0968 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0
[  240.529092][   T30]  #3: ffff88805d7a8190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340
[  240.538219][   T30] 7 locks held by kworker/1:3/5885:
[  240.543412][   T30]  #0: ffff888144ec9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  240.554812][   T30]  #1: ffffc9000450fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  240.566742][   T30]  #2: ffff888145ba8190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150
[  240.575657][   T30]  #3: ffff88805d7a8190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.584918][   T30]  #4: ffff88807c251160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.594270][   T30]  #5: ffff8880275bf100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9c/0x320
[  240.603920][   T30]  #6: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0
[  240.614101][   T30] 7 locks held by kworker/1:5/5899:
[  240.619702][   T30]  #0: ffff888144ec9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  240.631142][   T30]  #1: ffffc900045ffc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  240.643093][   T30]  #2: ffff888029028190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150
[  240.652054][   T30]  #3: ffff8880283c8190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.661353][   T30]  #4: ffff88805c57c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520
[  240.670637][   T30]  #5: ffff88805c57f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9c/0x320
[  240.680288][   T30]  #6: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0
[  240.690291][   T30] 3 locks held by kworker/0:8/5931:
[  240.695604][   T30]  #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  240.707431][   T30]  #1: ffffc900046ffc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  240.721126][   T30]  #2: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  240.733859][   T30] 2 locks held by syz.3.70/6307:
[  240.738876][   T30]  #0: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x1a6/0x790
[  240.749043][   T30]  #1: ffff888021356100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310
[  240.758779][   T30] 2 locks held by syz-executor/6667:
[  240.764056][   T30]  #0: ffff888069e7f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6b0
[  240.774165][   T30]  #1: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0
[  240.784642][   T30] 2 locks held by syz.5.208/6856:
[  240.789823][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.798391][   T30]  #1: ffffffff901af108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x131/0x850
[  240.808517][   T30] 1 lock held by syz.1.210/6861:
[  240.813457][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.821967][   T30] 1 lock held by syz.4.211/6863:
[  240.826970][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.835570][   T30] 1 lock held by syz.2.213/6870:
[  240.841168][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.849706][   T30] 1 lock held by syz-executor/6871:
[  240.854911][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.863689][   T30] 1 lock held by syz-executor/6872:
[  240.869006][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.877517][   T30] 1 lock held by syz-executor/6873:
[  240.882709][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.891194][   T30] 1 lock held by syz-executor/6874:
[  240.896434][   T30]  #0: ffffffff8f39a2c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340
[  240.904914][   T30] 
[  240.907291][   T30] =============================================
[  240.907291][   T30] 
[  240.915737][   T30] NMI backtrace for cpu 0
[  240.915749][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  240.915760][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  240.915766][   T30] Call Trace:
[  240.915770][   T30]  <TASK>
[  240.915775][   T30]  dump_stack_lvl+0x241/0x360
[  240.915790][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.915799][   T30]  ? __pfx__printk+0x10/0x10
[  240.915814][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  240.915828][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  240.915837][   T30]  ? _printk+0xd5/0x120
[  240.915845][   T30]  ? __pfx__printk+0x10/0x10
[  240.915853][   T30]  ? __wake_up_klogd+0xcc/0x110
[  240.915866][   T30]  ? __pfx__printk+0x10/0x10
[  240.915875][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  240.915888][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  240.915900][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  240.915912][   T30]  watchdog+0x1058/0x10a0
[  240.915926][   T30]  ? watchdog+0x1ea/0x10a0
[  240.915941][   T30]  ? __pfx_watchdog+0x10/0x10
[  240.915953][   T30]  kthread+0x7a9/0x920
[  240.915967][   T30]  ? __pfx_kthread+0x10/0x10
[  240.915980][   T30]  ? __pfx_watchdog+0x10/0x10
[  240.915992][   T30]  ? __pfx_kthread+0x10/0x10
[  240.916004][   T30]  ? __pfx_kthread+0x10/0x10
[  240.916018][   T30]  ? __pfx_kthread+0x10/0x10
[  240.916030][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.916044][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  240.916058][   T30]  ? __pfx_kthread+0x10/0x10
[  240.916073][   T30]  ret_from_fork+0x4b/0x80
[  240.916085][   T30]  ? __pfx_kthread+0x10/0x10
[  240.916097][   T30]  ret_from_fork_asm+0x1a/0x30
[  240.916115][   T30]  </TASK>
[  240.916119][   T30] Sending NMI from CPU 0 to CPUs 1:
[  241.084977][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30
[  241.086059][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  241.086072][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0
[  241.086092][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  241.086103][   T30] Call Trace:
[  241.086111][   T30]  <TASK>
[  241.086119][   T30]  dump_stack_lvl+0x241/0x360
[  241.086142][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.086160][   T30]  ? __pfx__printk+0x10/0x10
[  241.086174][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  241.086203][   T30]  ? vscnprintf+0x5d/0x90
[  241.086223][   T30]  panic+0x349/0x880
[  241.086239][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  241.086259][   T30]  ? __pfx_panic+0x10/0x10
[  241.086273][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  241.086292][   T30]  ? __irq_work_queue_local+0x137/0x410
[  241.086316][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  241.086338][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  241.086355][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  241.086376][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  241.086397][   T30]  watchdog+0x1097/0x10a0
[  241.086421][   T30]  ? watchdog+0x1ea/0x10a0
[  241.086447][   T30]  ? __pfx_watchdog+0x10/0x10
[  241.086469][   T30]  kthread+0x7a9/0x920
[  241.086490][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086513][   T30]  ? __pfx_watchdog+0x10/0x10
[  241.086535][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086556][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086581][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086601][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.086619][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  241.086639][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086663][   T30]  ret_from_fork+0x4b/0x80
[  241.086682][   T30]  ? __pfx_kthread+0x10/0x10
[  241.086704][   T30]  ret_from_fork_asm+0x1a/0x30
[  241.086734][   T30]  </TASK>
[  241.272481][   T30] Kernel Offset: disabled
[  241.277137][   T30] Rebooting in 86400 seconds..