last executing test programs:

48.63107857s ago: executing program 0 (id=4024):
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x20)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x0, @random="0000a85d4f76"}, 0x1c, {0x2, 0x4e22, @loopback}, 'veth0\x00'})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0)

48.336127766s ago: executing program 0 (id=4026):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r3, 0x4b3a, 0x1)
ioctl$TCXONC(r3, 0x4b3a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0)

47.141562769s ago: executing program 0 (id=4033):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008c80)="9d", 0x1}], 0x1}, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000340), 0x4)

47.044836864s ago: executing program 0 (id=4036):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
socket$inet6(0xa, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
timer_create(0x0, 0x0, 0x0)
unshare(0x2c060000)
unshare(0x24020400)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x401)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x74)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', <r4=>0x0, 0x700, 0x700, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0x70, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000002400)={0x3f8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '()[&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e44}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '&@,${%-:Y})@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']&}@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "42dc872e0ee4d16c6cb03f60087c1eaf2ecd640e4a5a2f31d14e82318edd562dd8bf8f315e61e6742549af5359d231675655820dd8adac1bb7f9cfa9644bfabc98811bff76eda6aac761afe9634e464294d3fca71fdc89d452af6b13491a4aadd1982df3ec45a6c11dab93d3ce0bb5c26b64cddaf6d654703d054dd7f1945234927f21c58f0b69eadca85f110e9bf3b6354d1efb25e3c4721a90ef65451a56e701205b5eaf3c637ebc25141ac646066af357ac0a44e24330c2990018819c5d478b7324a0105279"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffb6ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "793c357ac7f3d7ed7cdfbc2670d220485d3f18abcfd4c2dab767290229dfb606cadbaba951e194cb21c675bf7bbebf422d35bd5464ef343acd35c1a91d9df31507cfb49c6ec8ea1023f076b808c23e9f886e3d74e20caba09e08e10414755fda0d3b99cafb4c063aec4ee98f8ea4881b31cf932e3601f06c7b79f53009863be00d36d5d4e3741c753283d5cbf3532db3aba3dd7ff2822842f9ef8c935bb40249fb0f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x94b20d40506b8d7)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6)

46.107051418s ago: executing program 0 (id=4040):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4f23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x3}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0)

46.058248366s ago: executing program 0 (id=4041):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, {"a2e3ad214fc752f91b2547f70e06d038e7ff7fc6e5539b325d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
socket$l2tp(0x2, 0x2, 0x73)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0)

12.57073676s ago: executing program 3 (id=4145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
ioctl$TCXONC(r2, 0x4b3a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0)

12.522453337s ago: executing program 4 (id=4147):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xfffffffffffffed6)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140), 0x4)
sendfile(r2, r3, &(0x7f0000000000), 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x24, r6, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r11, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)
setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000640)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000)

12.270672845s ago: executing program 4 (id=4148):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"})
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000b, 0x80110, 0xffffffffffffffff, 0x1000)
dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000100), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="0f21f566baf80cb8f0fdf681ef66bafc0cb80e000000ef0f441e0fc75bcdc4e25d3d73bb0f0f5006a766bad104ed660f71f18066baf80cb81b15d182ef66bafc0cec0f4fa6f7330000", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90)
r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
fcntl$dupfd(r4, 0x0, r4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000008, 0x30, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x200000)
prctl$PR_SET_MM(0x41555856, 0xf0ff1f00000000, &(0x7f0000ffe000/0x2000)=nil)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="043e890d"], 0x8c)

10.135755283s ago: executing program 3 (id=4151):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007910000000000000630af8ff00000000950074000000000037e6aef5582ec484979533881baf222d30bb6096965f91ce8ac9d7465c821e7463dd6403f01a3977120d0672320f2ef38c7b"], &(0x7f0000003ff6)='GPL\x00', 0x8}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)=<r5=>0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x84, 0x0, &(0x7f0000000040))
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1f, @private2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f0000000140)="06", 0x1}, {&(0x7f00000002c0)="09663341a38e8e299584bb9d38420a98e3a19c0f", 0x14}], 0x3}}], 0x1, 0x6400c000)
sendto$inet6(r3, &(0x7f0000000000)="74685d0b0000c0f17ea221274f748676c55b5fd059c54ce5bb145aea5f7020a3981c5622c97ca3fa6624c248ff4ea1e400", 0x31, 0x840, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2)
getpid()
ftruncate(0xffffffffffffffff, 0x10000000000af)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1})

10.102953708s ago: executing program 4 (id=4152):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x3)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
close_range(0xffffffffffffffff, r4, 0x0)
syz_clone(0x40a68180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usbip_server_init(0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)

9.254668589s ago: executing program 2 (id=4153):
r0 = socket$tipc(0x1e, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001"], 0x1d)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x3, 0x3}}, 0x10, 0x0}, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000001, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000002c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20a000008004e00004c00000000000690780a010101ac1e0001891f790000b500ac1414007f000001ac1e000100000000000000007f000001070400080000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op], 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)

7.080017443s ago: executing program 1 (id=4154):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002d40)=ANY=[@ANYBLOB="1400000010000100"/19], 0x119e0}}, 0x0)

7.064742645s ago: executing program 2 (id=4155):
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@metacopy_on}], [{@appraise}], 0x2c})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8d)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0xfffffffffffffe6c, r7, <r8=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={r8})
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000300)={0x0, 0x80, 0xa, 0x0, 0x2, [], [0x0, 0x1f]})
socket$inet6_tcp(0xa, 0x1, 0x0)

7.064229805s ago: executing program 3 (id=4156):
pipe(&(0x7f00000001c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x12c)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', '', [{}, {0x20, '%'}, {0x20, '\x03\x00.'}, {0x20, 'memory.events\x00\x16:\r\xc1\xe7\xe5\x15v\x95\x9f#I9-sJ\xa0\xa2\xc4\xb6Z\x170\'\x17\x82\xed\x06\x01\xc2f\x9b\xbe\x9c\a?:\xe6\xdb\xde\x9f\xc8\xfb\xc5\x8ap\x1cz|\xe8\xb0\xc2\xea\xffz\xa0\xd6\x18\xec\x84\xf5`\xe7\x8bs\x95\xd0\x18-\xc4\x84\x92L\x13H\x13\x06\xbcrM\'\xfc\x8f\xf6\xd5\x18x\x1f\x19=\xac.\xf7oG\xd3\x89\x1e\x1f\x83\xdd \xf3\xb7\xc6\x00{\x80\x99v\xda!_\xc6\xb2O\xe5\xe4_\xf8\x9fB\x96\x1e,\xeaj\x01\xf0-U\x9a+#\xf2\xe8\x92aE\x16'}, {0x20, '$&.\xf3\xf46\xac\x9d4\x96\x87\xb1X)\x16\x85\xd1\xac8\xdb\x85-\x0f\xe6gI[\x81\xe7\xa4;:\x8b\xbbo\xb3\x80\x8cv\x9a\xa3\x88\xcd\r\xa7[\xd3\"\x9e\xfa\xa1\\\xa4\x0f\x99\x18\xf2\x937\xd4\xff6h\f\xac/\xca\xff\xdb\x95)\xe5 \x94\x8b\xa0\x0f\xbf\x87M)\xe5\xbbn\xab\xdf\xc6h\x82\xfe:\x17\x1a\xd4\x8d\xd7&\xdd\xe81\x8b\xed\xd4\xf8\x87\x1aC\xfe\x82\n\xcaq\xa2\xcf\x15L\xb1-\xdb6\x9d\\rLa\xf1j\x9c_\x95\x9d=P\xebN\v\xa1\x06yS\x8e\xe9\xbcW\xbd16\x8b\xc8\xe8\xe1\xb3\'N\xe8\x18\x899gm\\\x19\xbb\xab\xe2\xa6\x19\xb0NV\t\x84D'}, {0x20, '}\xfa,-}'}, {0x20, '-}/+){@}-.'}]}, 0x165)
close(r0)
socket$alg(0x26, 0x5, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, r0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800)
io_setup(0x0, &(0x7f0000000600))

7.049867917s ago: executing program 4 (id=4157):
syz_open_dev$swradio(&(0x7f0000002f40), 0x0, 0x2)
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0x640100, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000300)=0x6)
syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x6}, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
r5 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000340))
openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={<r7=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000640)={0x13, 0x0, 0x7, {0x0, r7, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r7, 0x20, "d65350", "d54a1ea6e2b95d04fd47dcdbb5fb1f112aaf0064d79486cdf50f6206540890c85529e047d3829c53d46ee13c92479127dca6a93a8e4c9c21560c97c06c9cbd9f48aa4308e58a1f9a85a0172b8f9f4ad800000000158b4af6b1021fbd9de91f63ccd448e294d8ebc0a223dc070c8b065b875d1d8603ba1a62599c9119f09f6879de151bddc0d68a3d40616fdb186a18cdd5faacaa55875d5640df0b9a89eddad750b037dc480c92603e598e5c7121dc9934a8497eb43f25962094ad4e8da38859d6f1f0d12630e17a2f1bb4ead33879ef51c26a506f8b3d08882bf06b3f269c403172bd61186a0217a93d47e8798f6f2b00"}}, 0x110)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000))
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041})
io_uring_setup(0x1b52, &(0x7f00000001c0)={0x0, 0x61e7, 0x4, 0x1, 0xef})
clock_gettime(0xfffffff2, &(0x7f0000000500))

6.603288926s ago: executing program 1 (id=4158):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xfffffffffffffed6)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140), 0x4)
sendfile(r2, r3, &(0x7f0000000000), 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x24, r6, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r11, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)
setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000640)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000)

4.49204954s ago: executing program 1 (id=4159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0)

4.489834181s ago: executing program 2 (id=4160):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r1 = getpid()
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={r1, 0x0, 0x9})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8, 0x103)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r2, &(0x7f0000002380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x18292}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000006500)={0x50}, 0x50)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x5c, r5, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}}, 0x0)

4.441437718s ago: executing program 3 (id=4161):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r3, 0x4b3a, 0x1)
ioctl$TCXONC(r3, 0x4b3a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0)

4.440699948s ago: executing program 4 (id=4162):
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008b0000008520000000000000852000000200007195a86d0361edde00000000000000ac37"], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5abf}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x2, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0x1ff, "54c4d5c8a353e40ca958013763c56c995609ad28acab1eb969fa5a376eabb28c"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x9d, &(0x7f00000004c0)=""/157, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xcf)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000280)=""/224, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03010000"], 0x4)
syz_open_dev$usbfs(&(0x7f0000000000), 0x71, 0x2081)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000001780)=0x3f, 0x4)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8008, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16=r3, @ANYRES8, @ANYBLOB="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", @ANYRES16, @ANYRESOCT=r2, @ANYRES64=0x0], 0xf, 0xa8, &(0x7f0000000140)="$eJzs1zFqAkEUBuC3GxK2TRdIkXqb3MGjiKU2YqUIXsGLeBWPsL2FxbYijugOiGitIt9XvOH/h4Fp33q3+l3WEWkRkeqf8SZdFNPZsD+anGfwlsp8VhHx993lba/rinzftPNB037cPv660wEAAC+rjP/rfEi52OctMOLzNLLq0R8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLJjAAAA//83Ayl0")

4.283983562s ago: executing program 1 (id=4163):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

4.073720594s ago: executing program 2 (id=4164):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmsg$TIPC_NL_SOCK_GET(r2, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000380)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0x7f}}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

3.470253477s ago: executing program 2 (id=4165):
r0 = socket$tipc(0x1e, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001"], 0x1d)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x3, 0x3}}, 0x10, 0x0}, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000001, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000002c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20a000008004e00004c00000000000690780a010101ac1e0001891f790000b500ac1414007f000001ac1e000100000000000000007f000001070400080000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op], 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)

1.196475447s ago: executing program 1 (id=4166):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007910000000000000630af8ff00000000950074000000000037e6aef5582ec484979533881baf222d30bb6096965f91ce8ac9d7465c821e7463dd6403f01a3977120d0672320f2ef38c7b"], &(0x7f0000003ff6)='GPL\x00', 0x8}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000003580)=<r5=>0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x84, 0x0, &(0x7f0000000040))
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1f, @private2, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f0000000140)="06", 0x1}, {&(0x7f00000002c0)="09663341a38e8e299584bb9d38420a98e3a19c0f", 0x14}], 0x3}}], 0x1, 0x6400c000)
sendto$inet6(r3, &(0x7f0000000000)="74685d0b0000c0f17ea221274f748676c55b5fd059c54ce5bb145aea5f7020a3981c5622c97ca3fa6624c248ff4ea1e400", 0x31, 0x840, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2)
getpid()
ftruncate(0xffffffffffffffff, 0x10000000000af)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1})

1.187641647s ago: executing program 2 (id=4167):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0xaab, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa99, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x9, 0x4, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xc, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfff7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xdf, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)={0x5, 0xf, 0xa3, 0x3, [@generic={0x83, 0x10, 0xa, "e6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e62a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f57"}, @ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x99f6, 0xf00, 0x99, [0xff0030, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x5, 0x1}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]})
syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0)
r8 = dup2(r3, r3)
connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26)
sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
r11 = dup(r10)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB])

1.179602719s ago: executing program 3 (id=4168):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
linkat(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r2)

1.17057925s ago: executing program 4 (id=4169):
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@metacopy_on}], [{@appraise}], 0x2c})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8d)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={0x0, 0xfffffffffffffe6c, r7, <r8=>0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={r8})
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000300)={0x0, 0x80, 0xa, 0x0, 0x2, [], [0x0, 0x1f]})
socket$inet6_tcp(0xa, 0x1, 0x0)

336.737458ms ago: executing program 3 (id=4170):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe51, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xfffffffffffffed6)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140), 0x4)
sendfile(r2, r3, &(0x7f0000000000), 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x24, r6, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r11, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)
setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000640)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000)

0s ago: executing program 1 (id=4171):
syz_open_dev$swradio(&(0x7f0000002f40), 0x0, 0x2)
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0x640100, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f0000000140)=0xb0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000300)=0x6)
syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x6}, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000340))
openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={<r8=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000640)={0x13, 0x0, 0x7, {0x0, r8, 0x2}}, 0x18)
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {r8, 0x20, "d65350", "d54a1ea6e2b95d04fd47dcdbb5fb1f112aaf0064d79486cdf50f6206540890c85529e047d3829c53d46ee13c92479127dca6a93a8e4c9c21560c97c06c9cbd9f48aa4308e58a1f9a85a0172b8f9f4ad800000000158b4af6b1021fbd9de91f63ccd448e294d8ebc0a223dc070c8b065b875d1d8603ba1a62599c9119f09f6879de151bddc0d68a3d40616fdb186a18cdd5faacaa55875d5640df0b9a89eddad750b037dc480c92603e598e5c7121dc9934a8497eb43f25962094ad4e8da38859d6f1f0d12630e17a2f1bb4ead33879ef51c26a506f8b3d08882bf06b3f269c403172bd61186a0217a93d47e8798f6f2b00"}}, 0x110)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000))
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f041})
io_uring_setup(0x1b52, &(0x7f00000001c0)={0x0, 0x61e7, 0x4, 0x1, 0xef})
clock_gettime(0xfffffff2, &(0x7f0000000500))

kernel console output (not intermixed with test programs):

] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  771.401398][  T152] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  771.409373][ T4188] usb usb12-port1: unable to enumerate USB device
[  771.485622][  T152] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  771.640366][ T4194] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  771.655397][ T4194] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  771.672544][ T4191] usb 2-1: config 0 interface 0 has no altsetting 0
[  771.679552][ T4194] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  771.691910][ T4191] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  771.709243][ T4194] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  771.718747][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  771.729314][ T4194] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  771.745324][ T4191] usb 2-1: config 0 descriptor??
[  771.751087][ T4194] cm6533_jd 0003:0D8C:0022.0008: No inputs registered, leaving
[  771.773041][ T4194] cm6533_jd 0003:0D8C:0022.0008: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  771.839400][ T3744] usb 4-1: USB disconnect, device number 64
[  771.943107][ T4194] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  771.952526][ T4188] usb 3-1: USB disconnect, device number 51
[  772.215730][ T4194] usb 5-1: Using ep0 maxpacket: 16
[  772.332564][ T4194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  772.352573][ T4194] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  772.372340][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.401568][ T4194] usb 5-1: config 0 descriptor??
[  772.459272][T15482] fuse: Unknown parameter 'f'
[  772.492482][ T4191] video4linux radio32: keene_cmd_set failed (-71)
[  772.505305][ T4191] radio-keene 2-1:0.0: V4L2 device registered as radio32
[  772.556042][ T4191] usb 2-1: USB disconnect, device number 63
[  772.875128][T15486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  772.896717][T15486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  772.954716][ T4194] hid (null): report_id 0 is invalid
[  772.981261][ T4194] hid (null): unknown global tag 0xc
[  773.013875][ T4194] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1
[  773.031748][ T4194] hid-generic 0003:0158:0100.0009: unexpected long global item
[  773.050489][T15508] loop0: detected capacity change from 0 to 512
[  773.050504][ T4194] hid-generic: probe of 0003:0158:0100.0009 failed with error -22
[  773.089210][T15508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  773.166497][ T3757] usb 5-1: USB disconnect, device number 58
[  773.244492][T15508] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  773.276598][T15508] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  773.283244][T15514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3449'.
[  773.307507][T15502] mmap: syz.3.3445 (15502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  773.340742][   T27] audit: type=1326 audit(1719473099.886:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15501 comm="syz.3.3445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc32775ae9 code=0x0
[  773.376595][T15511] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  773.458618][T15511] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  773.469091][T15511] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  773.534220][T14832] EXT4-fs (loop0): unmounting filesystem.
[  773.632239][T15521] vivid-000: disconnect
[  773.656956][T15520] vivid-000: reconnect
[  773.666789][ T3558] Bluetooth: hci0: Dropping invalid advertising data
[  774.205954][T15525] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  774.212527][T15525] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  774.308684][T15527] vhci_hcd: connection closed
[  774.308704][T15525] vhci_hcd vhci_hcd.0: Device attached
[  774.332525][ T3856] vhci_hcd: stop threads
[  774.337105][ T3856] vhci_hcd: release socket
[  774.381718][ T3856] vhci_hcd: disconnect device
[  774.736712][T15547] input: syz0 as /devices/virtual/input/input22
[  774.978126][T15557] kvm: emulating exchange as write
[  775.329974][T15564] loop3: detected capacity change from 0 to 512
[  776.112555][T15564] FAT-fs (loop3): bogus sectors per cluster 69
[  776.129050][T15564] FAT-fs (loop3): Can't find a valid FAT filesystem
[  776.542070][T15580] vivid-008: disconnect
[  776.542465][ T3558] Bluetooth: hci3: Dropping invalid advertising data
[  776.592355][ T4191] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  776.639458][T15579] vivid-008: reconnect
[  776.832485][ T4191] usb 3-1: Using ep0 maxpacket: 16
[  776.958989][T15600] netlink: 'syz.0.3470': attribute type 10 has an invalid length.
[  776.967142][ T4191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  777.007122][ T4191] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  777.066441][T15602] binder: 15589:15602 ioctl c0306201 20000040 returned -14
[  777.735676][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.753206][ T4191] usb 3-1: config 0 descriptor??
[  777.825184][T15600] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  778.014614][T15610] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3476'.
[  778.108646][T15610] device gretap0 entered promiscuous mode
[  778.284355][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.314137][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.356297][ T4191] hid (null): report_id 0 is invalid
[  779.244330][ T4191] hid (null): unknown global tag 0xc
[  779.307923][ T4191] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  779.367571][ T4191] hid-generic 0003:0158:0100.000A: unexpected long global item
[  779.418699][ T4191] hid-generic: probe of 0003:0158:0100.000A failed with error -22
[  779.500201][ T4191] usb 3-1: USB disconnect, device number 52
[  779.631584][T13621] Bluetooth: hci3: Dropping invalid advertising data
[  779.632986][T15636] vivid-008: disconnect
[  779.659177][T15632] vivid-008: reconnect
[  779.952449][ T4188] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  780.332982][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.439721][T13621] Bluetooth: hci3: command 0x0406 tx timeout
[  780.651054][ T4188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.703400][ T4188] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  780.740882][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.767925][ T4188] usb 4-1: config 0 descriptor??
[  780.915628][T15649] loop0: detected capacity change from 0 to 512
[  780.953219][T15649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  781.033243][T15649] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  781.117400][T15649] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  781.198177][T15649] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  781.261583][T15649] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  781.291171][T15649] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  781.348129][ T4188] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  781.361132][ T4188] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  781.384795][ T4188] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  781.410706][ T4188] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  781.425296][ T4188] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  781.440551][ T4188] cm6533_jd 0003:0D8C:0022.000B: No inputs registered, leaving
[  781.461451][T14832] EXT4-fs (loop0): unmounting filesystem.
[  781.489864][ T4188] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  781.602422][ T4191] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  781.785413][ T3591] usb 4-1: USB disconnect, device number 65
[  781.942340][ T4191] usb 2-1: Using ep0 maxpacket: 32
[  782.122452][ T4191] usb 2-1: config index 0 descriptor too short (expected 39532, got 27)
[  783.142155][ T3558] Bluetooth: hci3: command 0x0406 tx timeout
[  783.155389][ T4191] usb 2-1: config 88 has too many interfaces: 195, using maximum allowed: 32
[  783.176781][ T4191] usb 2-1: config 88 has an invalid descriptor of length 183, skipping remainder of the config
[  783.188545][ T4191] usb 2-1: config 88 has 0 interfaces, different from the descriptor's value: 195
[  783.372577][ T4191] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  783.390591][ T4191] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  783.440422][ T4191] usb 2-1: Product: syz
[  783.458022][ T4191] usb 2-1: Manufacturer: syz
[  783.478729][ T4191] usb 2-1: SerialNumber: syz
[  783.655237][ T3558] Bluetooth: hci3: Dropping invalid advertising data
[  783.784956][ T4191] usb 2-1: USB disconnect, device number 64
[  784.442595][ T4191] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  784.511326][ T3558] Bluetooth: hci4: Malformed LE Event: 0x0d
[  785.678038][T15704] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  785.684601][T15704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  785.712176][T15693] loop0: detected capacity change from 0 to 40427
[  785.745663][T15693] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(175702528)
[  785.779082][T15704] vhci_hcd vhci_hcd.0: Device attached
[  785.785673][T15693] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  785.802323][T15693] F2FS-fs (loop0): invalid crc value
[  785.823680][T15693] F2FS-fs (loop0): Found nat_bits in checkpoint
[  785.853875][T15705] vhci_hcd: connection closed
[  785.862969][ T3818] vhci_hcd: stop threads
[  785.878371][ T3818] vhci_hcd: release socket
[  785.913964][ T3818] vhci_hcd: disconnect device
[  785.917901][ T4191] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  785.930047][T15693] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  785.942655][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.963596][ T4191] usb 4-1: config 0 descriptor??
[  785.983920][T15693] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  785.990991][T15693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  786.137807][T15688] syz.0.3502: attempt to access beyond end of device
[  786.137807][T15688] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  786.180972][T15688] syz.0.3502: attempt to access beyond end of device
[  786.180972][T15688] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  786.471823][T15723] syz.1.3511[15723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  786.471913][T15723] syz.1.3511[15723] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  786.484428][T14832] syz-executor: attempt to access beyond end of device
[  786.484428][T14832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  786.510302][ T4191] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f
[  786.519830][ T4191] hackrf 4-1:0.0: Could not detect board
[  786.542344][ T4191] hackrf: probe of 4-1:0.0 failed with error -71
[  786.550155][ T4191] usb 4-1: USB disconnect, device number 66
[  786.757863][ T3558] Bluetooth: hci4: Dropping invalid advertising data
[  786.957134][ T4188] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  787.212385][ T4188] usb 3-1: Using ep0 maxpacket: 32
[  787.352733][ T4188] usb 3-1: config index 0 descriptor too short (expected 39532, got 27)
[  787.389197][ T4188] usb 3-1: config 88 has too many interfaces: 195, using maximum allowed: 32
[  787.418502][ T4188] usb 3-1: config 88 has an invalid descriptor of length 183, skipping remainder of the config
[  787.449700][ T4188] usb 3-1: config 88 has 0 interfaces, different from the descriptor's value: 195
[  787.518950][T15753] input: syz0 as /devices/virtual/input/input23
[  787.642622][ T4188] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  787.679009][ T4188] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  787.716266][ T4188] usb 3-1: Product: syz
[  787.735049][ T4188] usb 3-1: Manufacturer: syz
[  787.759880][ T4188] usb 3-1: SerialNumber: syz
[  787.820826][T15761] input: syz0 as /devices/virtual/input/input24
[  788.080746][T15766] loop3: detected capacity change from 0 to 512
[  788.099797][ T4188] usb 3-1: USB disconnect, device number 53
[  788.147598][T15766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  788.321660][T15766] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6).
[  788.345985][T15770] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  788.352626][T15770] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  788.365774][T15766] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  788.412453][T15770] vhci_hcd vhci_hcd.0: Device attached
[  788.487122][T13620] EXT4-fs (loop3): unmounting filesystem.
[  788.529193][T15771] vhci_hcd: connection closed
[  788.540481][ T3817] vhci_hcd: stop threads
[  788.599256][ T3817] vhci_hcd: release socket
[  788.616103][ T3817] vhci_hcd: disconnect device
[  788.629320][T15779] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in;
[  788.629320][T15779]    program syz.4.3532 not setting count and/or reply_len properly
[  788.940224][T15797] device syz_tun entered promiscuous mode
[  788.959008][T15797] device syz_tun left promiscuous mode
[  789.162400][ T5927] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  789.309650][T15805] loop1: detected capacity change from 0 to 512
[  789.362901][T15805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  789.403497][ T4191] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  789.407164][ T5927] usb 3-1: Using ep0 maxpacket: 32
[  789.419951][T15805] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6).
[  789.482460][T15805] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  789.525189][T13058] EXT4-fs (loop1): unmounting filesystem.
[  789.664133][ T5927] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  789.682391][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  789.712341][ T4191] usb 4-1: Using ep0 maxpacket: 8
[  789.982878][ T4188] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  790.063222][ T4191] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  790.083959][ T4191] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  790.117614][ T4191] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  790.152109][ T4191] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  790.197244][ T4191] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  790.229377][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.252361][ T4188] usb 1-1: Using ep0 maxpacket: 32
[  790.325758][ T4191] usbtmc 4-1:16.0: bulk endpoints not found
[  790.672601][ T5927] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  790.681829][  T154] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  790.702035][ T5927] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  790.721366][ T5927] usb 3-1: Product: syz
[  790.731542][ T5927] usb 3-1: Manufacturer: syz
[  790.751804][ T5927] usb 3-1: SerialNumber: syz
[  790.777012][ T4188] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  790.787286][ T5927] usb 3-1: config 0 descriptor??
[  790.787478][ T4188] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config
[  790.803139][ T4188] usb 1-1: too many endpoints for config 0 interface 0 altsetting 41: 136, using maximum allowed: 30
[  790.814091][ T4188] usb 1-1: config 0 interface 0 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 136
[  790.827474][ T4188] usb 1-1: config 0 interface 0 has no altsetting 0
[  790.853958][ T5927] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  790.897042][ T5927] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  790.927803][  T154] usb 5-1: Using ep0 maxpacket: 16
[  791.015198][ T4188] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  791.024860][ T4188] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  791.033851][ T4188] usb 1-1: Product: syz
[  791.038114][ T4188] usb 1-1: Manufacturer: syz
[  791.042776][ T4188] usb 1-1: SerialNumber: syz
[  791.055657][ T4188] usb 1-1: config 0 descriptor??
[  791.062872][  T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  791.074578][  T154] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  791.083769][  T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.096619][  T154] usb 5-1: config 0 descriptor??
[  791.323497][ T4188] ldusb 1-1:0.0: Interrupt in endpoint not found
[  791.333880][ T4188] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  791.351714][ T4188] usb 1-1: USB disconnect, device number 52
[  791.563633][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.573531][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  791.603933][  T154] hid (null): report_id 0 is invalid
[  791.610187][  T154] hid (null): unknown global tag 0xc
[  791.632372][  T154] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1
[  791.657608][  T154] hid-generic 0003:0158:0100.000C: unexpected long global item
[  791.679944][  T154] hid-generic: probe of 0003:0158:0100.000C failed with error -22
[  791.819157][  T154] usb 5-1: USB disconnect, device number 59
[  791.997218][T15836] device bond_slave_0 entered promiscuous mode
[  791.997339][T15836] device bond_slave_1 entered promiscuous mode
[  791.997363][T15836] device netdevsim0 entered promiscuous mode
[  791.997469][T15836] device vlan2 entered promiscuous mode
[  791.997482][T15836] device bond0 entered promiscuous mode
[  792.018445][T15836] device bond0 left promiscuous mode
[  792.020489][T15836] device bond_slave_0 left promiscuous mode
[  792.020520][T15836] device bond_slave_1 left promiscuous mode
[  792.020560][T15836] device netdevsim0 left promiscuous mode
[  792.127116][ T3591] usb 4-1: USB disconnect, device number 67
[  792.429526][T15839] program syz.3.3554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  792.441784][ T5927] usb 3-1: USB disconnect, device number 54
[  792.460536][ T5927] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  792.812459][ T3591] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  793.092392][ T3591] usb 4-1: Using ep0 maxpacket: 16
[  793.294677][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[  793.360021][T15865] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  793.366652][T15865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  793.424201][T15865] vhci_hcd vhci_hcd.0: Device attached
[  793.432585][ T3591] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  793.453080][ T3591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.499728][ T3591] usb 4-1: Product: syz
[  793.506242][T15866] vhci_hcd: connection closed
[  793.534761][ T3591] usb 4-1: Manufacturer: syz
[  793.544878][ T3781] vhci_hcd: stop threads
[  793.550568][ T3781] vhci_hcd: release socket
[  793.570964][ T3781] vhci_hcd: disconnect device
[  793.600419][ T3591] usb 4-1: SerialNumber: syz
[  793.626800][ T3591] usb 4-1: config 0 descriptor??
[  793.704126][T15877] netlink: 'syz.2.3566': attribute type 3 has an invalid length.
[  794.565484][T15889] device veth0_macvtap left promiscuous mode
[  795.140178][ T3757] usb 4-1: USB disconnect, device number 68
[  795.308290][ T3558] Bluetooth: hci4: Malformed LE Event: 0x0d
[  795.464794][T15919] loop4: detected capacity change from 0 to 256
[  795.516596][T15919] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d)
[  797.724927][T15964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.583424][ T3558] Bluetooth: hci2: Malformed LE Event: 0x0d
[  798.746166][T15978] loop1: detected capacity change from 0 to 64
[  800.302950][ T3558] Bluetooth: hci5: command 0x0406 tx timeout
[  800.692393][ T5927] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  801.753253][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  801.776169][ T5927] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  801.798550][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[  801.901664][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.926777][ T5927] usb 3-1: config 0 descriptor??
[  802.194003][  T154] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  802.212441][ T3558] Bluetooth: hci0: command 0x0406 tx timeout
[  802.275008][ T3558] Bluetooth: hci5: unknown advertising packet type: 0x65
[  802.275056][ T3558] Bluetooth: hci5: Malformed LE Event: 0x02
[  802.293933][ T5927] ath6kl: Failed to submit usb control message: -71
[  802.306466][ T5927] ath6kl: unable to send the bmi data to the device: -71
[  802.329373][ T5927] ath6kl: Unable to send get target info: -71
[  802.357028][ T5927] ath6kl: Failed to init ath6kl core: -71
[  802.448651][  T154] usb 4-1: Using ep0 maxpacket: 32
[  802.480177][ T5927] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  802.507818][ T5927] usb 3-1: USB disconnect, device number 55
[  802.582552][  T154] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  802.582584][  T154] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config
[  802.582620][  T154] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  802.742446][  T154] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  802.742483][  T154] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  802.742507][  T154] usb 4-1: Product: syz
[  802.742521][  T154] usb 4-1: Manufacturer: syz
[  802.742535][  T154] usb 4-1: SerialNumber: syz
[  802.746897][  T154] usb 4-1: config 0 descriptor??
[  802.802378][ T4188] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  803.024018][  T154] ldusb 4-1:0.0: Interrupt in endpoint not found
[  803.051453][  T154] usb 4-1: USB disconnect, device number 69
[  803.122580][ T4188] usb 5-1: Using ep0 maxpacket: 16
[  803.262569][ T4188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  803.289079][ T4188] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  803.322851][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.342131][ T4188] usb 5-1: config 0 descriptor??
[  803.528329][T16053] loop1: detected capacity change from 0 to 512
[  803.616561][T16053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  803.776370][T16053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3623: bg 0: block 248: padding at end of block bitmap is not set
[  803.805901][T16053] Quota error (device loop1): write_blk: dquota write failed
[  803.822594][T16053] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  803.833982][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  803.863240][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  803.885677][T16053] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.3623: Failed to acquire dquot type 1
[  803.938307][T16053] EXT4-fs (loop1): 1 truncate cleaned up
[  803.944172][T16053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  803.965635][T16053] ext4 filesystem being mounted at /root/syzkaller.4dBfRF/179/bus supports timestamps until 2038 (0x7fffffff)
[  803.982628][ T4188] usbhid 5-1:0.0: can't add hid device: -71
[  803.995250][ T4188] usbhid: probe of 5-1:0.0 failed with error -71
[  803.999784][T16053] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.3623: deleted inode referenced: 12
[  804.019101][T16065] loop2: detected capacity change from 0 to 64
[  804.051440][ T4188] usb 5-1: USB disconnect, device number 60
[  804.392520][  T154] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  804.769475][T16073] netlink: 56508 bytes leftover after parsing attributes in process `syz.0.3628'.
[  804.842703][  T154] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  804.867703][  T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.908253][T16079] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  804.999889][  T154] usb 2-1: config 0 descriptor??
[  805.542557][  T154] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  805.571636][  T154] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  805.633070][  T154] [drm:udl_init] *ERROR* Selecting channel failed
[  805.696348][  T154] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  805.715902][  T154] [drm] Initialized udl on minor 2
[  805.744289][  T154] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  805.798161][  T154] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  805.809072][  T154] usb 2-1: USB disconnect, device number 65
[  805.856397][T16098] loop4: detected capacity change from 0 to 512
[  805.872446][ T4188] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  805.923988][T16098] EXT4-fs: Ignoring removed mblk_io_submit option
[  805.962672][T16098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  806.050704][T16098] EXT4-fs (loop4): 1 truncate cleaned up
[  806.072543][T16098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  806.083474][T16104] loop2: detected capacity change from 0 to 512
[  806.092211][T13058] EXT4-fs (loop1): unmounting filesystem.
[  806.181720][T16104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  806.227249][T16104] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[  806.249096][T16104] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  806.272607][ T4188] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  806.286251][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.308169][ T4188] usb 4-1: config 0 descriptor??
[  806.355441][T14770] EXT4-fs (loop2): unmounting filesystem.
[  806.522491][ T4180] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  806.637358][T13396] EXT4-fs (loop4): unmounting filesystem.
[  806.773371][ T4188] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f
[  806.799791][ T4188] hackrf 4-1:0.0: Could not detect board
[  806.807149][ T4180] usb 2-1: Using ep0 maxpacket: 16
[  806.839059][ T4188] hackrf: probe of 4-1:0.0 failed with error -71
[  806.860385][ T4188] usb 4-1: USB disconnect, device number 70
[  806.939487][T16122] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  806.962551][ T4180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  806.984452][ T4180] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  807.016197][ T4180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.021040][T16124] loop4: detected capacity change from 0 to 512
[  807.043266][ T4180] usb 2-1: config 0 descriptor??
[  807.083707][T16124] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  807.135883][T16124] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.3644: iget: bad i_size value: -67835469387268086
[  807.158108][T16124] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3644: couldn't read orphan inode 15 (err -117)
[  807.219722][T16124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  807.243303][T16124] ext2 filesystem being mounted at /root/syzkaller.3zhbuQ/148/file0 supports timestamps until 2038 (0x7fffffff)
[  807.481807][T13396] EXT4-fs (loop4): unmounting filesystem.
[  807.524257][T16112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.537446][T16112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.652475][ T4180] usbhid 2-1:0.0: can't add hid device: -71
[  807.658634][ T4180] usbhid: probe of 2-1:0.0 failed with error -71
[  807.682513][ T4180] usb 2-1: USB disconnect, device number 66
[  807.731970][T16139] loop4: detected capacity change from 0 to 4096
[  807.766650][T16140] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  808.482403][T16154] overlayfs: failed to resolve './file0': -2
[  809.214933][T16157] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  809.915422][T16177] loop2: detected capacity change from 0 to 4096
[  810.003048][T16177] NILFS (loop2): invalid segment: Checksum error in segment payload
[  810.005848][  T154] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  810.021694][T16177] NILFS (loop2): trying rollback from an earlier position
[  810.126471][T16177] NILFS (loop2): recovery complete
[  810.152166][T16185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  810.287251][  T154] usb 2-1: Using ep0 maxpacket: 16
[  810.402642][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  810.402693][  T154] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  810.402719][  T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.406951][  T154] usb 2-1: config 0 descriptor??
[  810.543366][T16194] overlayfs: failed to resolve './file1': -2
[  810.868755][T16179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.869839][T16179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.262974][  T154] usbhid 2-1:0.0: can't add hid device: -71
[  811.263068][  T154] usbhid: probe of 2-1:0.0 failed with error -71
[  811.264621][  T154] usb 2-1: USB disconnect, device number 67
[  811.310468][T16196] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  812.250473][T16223] smc: net device erspan0 applied user defined pnetid SYZ2
[  812.309028][T16223] device pim6reg1 entered promiscuous mode
[  812.474076][ T3558] Bluetooth: hci4: Dropping invalid advertising data
[  812.474986][T16227] vivid-002: disconnect
[  812.520989][T16228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  812.527632][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  812.537045][T16228] vhci_hcd vhci_hcd.0: Device attached
[  812.587852][T16226] vivid-002: reconnect
[  812.615859][T16229] vhci_hcd: connection closed
[  812.616203][ T3856] vhci_hcd: stop threads
[  812.635332][ T3856] vhci_hcd: release socket
[  812.640741][ T3856] vhci_hcd: disconnect device
[  813.512566][ T4180] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  813.598613][T16221] loop4: detected capacity change from 0 to 32768
[  813.622833][T16240] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  813.654113][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  813.660461][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  813.792494][ T4180] usb 1-1: Using ep0 maxpacket: 16
[  813.794175][T16221] XFS (loop4): Mounting V5 Filesystem
[  813.953515][ T4180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  813.965329][ T4180] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  813.975497][ T4180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.988440][T16221] XFS (loop4): Ending clean mount
[  814.002933][ T4180] usb 1-1: config 0 descriptor??
[  814.752651][ T4180] usbhid 1-1:0.0: can't add hid device: -71
[  814.759088][ T4180] usbhid: probe of 1-1:0.0 failed with error -71
[  814.784914][ T4180] usb 1-1: USB disconnect, device number 53
[  815.149636][T16267] netlink: 56508 bytes leftover after parsing attributes in process `syz.2.3686'.
[  815.220493][T16274] loop3: detected capacity change from 0 to 512
[  815.317764][T16274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  815.329672][T16274] ext4 filesystem being mounted at /root/syzkaller.mohioy/149/bus supports timestamps until 2038 (0x7fffffff)
[  815.391633][T16280] loop2: detected capacity change from 0 to 512
[  815.420689][T13620] EXT4-fs (loop3): unmounting filesystem.
[  815.430666][T16280] EXT4-fs: Ignoring removed mblk_io_submit option
[  815.459454][T16280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  815.498470][T16280] EXT4-fs (loop2): 1 truncate cleaned up
[  815.510745][T16285] program syz.1.3692 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  815.524437][T16280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  815.794411][T14770] EXT4-fs (loop2): unmounting filesystem.
[  815.952438][ T4180] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  816.202365][ T4180] usb 2-1: Using ep0 maxpacket: 16
[  816.312416][T13396] XFS (loop4): Unmounting Filesystem
[  816.444302][ T3558] Bluetooth: hci0: Malformed LE Event: 0x0d
[  816.552658][ T4180] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  816.574273][ T4180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.598491][ T4180] usb 2-1: Product: syz
[  816.614690][ T4180] usb 2-1: Manufacturer: syz
[  816.629717][ T4180] usb 2-1: SerialNumber: syz
[  816.659366][ T4180] usb 2-1: config 0 descriptor??
[  816.665340][T16304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  816.671961][T16304] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  816.707591][T16304] vhci_hcd vhci_hcd.0: Device attached
[  816.813366][T16305] vhci_hcd: connection closed
[  816.813605][ T3781] vhci_hcd: stop threads
[  816.842473][ T3781] vhci_hcd: release socket
[  816.846932][ T3781] vhci_hcd: disconnect device
[  818.132711][ T3591] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  818.274023][T16327] netlink: 56508 bytes leftover after parsing attributes in process `syz.0.3702'.
[  818.355022][T16336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  818.358460][ T4180] usb 2-1: USB disconnect, device number 68
[  818.412436][ T3591] usb 3-1: Using ep0 maxpacket: 16
[  818.491980][T16338] loop0: detected capacity change from 0 to 512
[  818.536320][T16338] EXT4-fs: Ignoring removed mblk_io_submit option
[  818.570156][T16338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  818.582595][ T3591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  818.607125][ T3591] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  818.638865][T16338] EXT4-fs (loop0): 1 truncate cleaned up
[  818.653704][T16338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  818.663124][ T3591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.695614][ T3591] usb 3-1: config 0 descriptor??
[  818.891912][T14832] EXT4-fs (loop0): unmounting filesystem.
[  819.350461][T16348] loop0: detected capacity change from 0 to 1024
[  819.402933][ T3591] usbhid 3-1:0.0: can't add hid device: -71
[  819.415913][ T3591] usbhid: probe of 3-1:0.0 failed with error -71
[  819.470317][ T3591] usb 3-1: USB disconnect, device number 56
[  819.564230][T16354] loop1: detected capacity change from 0 to 512
[  819.616893][T16354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  819.669911][T16354] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6).
[  819.708154][T16354] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  819.855082][T13058] EXT4-fs (loop1): unmounting filesystem.
[  820.121630][ T3817] hfsplus: b-tree write err: -5, ino 4
[  820.340906][T16369] loop0: detected capacity change from 0 to 512
[  820.450792][T16369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  820.480632][T16369] ext4 filesystem being mounted at /root/syzkaller.WbOqup/82/bus supports timestamps until 2038 (0x7fffffff)
[  820.512117][T16365] loop4: detected capacity change from 0 to 4096
[  820.688746][T16365] NILFS (loop4): invalid segment: Checksum error in segment payload
[  820.700647][T16365] NILFS (loop4): trying rollback from an earlier position
[  820.729355][T14832] EXT4-fs (loop0): unmounting filesystem.
[  820.858989][T16365] NILFS (loop4): recovery complete
[  820.889278][T16386] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  820.991613][T16387] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  820.998246][T16387] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  821.117086][T16387] vhci_hcd vhci_hcd.0: Device attached
[  821.200271][T16397] loop0: detected capacity change from 0 to 512
[  821.284924][T16389] vhci_hcd: connection closed
[  821.289386][ T3717] vhci_hcd: stop threads
[  821.313706][T16397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  821.326224][ T3717] vhci_hcd: release socket
[  821.381598][T16397] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  821.402884][T16397] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  821.421964][ T3717] vhci_hcd: disconnect device
[  821.442548][ T3591] usb 14-1: enqueue for inactive port 0
[  821.466052][T16405] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  821.533678][T16405] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  821.562017][T16405] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  821.651364][T14832] EXT4-fs (loop0): unmounting filesystem.
[  821.964227][ T3591] usb usb14-port1: attempt power cycle
[  822.037496][ T3558] Bluetooth: hci0: Dropping invalid advertising data
[  822.048039][T16414] vivid-000: disconnect
[  822.067318][T16412] vivid-000: reconnect
[  822.221985][T16417] loop3: detected capacity change from 0 to 512
[  822.241732][T16417] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  823.216694][T16417] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.3724: iget: bad i_size value: -67835469387268086
[  823.362188][T16417] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3724: couldn't read orphan inode 15 (err -117)
[  823.386183][ T3591] usb usb14-port1: unable to enumerate USB device
[  823.431364][T16417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  823.472599][T16417] ext2 filesystem being mounted at /root/syzkaller.mohioy/156/file0 supports timestamps until 2038 (0x7fffffff)
[  823.845140][T13620] EXT4-fs (loop3): unmounting filesystem.
[  824.252667][ T3744] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  824.492499][ T3744] usb 4-1: Using ep0 maxpacket: 32
[  824.499177][T16433] loop2: detected capacity change from 0 to 32768
[  824.580964][T16433] XFS (loop2): Mounting V5 Filesystem
[  824.613943][ T3744] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  824.613986][ T3744] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x35, skipping
[  824.621030][T16433] XFS (loop2): Ending clean mount
[  824.664556][T16469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  824.664584][T16469] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  824.664654][T16469] vhci_hcd vhci_hcd.0: Device attached
[  824.769454][T16470] vhci_hcd: connection closed
[  824.769685][   T11] vhci_hcd: stop threads
[  824.769704][   T11] vhci_hcd: release socket
[  824.769721][   T11] vhci_hcd: disconnect device
[  824.772775][ T3744] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  824.857821][T16472] overlayfs: failed to resolve './file0': -2
[  824.970688][ T3744] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  824.992384][ T3744] usb 4-1: Product: syz
[  824.996816][ T3744] usb 4-1: Manufacturer: syz
[  825.012755][ T3744] usb 4-1: SerialNumber: syz
[  825.036180][ T3744] usb 4-1: config 0 descriptor??
[  825.094494][ T3744] ldusb 4-1:0.0: Interrupt in endpoint not found
[  825.202874][ T3558] Bluetooth: hci4: Dropping invalid advertising data
[  825.230641][T16476] vivid-002: disconnect
[  825.279846][T16475] vivid-002: reconnect
[  825.314135][ T5927] usb 4-1: USB disconnect, device number 71
[  827.230160][T16489] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3744'.
[  827.330051][T16489] netlink: 'syz.3.3744': attribute type 21 has an invalid length.
[  827.378807][T16489] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3744'.
[  827.455344][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'.
[  827.636782][T16499] device syzkaller0 entered promiscuous mode
[  827.756913][T14770] XFS (loop2): Unmounting Filesystem
[  827.799886][ T3744] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  828.056383][ T3744] usb 4-1: Using ep0 maxpacket: 32
[  828.183314][ T3744] usb 4-1: descriptor type invalid, skip
[  828.196651][ T3744] usb 4-1: descriptor type invalid, skip
[  828.224991][ T3744] usb 4-1: descriptor type invalid, skip
[  828.302463][  T154] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  828.323329][ T3744] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  828.634138][  T154] usb 2-1: Using ep0 maxpacket: 32
[  828.645104][ T3744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  828.758244][ T3744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.776081][ T3744] usb 4-1: Product: syz
[  828.785060][ T3744] usb 4-1: Manufacturer: syz
[  828.828265][ T3744] usb 4-1: SerialNumber: syz
[  828.836308][  T154] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  828.998059][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 193, setting to 64
[  829.105569][ T3744] cdc_ether: probe of 4-1:1.0 failed with error -22
[  829.450167][  T154] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  829.526396][ T3744] usb 4-1: USB disconnect, device number 72
[  829.820559][  T154] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  830.034220][  T154] usb 2-1: Product: syz
[  830.038433][  T154] usb 2-1: Manufacturer: syz
[  830.043117][  T154] usb 2-1: SerialNumber: syz
[  830.073278][  T154] usb 2-1: config 0 descriptor??
[  830.115265][  T154] ldusb 2-1:0.0: Interrupt in endpoint not found
[  830.619101][ T3744] usb 2-1: USB disconnect, device number 69
[  831.134424][T16546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.369290][  T152] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  833.342391][  T152] usb 4-1: Using ep0 maxpacket: 8
[  833.542654][  T152] usb 4-1: config 32 has an invalid interface number: 77 but max is 1
[  833.571445][  T152] usb 4-1: config 32 has an invalid interface number: 5 but max is 1
[  833.617620][  T152] usb 4-1: config 32 has no interface number 0
[  833.644503][  T152] usb 4-1: config 32 has no interface number 1
[  833.671797][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  833.717656][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  833.847409][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  833.899300][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  833.931538][  T152] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  833.990194][  T152] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  834.031569][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  834.052586][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  834.089056][  T152] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  834.109263][  T152] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0xB, skipping
[  834.121773][  T152] usb 4-1: config 32 interface 5 altsetting 32 has an invalid endpoint with address 0x0, skipping
[  834.147335][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0x4, skipping
[  834.185940][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0xB, skipping
[  834.227309][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0xE, skipping
[  834.272359][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0x7, skipping
[  834.302472][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0x5, skipping
[  834.329588][  T152] usb 4-1: config 32 interface 5 altsetting 32 has an invalid endpoint with address 0x0, skipping
[  834.357376][  T152] usb 4-1: config 32 interface 5 altsetting 32 has a duplicate endpoint with address 0xB, skipping
[  834.398854][  T152] usb 4-1: config 32 interface 77 has no altsetting 0
[  834.416142][  T152] usb 4-1: config 32 interface 5 has no altsetting 0
[  834.482498][  T152] usb 4-1: string descriptor 0 read error: -71
[  834.490319][  T152] usb 4-1: Dual-Role OTG device on HNP port
[  834.548327][  T152] usb 4-1: can't set HNP mode: -71
[  834.712462][   T14] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  834.892554][  T154] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  835.093993][   T14] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  835.214229][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.222654][  T154] usb 1-1: Using ep0 maxpacket: 32
[  836.132573][  T154] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  836.278487][   T14] usb 3-1: config 0 descriptor??
[  836.289703][  T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 193, setting to 64
[  836.522749][  T154] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  836.554146][  T154] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  836.594729][  T154] usb 1-1: Product: syz
[  836.614563][  T154] usb 1-1: Manufacturer: syz
[  836.630704][  T154] usb 1-1: SerialNumber: syz
[  836.656291][  T154] usb 1-1: config 0 descriptor??
[  836.705860][  T154] ldusb 1-1:0.0: Interrupt in endpoint not found
[  836.792877][   T14] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f
[  836.805286][   T14] hackrf 3-1:0.0: Could not detect board
[  836.816896][   T14] hackrf: probe of 3-1:0.0 failed with error -71
[  836.840430][   T14] usb 3-1: USB disconnect, device number 57
[  836.918437][  T154] usb 1-1: USB disconnect, device number 54
[  837.042516][ T3591] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  837.292551][ T3591] usb 2-1: Using ep0 maxpacket: 16
[  837.413078][ T3591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  837.439795][ T3591] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  837.469543][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.505972][ T3591] usb 2-1: config 0 descriptor??
[  837.514108][T16641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3789'.
[  837.556401][T16641] netlink: 'syz.3.3789': attribute type 21 has an invalid length.
[  837.584788][T16641] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3789'.
[  837.636921][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'.
[  837.953320][ T4180] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  837.965433][T16633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.999498][T16633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.024898][ T3591] hid (null): report_id 0 is invalid
[  838.036746][ T3591] hid (null): unknown global tag 0xc
[  838.055094][ T3591] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1
[  838.059721][T16654] loop2: detected capacity change from 0 to 512
[  838.065846][ T3591] hid-generic 0003:0158:0100.000D: unexpected long global item
[  838.079952][ T3591] hid-generic: probe of 0003:0158:0100.000D failed with error -22
[  838.150604][T16654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  838.216065][T16654] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[  838.222528][ T4180] usb 4-1: Using ep0 maxpacket: 32
[  838.235503][  T154] usb 2-1: USB disconnect, device number 70
[  838.266429][T16654] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  838.338219][T14770] EXT4-fs (loop2): unmounting filesystem.
[  838.360209][ T4180] usb 4-1: descriptor type invalid, skip
[  838.369295][ T4180] usb 4-1: descriptor type invalid, skip
[  838.377481][ T4180] usb 4-1: descriptor type invalid, skip
[  838.462532][ T4180] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  838.652470][ T4180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  838.662359][ T3757] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  838.667789][ T4180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.691499][ T4180] usb 4-1: Product: syz
[  838.696234][ T4180] usb 4-1: Manufacturer: syz
[  838.700973][ T4180] usb 4-1: SerialNumber: syz
[  838.779022][ T4180] cdc_ether: probe of 4-1:1.0 failed with error -22
[  838.892546][ T5927] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  838.912526][ T3757] usb 5-1: Using ep0 maxpacket: 8
[  838.958644][ T4180] usb 4-1: USB disconnect, device number 75
[  839.032738][ T3757] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  839.043046][ T3757] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  839.058387][ T3757] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  839.071383][ T3757] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  839.092336][ T3757] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  839.105098][ T3757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.133844][ T5927] usb 1-1: Using ep0 maxpacket: 16
[  839.172616][  T154] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  839.254834][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  839.292736][ T5927] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  839.336639][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.370179][ T5927] usb 1-1: config 0 descriptor??
[  839.380944][ T3757] usb 5-1: usb_control_msg returned -71
[  839.387023][ T3757] usbtmc 5-1:16.0: can't read capabilities
[  839.405951][T16672] loop2: detected capacity change from 0 to 1024
[  839.409235][ T3757] usb 5-1: USB disconnect, device number 61
[  839.571134][T16674] device netdevsim0 entered promiscuous mode
[  839.582346][  T154] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  839.610659][  T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.631049][  T154] usb 2-1: config 0 descriptor??
[  839.874088][T16667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.907301][T16667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.932385][ T4194] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  839.961279][T16687] loop3: detected capacity change from 0 to 512
[  839.973946][ T5927] hid (null): unknown global tag 0xd
[  839.987013][ T5927] hid (null): report_id 0 is invalid
[  840.002226][ T5927] hid (null): report_id 0 is invalid
[  840.016097][T16687] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  840.029070][ T5927] hid (null): unknown global tag 0xc
[  840.039333][ T5927] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1
[  840.050782][ T5927] hid-generic 0003:0158:0100.000E: unexpected long global item
[  840.061300][ T5927] hid-generic: probe of 0003:0158:0100.000E failed with error -22
[  840.110169][T16687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3804: bg 0: block 248: padding at end of block bitmap is not set
[  840.131592][  T154] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f
[  840.139789][T16687] Quota error (device loop3): write_blk: dquota write failed
[  840.151282][T16687] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  840.151587][  T154] hackrf 2-1:0.0: Could not detect board
[  840.162390][  T154] hackrf: probe of 2-1:0.0 failed with error -71
[  840.188060][  T154] usb 2-1: USB disconnect, device number 71
[  840.198865][ T5927] usb 1-1: USB disconnect, device number 55
[  840.205238][T16687] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.3804: Failed to acquire dquot type 1
[  840.228074][T16687] EXT4-fs (loop3): 1 truncate cleaned up
[  840.234369][T16687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  840.245416][T16687] ext4 filesystem being mounted at /root/syzkaller.mohioy/167/bus supports timestamps until 2038 (0x7fffffff)
[  840.284412][ T3558] Bluetooth: hci3: Dropping invalid advertising data
[  840.294008][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  840.305958][T16687] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.3804: deleted inode referenced: 12
[  840.317232][T16696] vivid-008: disconnect
[  840.322516][ T4194] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  840.339636][T16695] vivid-008: reconnect
[  840.345345][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.357524][ T4194] usb 3-1: config 0 descriptor??
[  840.602436][ T3757] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  840.646357][ T3558] Bluetooth: hci5: unknown advertising packet type: 0x65
[  840.646410][ T3558] Bluetooth: hci5: Malformed LE Event: 0x02
[  840.682431][ T4194] ath6kl: Failed to submit usb control message: -71
[  840.689087][ T4194] ath6kl: unable to send the bmi data to the device: -71
[  840.707137][ T4194] ath6kl: Unable to send get target info: -71
[  840.717347][ T4194] ath6kl: Failed to init ath6kl core: -71
[  840.781689][ T4194] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  840.806205][ T4194] usb 3-1: USB disconnect, device number 58
[  841.032634][ T3757] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  841.048673][T16710] loop1: detected capacity change from 0 to 1024
[  841.055253][ T3757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.085572][ T3757] usb 4-1: config 0 descriptor??
[  841.439003][T16726] loop4: detected capacity change from 0 to 512
[  841.449485][T16726] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  841.506332][T16726] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.3816: iget: bad i_size value: -67835469387268086
[  841.526516][T16726] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3816: couldn't read orphan inode 15 (err -117)
[  842.116012][T16726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  842.131272][T16726] ext2 filesystem being mounted at /root/syzkaller.3zhbuQ/180/file0 supports timestamps until 2038 (0x7fffffff)
[  842.265721][T13396] EXT4-fs (loop4): unmounting filesystem.
[  842.303127][ T3757] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  842.312132][ T3757] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  842.352850][ T3757] [drm:udl_init] *ERROR* Selecting channel failed
[  842.374966][ T3757] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  842.438214][ T3757] [drm] Initialized udl on minor 2
[  842.452247][T16739] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  842.463923][ T3757] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  842.491600][ T3757] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  842.519726][ T3757] usb 4-1: USB disconnect, device number 76
[  842.779310][ T3558] Bluetooth: hci4: Malformed LE Event: 0x0d
[  842.891069][T13620] EXT4-fs (loop3): unmounting filesystem.
[  842.923134][T16761] loop4: detected capacity change from 0 to 512
[  842.978769][T16761] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  843.072409][  T154] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  843.088330][T16761] Quota error (device loop4): v2_read_file_info: Free block number too big (58381 >= 6).
[  843.099230][T16761] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  843.151666][T13396] EXT4-fs (loop4): unmounting filesystem.
[  843.315357][  T154] usb 1-1: Using ep0 maxpacket: 8
[  843.332382][  T152] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  843.812967][  T154] usb 1-1: config 32 has an invalid interface number: 77 but max is 1
[  843.837501][  T154] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  843.914392][  T154] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  843.999882][  T154] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  844.087822][  T154] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  844.162973][  T154] usb 1-1: config 32 has no interface number 0
[  844.399329][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  844.431197][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  844.591143][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  844.591181][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  844.591209][  T154] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  844.591232][  T154] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  844.591254][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  844.591280][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  844.591306][  T154] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  844.591330][  T154] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  844.591351][  T154] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  844.591378][  T154] usb 1-1: config 32 interface 77 has no altsetting 0
[  844.652579][  T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  844.752503][  T154] usb 1-1: Dual-Role OTG device on HNP port
[  844.759669][  T152] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  844.759699][  T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.764449][  T152] usb 4-1: config 0 descriptor??
[  844.773369][  T154] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  844.773400][  T154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.773421][  T154] usb 1-1: Product: syz
[  844.773437][  T154] usb 1-1: Manufacturer: syz
[  844.773453][  T154] usb 1-1: SerialNumber: syz
[  844.912598][   T14] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  844.953469][ T3757] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  845.016626][T16794] loop4: detected capacity change from 0 to 512
[  845.018033][ T3558] Bluetooth: hci2: unknown advertising packet type: 0x65
[  845.023577][ T3558] Bluetooth: hci2: Malformed LE Event: 0x02
[  845.058477][T16794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  845.067686][  T152] ath6kl: Failed to submit usb control message: -71
[  845.077155][  T152] ath6kl: unable to send the bmi data to the device: -71
[  845.084493][  T152] ath6kl: Unable to send get target info: -71
[  845.091575][  T152] ath6kl: Failed to init ath6kl core: -71
[  845.120484][  T152] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  845.123166][T16794] Quota error (device loop4): v2_read_file_info: Free block number too big (58381 >= 6).
[  845.131975][  T152] usb 4-1: USB disconnect, device number 77
[  845.145338][T16794] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  845.184776][T13396] EXT4-fs (loop4): unmounting filesystem.
[  845.202052][   T14] usb 3-1: Using ep0 maxpacket: 8
[  845.222455][ T3757] usb 2-1: Using ep0 maxpacket: 16
[  845.253763][  T154] option 1-1:32.77: GSM modem (1-port) converter detected
[  845.283666][  T154] usb 1-1: USB disconnect, device number 56
[  845.301441][  T154] option 1-1:32.77: device disconnected
[  845.352520][ T3757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  845.364000][   T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  845.374851][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  845.385946][ T3757] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  845.395749][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  845.408720][ T3757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.428113][ T3757] usb 2-1: config 0 descriptor??
[  845.434909][   T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  845.451754][   T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  845.461778][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.732572][   T14] usb 3-1: usb_control_msg returned -71
[  845.738190][   T14] usbtmc 3-1:16.0: can't read capabilities
[  845.796675][   T14] usb 3-1: USB disconnect, device number 59
[  845.860041][T16813] program syz.0.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  845.913569][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.925547][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.959151][ T3757] hid (null): report_id 0 is invalid
[  845.965089][ T3757] hid (null): unknown global tag 0xc
[  845.989923][ T3757] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1
[  846.008755][ T3757] hid-generic 0003:0158:0100.000F: unexpected long global item
[  846.030658][ T3757] hid-generic: probe of 0003:0158:0100.000F failed with error -22
[  846.162551][ T4194] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  846.168268][ T3757] usb 2-1: USB disconnect, device number 72
[  846.412339][ T4194] usb 1-1: Using ep0 maxpacket: 16
[  846.702474][ T4194] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  846.762367][ T4194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.818884][ T4194] usb 1-1: Product: syz
[  846.846712][ T4194] usb 1-1: Manufacturer: syz
[  846.851346][ T4194] usb 1-1: SerialNumber: syz
[  846.903157][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[  846.922743][ T4194] usb 1-1: config 0 descriptor??
[  847.251570][ T4194] usb 1-1: USB disconnect, device number 57
[  847.516480][ T3558] Bluetooth: hci2: SCO packet for unknown connection handle 1
[  847.578014][T16849] loop3: detected capacity change from 0 to 64
[  847.591915][  T154] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  847.762592][   T14] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  847.852396][  T154] usb 5-1: Using ep0 maxpacket: 16
[  848.002780][  T154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  848.014074][   T14] usb 3-1: Using ep0 maxpacket: 8
[  848.030183][  T154] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  848.054413][  T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.079209][  T154] usb 5-1: config 0 descriptor??
[  848.145366][   T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  848.175206][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  848.197552][   T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  848.207964][   T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.232449][   T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  848.251776][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.575157][T16846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  848.597625][T16846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  848.606009][   T14] usb 3-1: usb_control_msg returned -71
[  848.612140][   T14] usbtmc 3-1:16.0: can't read capabilities
[  848.665631][  T154] hid (null): unknown global tag 0xd
[  848.671257][  T154] hid (null): report_id 0 is invalid
[  848.681395][   T14] usb 3-1: USB disconnect, device number 60
[  848.705221][  T154] hid (null): unknown global tag 0xa5
[  848.726109][  T154] hid (null): unknown global tag 0xd
[  848.741788][  T154] hid (null): unknown global tag 0xc
[  848.749235][  T154] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1
[  848.786110][  T154] hid-generic 0003:0158:0100.0010: unexpected long global item
[  848.813106][  T154] hid-generic: probe of 0003:0158:0100.0010 failed with error -22
[  848.858999][ T3558] Bluetooth: hci2: Dropping invalid advertising data
[  848.870791][T16868] vivid-006: disconnect
[  848.878970][T16867] vivid-006: reconnect
[  848.881620][  T154] usb 5-1: USB disconnect, device number 62
[  849.100069][T16872] loop1: detected capacity change from 0 to 512
[  849.139209][T16872] EXT4-fs: Ignoring removed mblk_io_submit option
[  849.198628][T16872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  849.361954][T16872] EXT4-fs (loop1): 1 truncate cleaned up
[  849.373646][T16872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  849.475072][T16881] loop0: detected capacity change from 0 to 512
[  849.488272][ T3558] Bluetooth: hci5: Malformed LE Event: 0x0d
[  849.521560][T13058] EXT4-fs (loop1): unmounting filesystem.
[  849.582759][T16881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  849.653884][T16881] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  849.700006][T16881] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  849.784494][T16898] program syz.1.3870 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  849.833024][T14832] EXT4-fs (loop0): unmounting filesystem.
[  850.121284][ T3558] Bluetooth: hci0: SCO packet for unknown connection handle 1
[  850.142385][  T154] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  850.265052][T16911] loop0: detected capacity change from 0 to 64
[  851.202537][  T154] usb 2-1: Using ep0 maxpacket: 16
[  851.235184][ T3558] Bluetooth: hci3: Dropping invalid advertising data
[  851.256290][T16923] vivid-008: disconnect
[  851.293349][T16922] vivid-008: reconnect
[  851.512479][  T154] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  851.531421][  T154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.570438][  T154] usb 2-1: Product: syz
[  851.572407][ T3545] Bluetooth: hci5: command 0x0406 tx timeout
[  851.592538][ T3757] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  851.600238][  T154] usb 2-1: Manufacturer: syz
[  851.618174][  T154] usb 2-1: SerialNumber: syz
[  851.628437][  T154] usb 2-1: config 0 descriptor??
[  851.833095][ T3757] usb 4-1: Using ep0 maxpacket: 16
[  851.955315][ T3757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  851.980826][ T3757] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  852.035404][ T3757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.073672][ T3757] usb 4-1: config 0 descriptor??
[  852.208531][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[  852.340633][  T152] usb 2-1: USB disconnect, device number 73
[  852.553841][T16925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  852.597570][T16925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  852.599864][T16938] loop0: detected capacity change from 0 to 512
[  852.623553][ T3757] hid (null): unknown global tag 0xd
[  852.630137][ T3757] hid (null): report_id 0 is invalid
[  852.664032][T16938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  852.664455][ T3757] hid (null): unknown global tag 0xa5
[  852.707417][ T3757] hid (null): unknown global tag 0xd
[  852.731472][T16938] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6).
[  852.760729][ T3757] hid (null): unknown global tag 0xc
[  852.772825][T16938] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  852.800841][ T3757] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1
[  852.837162][ T3757] hid-generic 0003:0158:0100.0011: unexpected long global item
[  852.879412][ T3757] hid-generic: probe of 0003:0158:0100.0011 failed with error -22
[  852.918701][ T3757] usb 4-1: USB disconnect, device number 78
[  852.975281][T14832] EXT4-fs (loop0): unmounting filesystem.
[  853.649653][T16971] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  853.656299][T16971] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  853.706734][T16971] vhci_hcd vhci_hcd.0: Device attached
[  853.984649][ T3757] usb 18-1: SetAddress Request (8) to port 0
[  853.991942][ T3757] usb 18-1: new SuperSpeed USB device number 8 using vhci_hcd
[  854.052208][T16972] vhci_hcd: connection reset by peer
[  854.053858][ T3817] vhci_hcd: stop threads
[  854.053877][ T3817] vhci_hcd: release socket
[  854.053956][ T3817] vhci_hcd: disconnect device
[  854.973056][T16990] program syz.4.3901 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  855.122350][ T5927] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  855.289624][T16992] loop1: detected capacity change from 0 to 512
[  855.302471][   T14] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  855.335422][T16992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  855.366409][T16992] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6).
[  855.402123][T16992] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  855.514527][T13058] EXT4-fs (loop1): unmounting filesystem.
[  855.544782][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  855.561511][   T14] usb 5-1: Using ep0 maxpacket: 16
[  855.587645][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  855.609935][ T5927] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  855.629328][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.655937][ T5927] usb 4-1: config 0 descriptor??
[  855.826271][T17002] vivid-002: disconnect
[  855.840000][T17001] vivid-002: reconnect
[  855.875113][   T14] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  855.893703][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.911735][   T14] usb 5-1: Product: syz
[  855.944009][   T14] usb 5-1: Manufacturer: syz
[  855.949118][   T14] usb 5-1: SerialNumber: syz
[  856.007270][   T14] usb 5-1: config 0 descriptor??
[  856.172670][ T3558] Bluetooth: hci0: link tx timeout
[  856.179999][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  856.189757][ T3558] Bluetooth: hci0: link tx timeout
[  856.196087][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  856.287840][   T14] usb 5-1: USB disconnect, device number 63
[  856.392483][ T5927] usb 4-1: string descriptor 0 read error: -71
[  856.414828][ T5927] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71
[  856.432069][ T5927] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71
[  856.440888][ T5927] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71
[  856.450182][ T5927] uclogic 0003:256C:006D.0012: failed probing parameters: -71
[  856.459890][ T5927] uclogic: probe of 0003:256C:006D.0012 failed with error -71
[  856.470642][ T5927] usb 4-1: USB disconnect, device number 79
[  856.492515][  T152] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  856.813762][  T152] usb 1-1: device descriptor read/64, error -71
[  857.082370][  T152] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  857.119967][T17028] loop3: detected capacity change from 0 to 512
[  857.143596][T17028] EXT4-fs: Ignoring removed mblk_io_submit option
[  857.161954][T17028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  857.234349][T17028] EXT4-fs (loop3): 1 truncate cleaned up
[  857.240049][T17028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  857.401580][T13620] EXT4-fs (loop3): unmounting filesystem.
[  857.412883][  T152] usb 1-1: device descriptor read/64, error -71
[  857.560003][  T152] usb usb1-port1: attempt power cycle
[  857.972632][  T152] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  857.982499][ T4194] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  858.112647][  T152] usb 1-1: device descriptor read/8, error -71
[  858.452544][  T152] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  858.463660][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  858.485078][ T4194] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  858.498765][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.521275][ T4194] usb 4-1: config 0 descriptor??
[  858.547263][   T14] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  858.562748][  T152] usb 1-1: device descriptor read/8, error -71
[  858.607831][ T3558] Bluetooth: hci0: link tx timeout
[  858.614376][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  858.622243][ T3558] Bluetooth: hci0: link tx timeout
[  858.627555][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  858.682815][  T152] usb usb1-port1: unable to enumerate USB device
[  858.781598][ T3558] Bluetooth: hci2: unknown advertising packet type: 0x65
[  858.781645][ T3558] Bluetooth: hci2: Malformed LE Event: 0x02
[  858.794947][ T4194] ath6kl: Failed to submit usb control message: -71
[  858.801694][ T4194] ath6kl: unable to send the bmi data to the device: -71
[  858.809017][ T4194] ath6kl: Unable to send get target info: -71
[  858.815909][ T4194] ath6kl: Failed to init ath6kl core: -71
[  858.840660][ T4194] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  858.849851][ T4194] usb 4-1: USB disconnect, device number 80
[  858.920120][T17060] loop2: detected capacity change from 0 to 1024
[  858.962792][   T14] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  858.971862][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.988252][   T14] usb 5-1: config 0 descriptor??
[  859.092425][ T3757] usb 18-1: device descriptor read/8, error -110
[  859.367353][T17067] loop0: detected capacity change from 0 to 512
[  859.392497][ T3744] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  859.400523][T17067] EXT4-fs: Ignoring removed mblk_io_submit option
[  859.433536][T17067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  859.471736][T17076] loop1: detected capacity change from 0 to 512
[  859.479347][T17067] EXT4-fs (loop0): 1 truncate cleaned up
[  859.485706][T17067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  859.543287][ T3757] usb usb18-port1: attempt power cycle
[  859.562254][T17076] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  859.642105][T14832] EXT4-fs (loop0): unmounting filesystem.
[  859.644622][T17076] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.3930: iget: bad i_size value: -67835469387268086
[  859.709999][T17076] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3930: couldn't read orphan inode 15 (err -117)
[  859.724176][T17076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  859.743653][T17076] ext2 filesystem being mounted at /root/syzkaller.4dBfRF/248/file0 supports timestamps until 2038 (0x7fffffff)
[  859.782756][ T3744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.793927][ T3744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.804043][ T3744] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  859.814463][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.827163][ T3744] usb 3-1: config 0 descriptor??
[  859.856965][T13058] EXT4-fs (loop1): unmounting filesystem.
[  860.098596][T17096] loop3: detected capacity change from 0 to 512
[  860.166355][T17096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  860.193381][ T3757] usb usb18-port1: unable to enumerate USB device
[  860.211316][T17096] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3938: bg 0: block 248: padding at end of block bitmap is not set
[  860.227420][T17096] Quota error (device loop3): write_blk: dquota write failed
[  860.235239][T17096] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  860.242425][  T152] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  860.248723][T17096] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.3938: Failed to acquire dquot type 1
[  860.267439][T17096] EXT4-fs (loop3): 1 truncate cleaned up
[  860.274165][T17096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  860.283777][T17096] ext4 filesystem being mounted at /root/syzkaller.mohioy/193/bus supports timestamps until 2038 (0x7fffffff)
[  860.322543][   T14] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0f
[  860.336320][   T14] hackrf 5-1:0.0: Could not detect board
[  860.360636][T17096] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.3938: deleted inode referenced: 12
[  860.391285][   T14] hackrf: probe of 5-1:0.0 failed with error -110
[  860.492378][  T152] usb 2-1: Using ep0 maxpacket: 32
[  860.523205][ T3744] usb 3-1: string descriptor 0 read error: -71
[  860.552494][ T3744] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71
[  860.572362][ T3744] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71
[  860.580733][ T3744] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71
[  860.589777][ T3744] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[  860.597883][ T3744] uclogic: probe of 0003:256C:006D.0013 failed with error -71
[  860.613035][  T152] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  860.620880][ T3744] usb 3-1: USB disconnect, device number 61
[  860.624693][  T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  860.662423][ T4194] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  860.832646][  T152] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  860.846329][  T152] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  860.857111][  T152] usb 2-1: Product: syz
[  860.861364][  T152] usb 2-1: Manufacturer: syz
[  860.870587][  T152] usb 2-1: SerialNumber: syz
[  860.890789][  T152] usb 2-1: config 0 descriptor??
[  860.936605][  T152] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  860.950553][ T3558] Bluetooth: hci0: link tx timeout
[  860.956688][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  860.964480][ T3558] Bluetooth: hci0: link tx timeout
[  860.969732][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  860.978097][  T152] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  861.001079][  T152] usb 5-1: USB disconnect, device number 64
[  861.032479][ T4194] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  861.044185][ T4194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.054723][ T4194] usb 4-1: config 0 descriptor??
[  861.181318][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.198693][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.228063][T17092] ldusb 2-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  861.329011][T17114] loop2: detected capacity change from 0 to 512
[  861.336656][T17114] EXT4-fs: Ignoring removed mblk_io_submit option
[  861.359737][T17114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  861.375898][T17114] EXT4-fs (loop2): 1 truncate cleaned up
[  861.381807][T17114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  861.421747][T14770] EXT4-fs (loop2): unmounting filesystem.
[  861.502344][  T152] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  861.530575][T17119] loop2: detected capacity change from 0 to 512
[  861.541822][T17119] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  861.568103][T17119] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.3947: iget: bad i_size value: -67835469387268086
[  861.581355][ T4194] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  861.583932][T17119] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3947: couldn't read orphan inode 15 (err -117)
[  861.590967][ T4194] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  861.613405][T17119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  861.622084][T17119] ext2 filesystem being mounted at /root/syzkaller.CKwLlg/139/file0 supports timestamps until 2038 (0x7fffffff)
[  861.703473][ T4194] [drm:udl_init] *ERROR* Selecting channel failed
[  861.717179][ T4194] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  861.724926][ T4194] [drm] Initialized udl on minor 2
[  861.745026][ T4194] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  861.754525][ T4194] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  861.755779][T14770] EXT4-fs (loop2): unmounting filesystem.
[  861.763825][ T4194] usb 4-1: USB disconnect, device number 81
[  861.773339][ T4180] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  861.788459][ T4180] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  861.799212][ T4180] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  861.922699][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  861.922746][  T152] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  861.922771][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.925308][  T152] usb 5-1: config 0 descriptor??
[  861.951279][T17128] device vcan0 entered promiscuous mode
[  861.951477][T17128] device vlan2 entered promiscuous mode
[  861.951773][T17128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  861.951844][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  862.099881][T13620] EXT4-fs (loop3): unmounting filesystem.
[  862.248814][ T3757] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  862.257175][ T3558] Bluetooth: hci3: unknown advertising packet type: 0x65
[  862.257216][ T3558] Bluetooth: hci3: Malformed LE Event: 0x02
[  862.342381][ T3744] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  862.471302][  T152] ath6kl: Failed to submit usb control message: -71
[  862.478060][  T152] ath6kl: unable to send the bmi data to the device: -71
[  862.503283][  T152] ath6kl: Unable to send get target info: -71
[  862.511844][  T152] ath6kl: Failed to init ath6kl core: -71
[  862.537994][  T152] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  862.548641][  T152] usb 5-1: USB disconnect, device number 65
[  862.650246][ T3757] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  862.655062][T17143] loop3: detected capacity change from 0 to 512
[  862.660021][ T3757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.694408][ T3757] usb 1-1: config 0 descriptor??
[  862.696285][T17143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  862.726605][T17143] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6).
[  862.737235][T17143] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  862.742610][ T3744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.768379][ T3744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.780348][ T3744] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  862.795113][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.805875][T13620] EXT4-fs (loop3): unmounting filesystem.
[  862.823921][ T3744] usb 3-1: config 0 descriptor??
[  863.202612][ T3558] Bluetooth: hci0: link tx timeout
[  863.208604][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  863.862065][ T3757] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  863.882506][ T3757] hackrf 1-1:0.0: Could not detect board
[  863.888236][ T3757] hackrf: probe of 1-1:0.0 failed with error -71
[  863.896855][ T3757] usb 1-1: USB disconnect, device number 62
[  863.902940][ T3744] usb 3-1: string descriptor 0 read error: -71
[  863.929641][ T3744] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71
[  863.955035][ T3744] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71
[  863.969552][ T3744] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71
[  863.978385][ T3744] uclogic 0003:256C:006D.0014: failed probing parameters: -71
[  863.988454][ T3744] uclogic: probe of 0003:256C:006D.0014 failed with error -71
[  864.008704][ T3744] usb 3-1: USB disconnect, device number 62
[  864.367137][T17178] loop2: detected capacity change from 0 to 512
[  864.468368][T17178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  864.521967][T17178] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[  864.555022][T17178] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  864.603460][T14770] EXT4-fs (loop2): unmounting filesystem.
[  864.928809][ T4180] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  866.002671][ T3558] Bluetooth: hci0: link tx timeout
[  866.007830][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  866.312487][T17092] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[  866.417315][ T3744] usb 2-1: USB disconnect, device number 74
[  866.515957][ T3744] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  866.732703][ T4180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  866.748358][T17226] loop1: detected capacity change from 0 to 1024
[  866.749348][ T4180] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  866.769005][ T4180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.822812][ T4180] usb 1-1: config 0 descriptor??
[  866.840704][T17231] loop2: detected capacity change from 0 to 128
[  867.082391][ T3558] Bluetooth: hci0: unknown advertising packet type: 0x65
[  867.082439][ T3558] Bluetooth: hci0: Malformed LE Event: 0x02
[  867.303122][ T4180] ath6kl: Failed to submit usb control message: -71
[  867.404436][ T4180] ath6kl: unable to send the bmi data to the device: -71
[  867.581992][ T4180] ath6kl: Unable to send get target info: -71
[  867.774758][ T4180] ath6kl: Failed to init ath6kl core: -71
[  867.856308][ T4180] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  867.875451][ T4180] usb 1-1: USB disconnect, device number 63
[  869.223538][ T3558] Bluetooth: hci0: link tx timeout
[  869.228710][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  869.411796][T17253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3991'.
[  869.458416][T17253] netlink: 'syz.4.3991': attribute type 21 has an invalid length.
[  869.480864][T17253] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3991'.
[  869.495424][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3991'.
[  869.554241][T17265] program syz.3.3994 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  869.682427][ T4180] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  869.690047][ T3591] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  869.792356][  T152] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  869.842648][ T4194] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  869.932501][ T4180] usb 2-1: Using ep0 maxpacket: 32
[  870.042378][  T152] usb 5-1: Using ep0 maxpacket: 32
[  870.053267][ T3591] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  870.062589][ T4180] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  870.070745][ T4180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  870.092714][ T3591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.102587][ T4194] usb 4-1: Using ep0 maxpacket: 16
[  870.120994][ T3591] usb 3-1: config 0 descriptor??
[  870.162580][  T152] usb 5-1: descriptor type invalid, skip
[  870.242672][  T152] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  870.282498][ T4180] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  870.298038][ T4180] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  870.307463][ T4180] usb 2-1: Product: syz
[  870.311652][ T4180] usb 2-1: Manufacturer: syz
[  870.319512][ T4180] usb 2-1: SerialNumber: syz
[  870.326355][ T4180] usb 2-1: config 0 descriptor??
[  870.364442][ T4180] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  870.382703][ T4194] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  870.407094][ T4180] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  870.416599][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.425071][  T152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  870.434695][  T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.444414][ T4194] usb 4-1: Product: syz
[  870.448603][ T4194] usb 4-1: Manufacturer: syz
[  870.454652][  T152] usb 5-1: Product: syz
[  870.458837][  T152] usb 5-1: Manufacturer: syz
[  870.463797][ T4194] usb 4-1: SerialNumber: syz
[  870.468525][  T152] usb 5-1: SerialNumber: syz
[  870.477165][ T4194] usb 4-1: config 0 descriptor??
[  870.524321][  T152] cdc_ether: probe of 5-1:1.0 failed with error -22
[  870.576681][T17258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.587729][T17258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.612426][ T3591] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f
[  870.619673][ T3591] hackrf 3-1:0.0: Could not detect board
[  870.625394][ T3591] hackrf: probe of 3-1:0.0 failed with error -71
[  870.633102][ T3591] usb 3-1: USB disconnect, device number 63
[  870.729823][ T3757] usb 4-1: USB disconnect, device number 82
[  870.752437][ T3744] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  870.960162][T17272] ldusb 2-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  871.012416][ T3744] usb 1-1: Using ep0 maxpacket: 8
[  871.172677][ T3744] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  871.182749][ T3744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  871.192556][ T3744] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  871.204300][ T3744] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  871.218140][ T3744] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  871.227279][ T3744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.248073][ T3591] usb 2-1: USB disconnect, device number 75
[  871.264295][ T3757] usb 5-1: USB disconnect, device number 66
[  871.264970][ T3591] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  871.512642][ T3744] usb 1-1: GET_CAPABILITIES returned 0
[  871.518744][ T3744] usbtmc 1-1:16.0: can't read capabilities
[  871.617415][T17286] loop3: detected capacity change from 0 to 128
[  871.740197][ T3744] usb 1-1: USB disconnect, device number 64
[  872.828286][ T3558] Bluetooth: hci0: link tx timeout
[  872.833486][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  873.167605][T17305] loop0: detected capacity change from 0 to 1024
[  873.279919][T17308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4009'.
[  873.336391][T17308] netlink: 'syz.3.4009': attribute type 21 has an invalid length.
[  873.379330][T17308] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4009'.
[  873.418337][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'.
[  873.682392][   T14] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  873.712617][ T3591] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  873.942510][  T152] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  873.952368][ T3591] usb 4-1: Using ep0 maxpacket: 32
[  873.975548][ T4194] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  874.072463][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  874.072639][ T3591] usb 4-1: descriptor type invalid, skip
[  874.093118][   T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  874.104754][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.118843][   T14] usb 1-1: config 0 descriptor??
[  874.172666][ T3591] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  874.202603][  T152] usb 2-1: Using ep0 maxpacket: 8
[  874.232365][ T4194] usb 3-1: Using ep0 maxpacket: 32
[  874.342805][ T3591] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  874.352490][ T4194] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  874.372537][ T3591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.385220][ T4194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  874.402549][  T152] usb 2-1: config 32 has an invalid interface number: 77 but max is 1
[  874.413504][ T3558] Bluetooth: hci0: unknown advertising packet type: 0x65
[  874.413550][ T3558] Bluetooth: hci0: Malformed LE Event: 0x02
[  874.432623][   T14] ath6kl: Failed to submit usb control message: -71
[  874.439081][  T152] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  874.439325][   T14] ath6kl: unable to send the bmi data to the device: -71
[  874.448308][ T3591] usb 4-1: Product: syz
[  874.463625][  T152] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  874.480607][ T3591] usb 4-1: Manufacturer: syz
[  874.485454][   T14] ath6kl: Unable to send get target info: -71
[  874.487978][ T3591] usb 4-1: SerialNumber: syz
[  874.496301][  T152] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  874.503397][   T14] ath6kl: Failed to init ath6kl core: -71
[  874.516186][  T152] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  874.539823][  T152] usb 2-1: config 32 has no interface number 0
[  874.546525][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  874.563420][ T3591] cdc_ether: probe of 4-1:1.0 failed with error -22
[  874.579313][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  874.580500][   T14] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  874.593058][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  874.609239][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  874.614130][   T14] usb 1-1: USB disconnect, device number 65
[  874.621018][  T152] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  874.644488][ T4194] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  874.667598][ T4194] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  874.678741][  T152] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  874.690109][ T4194] usb 3-1: Product: syz
[  874.695561][ T4194] usb 3-1: Manufacturer: syz
[  874.700254][ T4194] usb 3-1: SerialNumber: syz
[  874.705198][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  874.718077][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  874.730115][ T4194] usb 3-1: config 0 descriptor??
[  874.735599][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  874.747344][  T152] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  874.757618][  T152] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  874.778441][ T4194] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  874.794950][  T152] usb 2-1: config 32 interface 77 has no altsetting 0
[  874.813919][ T3591] usb 4-1: USB disconnect, device number 83
[  874.827926][ T4194] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  874.952437][  T152] usb 2-1: Dual-Role OTG device on HNP port
[  874.972530][  T152] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  874.991224][  T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.009869][  T152] usb 2-1: Product: syz
[  875.044122][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.052611][  T152] usb 2-1: Manufacturer: syz
[  875.060510][  T152] usb 2-1: SerialNumber: syz
[  875.071905][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.094117][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  875.100486][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  875.453542][  T152] option 2-1:32.77: GSM modem (1-port) converter detected
[  875.497072][  T152] usb 2-1: USB disconnect, device number 76
[  875.508694][T17343] ldusb 3-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  875.528124][  T152] option 2-1:32.77: device disconnected
[  875.840515][ T3558] Bluetooth: hci0: link tx timeout
[  875.849603][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  875.857530][ T3558] Bluetooth: hci0: link tx timeout
[  875.862740][ T3558] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  875.871589][ T4191] usb 3-1: USB disconnect, device number 64
[  875.888560][ T4191] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  876.158918][T17358] program syz.4.4025 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  876.388768][ T3558] Bluetooth: hci4: Malformed LE Event: 0x0d
[  876.452468][   T14] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  876.863562][T17368] loop2: detected capacity change from 0 to 512
[  876.964141][T17368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  877.013257][T17368] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[  877.068126][T17368] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  877.123593][   T14] usb 5-1: Using ep0 maxpacket: 16
[  877.191460][T14770] EXT4-fs (loop2): unmounting filesystem.
[  877.349533][T17380] loop3: detected capacity change from 0 to 512
[  877.397827][T17380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  877.432814][   T14] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  877.455559][T17380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4035: bg 0: block 248: padding at end of block bitmap is not set
[  877.476295][T17380] Quota error (device loop3): write_blk: dquota write failed
[  877.484092][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.496780][T17380] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  877.522391][T17380] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.4035: Failed to acquire dquot type 1
[  877.525633][   T14] usb 5-1: Product: syz
[  877.555086][T17380] EXT4-fs (loop3): 1 truncate cleaned up
[  877.560410][   T14] usb 5-1: Manufacturer: syz
[  877.589724][   T14] usb 5-1: SerialNumber: syz
[  877.593371][T17380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  877.611665][T17380] ext4 filesystem being mounted at /root/syzkaller.mohioy/222/bus supports timestamps until 2038 (0x7fffffff)
[  877.658756][T17380] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.4035: deleted inode referenced: 12
[  877.659797][   T14] usb 5-1: config 0 descriptor??
[  877.952399][ T5927] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  877.962369][ T4191] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  878.016079][ T3757] usb 5-1: USB disconnect, device number 67
[  878.207506][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  878.265263][T17404] device vcan0 entered promiscuous mode
[  878.271388][T17404] device vlan2 entered promiscuous mode
[  878.282989][T17404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  878.296384][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  878.342587][ T4191] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  878.351703][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.383287][ T4191] usb 4-1: config 0 descriptor??
[  878.446266][ T5927] usb 3-1: config 32 has an invalid interface number: 77 but max is 1
[  878.465889][ T5927] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  878.492312][ T5927] usb 3-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  878.528141][ T5927] usb 3-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  878.548993][ T5927] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2
[  878.582433][ T5927] usb 3-1: config 32 has no interface number 0
[  878.606037][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  878.652356][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  878.690096][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  878.712557][T17407] loop1: detected capacity change from 0 to 512
[  878.722368][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  878.759033][ T5927] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  878.790375][ T5927] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  878.791094][T17407] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  878.826673][T17407] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.4043: iget: bad i_size value: -67835469387268086
[  878.831896][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  878.845604][T17407] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4043: couldn't read orphan inode 15 (err -117)
[  878.874004][T17407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  878.887236][T17407] ext2 filesystem being mounted at /root/syzkaller.4dBfRF/263/file0 supports timestamps until 2038 (0x7fffffff)
[  878.907743][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  878.946908][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  879.007899][ T5927] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  879.052371][ T5927] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  879.074440][ T5927] usb 3-1: config 32 interface 77 has no altsetting 0
[  879.122435][ T4191] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  879.130986][ T4191] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  879.157011][T13058] EXT4-fs (loop1): unmounting filesystem.
[  879.162523][ T4191] [drm:udl_init] *ERROR* Selecting channel failed
[  879.193598][ T4191] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  879.201545][ T4191] [drm] Initialized udl on minor 2
[  879.245576][ T3717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.252523][ T4191] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  879.260002][ T5927] usb 3-1: Dual-Role OTG device on HNP port
[  879.299044][ T5927] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  879.302602][ T4191] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  879.311127][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.342424][ T5927] usb 3-1: Product: syz
[  879.346792][ T5927] usb 3-1: Manufacturer: syz
[  879.351397][ T5927] usb 3-1: SerialNumber: syz
[  879.354119][ T4191] usb 4-1: USB disconnect, device number 84
[  879.362649][ T3591] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  879.382742][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  879.389744][ T3591] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  879.412382][ T3591] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  879.490573][ T3717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.603792][ T3717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.655718][T13620] EXT4-fs (loop3): unmounting filesystem.
[  879.771078][ T3717] bond0: (slave netdevsim0): Releasing backup interface
[  879.794096][ T3717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.833549][ T5927] option 3-1:32.77: GSM modem (1-port) converter detected
[  879.871439][ T5927] usb 3-1: USB disconnect, device number 65
[  879.885383][ T5927] option 3-1:32.77: device disconnected
[  881.437264][T17446] overlayfs: failed to resolve './file1': -2
[  881.970294][ T3558] Bluetooth: hci2: SCO packet for unknown connection handle 1
[  881.995743][T17464] loop3: detected capacity change from 0 to 64
[  882.367111][ T3717] device hsr_slave_0 left promiscuous mode
[  882.392627][ T3717] device hsr_slave_1 left promiscuous mode
[  882.416288][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  882.424237][T17482] vivid-004: disconnect
[  882.449934][T17481] vivid-004: reconnect
[  882.456895][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  882.499177][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  882.546437][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  882.626464][ T3717] device bridge_slave_1 left promiscuous mode
[  882.633446][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.671160][ T3717] device bridge_slave_0 left promiscuous mode
[  882.706576][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.757218][ T3717] device vcan0 left promiscuous mode
[  882.765880][ T3717] device veth1_macvtap left promiscuous mode
[  882.774424][ T3717] device veth1_vlan left promiscuous mode
[  882.780542][ T3717] device veth0_vlan left promiscuous mode
[  883.239633][T17489] loop2: detected capacity change from 0 to 512
[  883.364575][T17489] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  884.248201][T17489] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.4061: iget: bad i_size value: -67835469387268086
[  884.261898][T17489] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.4061: couldn't read orphan inode 15 (err -117)
[  884.376020][ T3717] team0 (unregistering): Port device team_slave_1 removed
[  884.402755][T17489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  884.411991][T17498] overlayfs: failed to resolve './file0': -2
[  884.454403][T17489] ext2 filesystem being mounted at /root/syzkaller.CKwLlg/164/file0 supports timestamps until 2038 (0x7fffffff)
[  884.476934][ T3717] team0 (unregistering): Port device team_slave_0 removed
[  884.538514][ T3717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  884.613968][ T3717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  884.679687][T14770] EXT4-fs (loop2): unmounting filesystem.
[  884.848362][ T3717] bond0 (unregistering): Released all slaves
[  884.887621][T17508] loop1: detected capacity change from 0 to 1024
[  884.898905][T17511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  884.905560][T17511] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  885.042468][T17511] vhci_hcd vhci_hcd.0: Device attached
[  885.049026][T17516] loop2: detected capacity change from 0 to 512
[  885.073676][T17516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  885.120583][T17512] vhci_hcd: connection closed
[  885.120725][  T102] vhci_hcd: stop threads
[  885.142458][  T102] vhci_hcd: release socket
[  885.146971][  T102] vhci_hcd: disconnect device
[  885.169899][T17516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4069: bg 0: block 248: padding at end of block bitmap is not set
[  885.228370][T17516] Quota error (device loop2): write_blk: dquota write failed
[  885.238128][T17516] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  885.264553][T17516] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.4069: Failed to acquire dquot type 1
[  885.291091][T17516] EXT4-fs (loop2): 1 truncate cleaned up
[  885.298387][T17516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  885.308142][T17516] ext4 filesystem being mounted at /root/syzkaller.CKwLlg/166/bus supports timestamps until 2038 (0x7fffffff)
[  885.348697][T17516] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.4069: deleted inode referenced: 12
[  885.619199][ T3558] Bluetooth: hci2: Dropping invalid advertising data
[  885.646027][T17533] vivid-006: disconnect
[  885.683242][T17532] vivid-006: reconnect
[  885.712440][ T3757] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  886.092660][ T3757] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  886.116545][ T3757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.157003][ T3757] usb 3-1: config 0 descriptor??
[  886.532394][ T3744] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  886.712611][ T3757] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  886.728461][ T3757] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  886.756177][ T3757] [drm:udl_init] *ERROR* Selecting channel failed
[  886.820345][ T3757] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  886.828615][ T3757] [drm] Initialized udl on minor 2
[  886.852577][ T3757] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  886.874421][ T3757] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  886.903130][ T3757] usb 3-1: USB disconnect, device number 66
[  886.952618][ T3744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  886.952653][ T3744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  886.952685][ T3744] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  886.952791][ T3744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.954792][ T3744] usb 4-1: config 0 descriptor??
[  887.250324][T14770] EXT4-fs (loop2): unmounting filesystem.
[  887.673700][ T3744] usb 4-1: string descriptor 0 read error: -71
[  887.722566][ T3744] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #200: -71
[  887.764307][ T3744] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71
[  887.821068][ T3744] uclogic 0003:256C:006D.0015: failed probing pen v2 parameters: -71
[  887.853135][ T3744] uclogic 0003:256C:006D.0015: failed probing parameters: -71
[  887.901709][ T3744] uclogic: probe of 0003:256C:006D.0015 failed with error -71
[  887.921145][T17583] loop2: detected capacity change from 0 to 1024
[  887.985514][ T3744] usb 4-1: USB disconnect, device number 85
[  889.020929][T17598] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  889.027539][T17598] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  889.103175][T17598] vhci_hcd vhci_hcd.0: Device attached
[  889.207139][T17599] vhci_hcd: connection closed
[  889.207331][ T3818] vhci_hcd: stop threads
[  889.254132][ T3818] vhci_hcd: release socket
[  889.286848][ T3818] vhci_hcd: disconnect device
[  889.482445][ T4194] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  889.732428][ T4194] usb 4-1: Using ep0 maxpacket: 8
[  889.934723][ T4194] usb 4-1: config 32 has an invalid interface number: 77 but max is 1
[  889.954703][ T4194] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  889.993638][ T4194] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  890.025103][ T4194] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  890.044413][ T4194] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[  890.075571][ T4194] usb 4-1: config 32 has no interface number 0
[  890.081914][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  890.116970][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  890.136587][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  890.168046][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  890.189556][ T4194] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  890.220889][ T4194] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  890.235440][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  890.250379][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  890.262047][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  890.273504][ T4194] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  890.283761][ T4194] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  890.297528][ T4194] usb 4-1: config 32 interface 77 has no altsetting 0
[  890.463265][ T4194] usb 4-1: Dual-Role OTG device on HNP port
[  890.483809][ T4194] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  890.516825][ T4194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.526278][ T4194] usb 4-1: Product: syz
[  890.550887][ T4194] usb 4-1: Manufacturer: syz
[  890.560157][ T4194] usb 4-1: SerialNumber: syz
[  891.093183][ T4194] option 4-1:32.77: GSM modem (1-port) converter detected
[  891.121983][ T4194] usb 4-1: USB disconnect, device number 86
[  891.134788][ T4194] option 4-1:32.77: device disconnected
[  895.561417][T17729] loop4: detected capacity change from 0 to 1024
[  895.784764][ T4194] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  896.042388][ T4194] usb 4-1: Using ep0 maxpacket: 32
[  896.065558][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027dd1400: rx timeout, send abort
[  896.162431][ T4194] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  896.177492][ T4194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  896.382644][ T4194] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  896.401857][ T4194] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  896.418600][T17753] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  896.425318][T17753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  896.437277][T17753] vhci_hcd vhci_hcd.0: Device attached
[  896.462644][ T4194] usb 4-1: Product: syz
[  896.472753][ T4194] usb 4-1: Manufacturer: syz
[  896.490305][ T4194] usb 4-1: SerialNumber: syz
[  896.515189][ T4194] usb 4-1: config 0 descriptor??
[  896.552834][T17754] vhci_hcd: connection closed
[  896.555641][   T48] vhci_hcd: stop threads
[  896.575531][ T4194] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  896.583095][   T48] vhci_hcd: release socket
[  896.584893][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027dd1400: abort rx timeout. Force session deactivation
[  896.589426][   T48] vhci_hcd: disconnect device
[  896.606600][ T4194] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  896.785581][T17731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.796728][T17731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.168359][T17760] ldusb 4-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  897.436533][ T4191] usb 4-1: USB disconnect, device number 87
[  897.445350][ T4191] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  903.169522][ T3558] Bluetooth: hci5: Malformed LE Event: 0x0d
[  903.276068][T17845] device vcan0 entered promiscuous mode
[  903.276127][T17845] device vlan2 entered promiscuous mode
[  903.276428][T17845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  903.276525][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  903.547832][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079de4800: rx timeout, send abort
[  904.643477][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079de4800: abort rx timeout. Force session deactivation
[  905.710041][ T3558] Bluetooth: hci5: SCO packet for unknown connection handle 1
[  905.821843][T17880] loop2: detected capacity change from 0 to 64
[  907.603908][ T3558] Bluetooth: hci2: Malformed LE Event: 0x0d
[  911.908373][ T3558] Bluetooth: hci4: SCO packet for unknown connection handle 1
[  911.910960][T18037] loop1: detected capacity change from 0 to 64
[  912.174077][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[  914.267978][T18059] loop1: detected capacity change from 0 to 512
[  914.275433][T18059] EXT4-fs: Ignoring removed mblk_io_submit option
[  914.284582][T18059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  914.924257][T18059] EXT4-fs (loop1): 1 truncate cleaned up
[  914.952750][T18059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  915.130776][T13058] EXT4-fs (loop1): unmounting filesystem.
[  915.167191][T18062] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  915.173744][T18062] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  915.306106][T18071] vhci_hcd: connection closed
[  915.306438][T18062] vhci_hcd vhci_hcd.0: Device attached
[  915.373272][ T3818] vhci_hcd: stop threads
[  915.377566][ T3818] vhci_hcd: release socket
[  915.382005][ T3818] vhci_hcd: disconnect device
[  917.300272][T18083] vivid-008: disconnect
[  917.312517][ T3558] Bluetooth: hci3: Dropping invalid advertising data
[  917.327803][T18082] vivid-008: reconnect
[  920.095021][ T3558] Bluetooth: hci3: SCO packet for unknown connection handle 1
[  920.232340][T18110] loop4: detected capacity change from 0 to 64
[  920.345881][T18118] loop2: detected capacity change from 0 to 512
[  920.424370][T18118] EXT4-fs: Ignoring removed mblk_io_submit option
[  920.438647][T18118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  920.514525][T18118] EXT4-fs (loop2): 1 truncate cleaned up
[  920.524235][T18118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  920.784853][T14770] EXT4-fs (loop2): unmounting filesystem.
[  923.512536][ T3590] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  923.772426][ T3590] usb 3-1: Using ep0 maxpacket: 8
[  924.013603][ T3590] usb 3-1: config 32 has an invalid interface number: 77 but max is 1
[  924.032963][ T3590] usb 3-1: config 32 has an invalid interface number: 5 but max is 1
[  924.072500][ T3590] usb 3-1: config 32 has no interface number 0
[  924.096862][ T3590] usb 3-1: config 32 has no interface number 1
[  924.123724][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  924.167663][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  924.208842][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
SYZFAIL: repeatedly failed to execute the program
proc=0 req=4042 state=1 status=1 (errno 11: Resource temporarily unavailable)
[  924.300830][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  924.330357][ T3558] Bluetooth: hci4: Dropping invalid advertising data
[  924.344401][T18150] vivid-002: disconnect
[  924.363138][ T3590] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  924.368591][T18149] vivid-002: reconnect
[  924.374588][ T3590] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  924.392547][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  924.403970][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  924.415542][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  924.426933][ T3590] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  924.437161][ T3590] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0xB, skipping
[  924.448503][ T3590] usb 3-1: config 32 interface 5 altsetting 32 has an invalid endpoint with address 0x0, skipping
[  924.462179][ T