last executing test programs:

3m9.744831202s ago: executing program 3 (id=216):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x50, 0x6, 0x8a, 0xc9, 0x8, 0x5ac, 0x242, 0x5012, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6f, 0x2, 0x70, 0x7, [{{0x9, 0x4, 0x47, 0x81, 0x0, 0x3, 0xa6, 0x2, 0x7f}}]}}]}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0xfffe, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'veth0_vlan\x00'}}, 0x1e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002eb01008000000600000000000000000e0003006269746d61703a697000000005000400000000000900080000007a3000000000100000014080ffffff05000500020000000500000600000002"], 0x58}}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x101, 0x2, 0x800f, 0x0, 0x1, 0x7d681c2a, 0x3, 0x29c}, 0xe)

3m8.283475816s ago: executing program 3 (id=219):
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup2(r2, r1)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x9, 0x0, 0x8, 0xac49, 0x7fffffff, 0xffff, 0x6, 0x3, 0x8, 0xfffffffffffffffa, 0x9, 0x4, 0x2, 0x303, 0x40b0, 0x9b7], 0xf000, 0x80})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)

3m8.155343576s ago: executing program 3 (id=221):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000001380)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000306"], 0x0, 0x0, 0x0}, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x20, 0x0, 0x7}, {0x0, 0x8, 0xc1, 0x5, 0x9, 0xff, 0x9, 0x2000000000000}, {0x401, 0xfff, 0x7d8, 0x6ef}, 0x4, 0x6e6bbc, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0xf50ac62d97a35048, 0x1, 0x40, 0x3, 0x200, 0x5}}, 0xe8)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0))
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40)
ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x4, "c363d9000066422fcdffffff7163cd5f7f00001418d5bb541a5f6000", 0x2})

3m6.252958723s ago: executing program 3 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2402, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)

3m6.208131336s ago: executing program 3 (id=226):
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0xfffff75c, 0x80000001, 0x5, [0x2, 0x8001, 0x80, 0x2000000020, 0x1]}})
syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x92, 0xfc, 0x2, 0x20, 0x742, 0x200a, 0x7188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0x50, 0x9, [{{0x9, 0x4, 0xbb, 0x21, 0x2, 0x88, 0xc3, 0xd5, 0x8, [], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xb, 0x8, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0x0, 0xe}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0})

3m5.928841033s ago: executing program 3 (id=227):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x42a840, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x3)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xa, 0xb, 0x2, 0xe6f0, 0x6, 0xac4a, 0xc, 0x4, 0x3, 0x2, 0x7ff, 0x6}}, 0x0, 0x0, 0x0, 0x0})

3m5.778598479s ago: executing program 32 (id=227):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x42a840, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x3)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xa, 0xb, 0x2, 0xe6f0, 0x6, 0xac4a, 0xc, 0x4, 0x3, 0x2, 0x7ff, 0x6}}, 0x0, 0x0, 0x0, 0x0})

2m58.654871261s ago: executing program 4 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002b000701feffffff00000000067c00000c00018008000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x11, 0x3, 0x0)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x1000000, 0x0, 0x2000000}})
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10, {0x2, 0x4e21, @multicast2}, 'bridge_slave_1\x00'})
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3)
rename(0x0, &(0x7f0000000140)='./cgroup/file0\x00')
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000140)=ANY=[])
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

2m55.312577708s ago: executing program 4 (id=267):
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
setuid(0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a)
quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0xfffffffffffffff8, 0xfffffffffffffffc, 0x1f00, 0x4})
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000140)=0x1)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x10000000000001f6, 0x0, 0xfffffffffffffddf, 0x1f00c00e}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0xfffffffe, 0xfffffffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2486, 0x4, 0x0, 0x0, 0x0, 0x3600000, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x9, 0x3ca8e76e, 0x8})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, &(0x7f0000000040))
fcntl$setstatus(r0, 0x4, 0x800)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c520000000109022f0001000000000904000000ef040100052406"], 0x0)

2m53.9067028s ago: executing program 4 (id=276):
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff"], 0xfdef)
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01')
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f01000000000000000000090582020002000000090503", @ANYRESDEC], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x37, &(0x7f0000000280)=@string={0x37, 0x3, "e9c1079495584831e631cead1f2469ab539bc420c4ed565f22cf8587e86bc7bab66c2996e7c14f25564a5ec2002237a8edb144a0ce"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2m52.042433272s ago: executing program 4 (id=277):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @rose, @null, @null, @default, @rose, @null, @rose]}, &(0x7f0000000380)=0x48, 0x800)
accept4$netrom(r1, &(0x7f0000000000)={{0x3, @default}, [@null, @remote, @netrom, @null, @remote, @remote, @remote, @netrom]}, &(0x7f0000000080)=0x48, 0xc00) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xf4a7, <r3=>r0, 'id1\x00'}) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = syz_open_dev$mouse(&(0x7f0000000200), 0x6, 0x200000)
mount_setattr(r3, &(0x7f00000001c0)='./file0\x00', 0x1900, &(0x7f0000000240)={0x100000, 0xf4, 0xa0000, {r4}}, 0x20)

2m51.961106681s ago: executing program 4 (id=278):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f0000000540)={{0x0, 0x2, 0x0, 0x1b8, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x1, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8000000000000000, 0x200000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x507742dc, 0x45e3, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000, 0x2, 0x0, 0x0, 0x0, 0x3dc4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x0, 0x33}, @in=@local, {}, {0x0, 0xb63}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0)

2m51.957380021s ago: executing program 4 (id=279):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x1, @private=0xa010101}}}, 0x88)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001ec0), &(0x7f0000001f00)=0x8)
r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1fb, 0x1f9023)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r7, 0x1, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e010011a077609475b78411e88509de050000000000f2170e65e3f50327f222000000000000000000000200000000001900", 0x3c}, 0x60)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, r7, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r11=>0x0)
r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xa6, 0x51810, 0x6, 0x8020007, 0x6, 0x2, 0x0, 0x0, 0x7, 0x9})
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=<r15=>0x0)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sync()
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r17)
sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba13b3e201ce0cbb}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e0e44e08", @ANYRES16=r18, @ANYBLOB="020028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB='\b\t\x00\x00', @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x4, 0x0, 0x4, 0xa0, 0x0, 0x5, 0x0})

2m35.610431615s ago: executing program 33 (id=279):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x1, @private=0xa010101}}}, 0x88)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001ec0), &(0x7f0000001f00)=0x8)
r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1fb, 0x1f9023)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r7, 0x1, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e010011a077609475b78411e88509de050000000000f2170e65e3f50327f222000000000000000000000200000000001900", 0x3c}, 0x60)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, r7, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r11=>0x0)
r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xa6, 0x51810, 0x6, 0x8020007, 0x6, 0x2, 0x0, 0x0, 0x7, 0x9})
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r13, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=<r15=>0x0)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sync()
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r17)
sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xba13b3e201ce0cbb}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e0e44e08", @ANYRES16=r18, @ANYBLOB="020028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB='\b\t\x00\x00', @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x4, 0x0, 0x4, 0xa0, 0x0, 0x5, 0x0})

1m28.817083102s ago: executing program 5 (id=649):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xfff1, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004094)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe808300000000000000000000000010ff020000000000000000000000000001"], 0x340a)

1m28.78319905s ago: executing program 5 (id=650):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000200)={0x3, 0x80, 0xffff, 0xffff65a6, 0x8001})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0x1, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000100))
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff81050000ffff000058000b480400945f64009400050028925a01000000000000008000f0fffeff60a461e700fff5dd0000001000014001080800418e00000008fcff", 0x58}], 0x1)

1m28.589066458s ago: executing program 5 (id=651):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r1 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1) (async)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x42}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x8, 0x4}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}}) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x5, 0x614, 0x1, 0x54, 0x7, 0xf}, 0x9c)

1m27.779145298s ago: executing program 5 (id=653):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900012073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1m27.748163006s ago: executing program 5 (id=654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$evdev(r1, &(0x7f0000000400)=[{{0x77359400}, 0x14, 0x1}, {{0x0, 0x2710}, 0x17, 0xd, 0xffffffff}], 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000080))

1m27.676634294s ago: executing program 5 (id=655):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket(0x22, 0x1, 0x43)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async)
ppoll(&(0x7f0000000080)=[{r1, 0x4000}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async)
sync() (async, rerun: 64)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (rerun: 64)

1m15.573285984s ago: executing program 0 (id=700):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000)
utime(0x0, &(0x7f00000001c0)={0x5, 0x6})
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x7f962461}}, 0x18)

1m15.511477395s ago: executing program 0 (id=701):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100000000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

1m15.429019307s ago: executing program 0 (id=702):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4d, 0xda, 0xcc, 0x20, 0xe41, 0x4750, 0x269c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf4, 0x2, 0x0, 0xd2, 0x98, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_connect$uac1(0x6, 0xce, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xf, 0x20, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x301, 0x3, 0x2b, 0x8, 0x0, 0x94}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x6, 0x5, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x5, 0x8, 0xd, 0x2, 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x8, "1816f06383"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x6, "", 'Q/'}, @as_header={0x7, 0x24, 0x1, 0x80, 0xa5}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2c82, 0xffd9, 0x3, "74131aa630"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x21, 0x4, 0x3, 0x5, "9247ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0x6b, 0x80, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x0, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x1, 0x8d, 0x1, {0x7, 0x25, 0x1, 0x81, 0xc, 0xf}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x5f, 0xa, 0x8, 0x2f}, 0x9e, &(0x7f0000000180)={0x5, 0xf, 0x9e, 0x5, [@generic={0x1e, 0x10, 0x4, "42b7b72d8b63ce734594cfd99b4282bda2e59607b140267f7bd71e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x1}, @generic={0x13, 0x10, 0x2, "0df7216959e05b1f85343321e38937e5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x9, 0x7, 0x0, 0x7}, @generic={0x53, 0x10, 0x1, "54fe16732793e527f3e7fb59a11bd3e7ee9299aab164d953f6c7f904a914af07f99ac821c6bd83f2e799ee2e5be92139b4803fda9179f42343732b28f57744618076e3d466457ea78bff2799fffd1d5a"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x814}}, {0xc4, &(0x7f0000000280)=@string={0xc4, 0x3, "2d5561aee4f23997c131df83cc147a085376645de584f7a0ff9542ed6ad0f45b599fe80da6eed10a7836b61bcd38d653f06f1ed8124ba40aac10acb6d5b23668fa1e73ff8049b7f8df8602f1c24a1914f60611f89c574b4ce6e7051d495a073656af66d2ab4287ea3fc31e4b149e8cc353bed8604da7140dcc8adc65805b937994372294a1102f720fe640fed3eb98f65d17622aff1dbb3579f0957801c781a2f285c85438624472dcacaa463856a9fe82e0e22bb616722a8dcdc3b2bb4864500d2f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x68, &(0x7f00000003c0)=@string={0x68, 0x3, "a4801bb282d5d54b2d2d100f6d95347e92874651b396802ef3ff61f333d813c2db9685ad9686b59d7cc3100511239e8e0a3a819f2f9756817a525cb9c3e416640b0cffea601dadb415581fe2ed265e1c83c3bc96c0b0dcade583443d0e080ab72299d6e59835"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x448}}, {0xe3, &(0x7f0000000480)=@string={0xe3, 0x3, "46bd16bc3b022337039e597111cd43afbb1cad69958eaf3011840a0921724fa5846d61e03128606eb8f8feff78f53a1766801c358d138c3ab8bb9f7228638ecb55b94fb78c4ba5e176eea90e0c9a0766f29b2bd45da20f782eb1de9eb23d802616b4bbb22cfb6043556d4e861d851c1f0740a5419c5d05176f3c9346058ba157dbde31a3c46b639c1bc9b1746d299d65c75a1b79f479772fc4f864b8de4bd268d9001aab5929d4333104931ec67925641b75f7bc4f3f60dd96b675e36829d80049089320c1dbb3b3f0eaa3eb3916858a64dc9c731786e91b2504c09217dbdd5e0f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc07}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
epoll_wait(r1, &(0x7f0000000180), 0x0, 0xffff3cb9)

1m13.93598418s ago: executing program 0 (id=703):
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}], [], 0x6b}})

1m13.752698297s ago: executing program 0 (id=706):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000140))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m13.702930768s ago: executing program 0 (id=708):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) (async)

1m11.231846623s ago: executing program 34 (id=655):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket(0x22, 0x1, 0x43)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async)
ppoll(&(0x7f0000000080)=[{r1, 0x4000}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async)
sync() (async, rerun: 64)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (rerun: 64)

57.147452045s ago: executing program 35 (id=708):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) (async)

6.904857202s ago: executing program 7 (id=996):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x208, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0xc0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0xb4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
setreuid(0x0, 0xee00)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x2, 0x0)
tkill(r0, 0x3)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = semget$private(0x0, 0x20000000102, 0x0)
semop(r2, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1)
syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902870003010430010904000000010100000a2401ff000f0201020524040407082404040667decb0904010000010200000904010101010200000c240201fa0306046b7f59b90905010900040c040707250182010100090402000001020000090402010101022000082402010701010607240101f30000090582090004"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

5.424953347s ago: executing program 1 (id=1002):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x9191022d09937cf6, 0x64, {0x64, 0xd, "6c15df804685e11b362b6bcca29475ce7c096b3c32aeac0b79736f0c971b8706afc9a085ff585c2cf92467270c4714832d557e222960dfa183eac354028612b8c341755c0cfc46b026143f735a25597c48d2081473d066dd5a6dde1d7e5cad65ae49"}}, &(0x7f00000000c0)={0x0, 0x3, 0x46, @string={0x46, 0x3, "e7ac1216beae45a6510e3cc4a00ba7bfe4641710f461cecc10b30cd5cb38281805873d0fc2212243984e63e7c094530b67ce5c32cdf10d3f2bf94047c0d7e10676b074d8"}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0x8, 0xb5, "7615772367357577beea694cd11c44a68af05c7eee4dd3272a82210cf209a6dd48123f080f474a1b77d4f32c940e1fa07fa2b7a7a94d9e81e0b2e849e8b65993d7062ea604d46ba26309fb3d6827a876c9e92c1f952a4caca5b6ad796fdb0ec89019d44ff7dcfc7e6c513a5577f2ceccddd22d7d617d6029c444567785aee53cd80821f724137d3c5489718f8ee13389d22efd9c35b112449c731163d6e299431769e73ad402ce93808a879baee8a6c2ce117b3e8a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000002c0)={0xc0, 0x5, 0x3, "dab559"}, &(0x7f0000000300)={0x40, 0x5, 0x1, "f7"}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x23, 0xda, {0xda, 0x23, "0d0d27856ff174a4dd3d186e6433d2e37717de26b4c449945ad16375f894fc474f3ba127801499031d37ffd6edc9cd1c2bb7d4a14a54473fe0ec6281e28b77e2e885388c65b0626547e7edda2db238bb7199f879d86766cf225b919b529d29a7170b52b49fd10fac1781adb89508a7de8c2915b35ed63dee4b5e620128f7b9c5cdcbe59c0f6d3f7a98b1b7c1beb92e71c50e8966b2f0db92ef9ef625ae1861a893b6839b4067c2ba855ab81cfa1c57a00c92b09b93783e0ee10d1635948fa2bc7e597cf357e9b7fdcf6e833689ce49d04a9cecc6ba495bf4"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x0, 0x31, 0xee, "240ee6831a6593b421de070ad864deadda998c8e0f4803f76c1eedb4fefe05c247565d156b1070c4f94046e0153cf83f5851ff4b1b35edc1e03792c0297e592c8d30416de822243d3a4d568cff423328d37d673547f437bb96decf388d9fda726c4dc61dfc24a305cf0f314b6df820b8bcc934a319bbcb3bf164b4b2e0b850ba6edc7f9634fa92d2c349f7302425efc8b3ce232cf9d01fcb7e1e9c769262857a1be3783bbae1ef75cbe0f04fecf18f19131cc3abf0bfd1060349e99a02b6fac00f7b1191559ecffcb6e289459ecd83f6c056928c885e21ce88f903158ded04ba20b5d8cb3a36cbbedc4e623506f6"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xe0}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.691984234s ago: executing program 7 (id=1003):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x7, 0x0, 0x0, 0x7, 0xfffffffffffffffa, 0xda4})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

3.59329831s ago: executing program 7 (id=1004):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a3100000000090003007379"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20008f90"], 0xc9)

3.506572706s ago: executing program 7 (id=1005):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x9], [0x0, 0x0, 0x4]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
recvfrom(r1, &(0x7f00000002c0)=""/104, 0x68, 0x40, &(0x7f0000000240)=@llc={0x1a, 0x302, 0xb, 0x3, 0x5, 0xc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0x9, @mcast2, 0x1391}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000002d00)={0x7, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB="26524f1b7af046eb1c53d0255973ea1906000000e5a1e90000000000000000000060d91e05f2"], 0x24}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0)
lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYBLOB="6b00000000000000f952000000000000200000000000d9b80000000000000000"], 0x20, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000013c0)=""/177, 0xb1}], 0x1, 0xb4, 0x21a)
ioctl$EVIOCGREP(r2, 0x80084523, &(0x7f0000001f40)=""/231)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000000)=0x80)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_usbip_server_init(0x6)
syz_usbip_server_init(0x5)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000400)=0x911, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
recvmmsg(r5, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x12000, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, 0x6a, 0x8c, @buffer={0x0, 0x37, &(0x7f0000000200)=""/55}, &(0x7f0000000340)="72488b973231e843a02bdd016403f71f8b33d2a210b8a3befd7383c42b6295f6a46d89fe2d3bc436e37f39eb25b25118b63674321011435614b4340e8308d8c4aa5da31b0e6a18e52983c5319ef17f9f054eb2cdb4c7444bb7a8fb32ca7022c9e4b8002cbc2a78762fcc", &(0x7f00000003c0)=""/48, 0x6, 0xc, 0xffffffffffffffff, &(0x7f0000000480)})
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4004815}, 0x20000000)

3.164825195s ago: executing program 6 (id=1006):
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="65676031000000ebffffff00002d0000"], 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010000000000000000002100000006"], 0x20}], 0x1}, 0x0)
copy_file_range(r1, 0x0, r0, &(0x7f0000000080)=0x100200, 0x400003, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmsg$netlink(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)={0x148, 0x19, 0x400, 0x70bd25, 0x25dfdbfb, "", [@generic="315addf207c92eaecb95005b2b647f1e4c792eb2db91d022379872fe45", @nested={0x117, 0xe5, 0x0, 0x1, [@typed={0x13, 0x47, 0x0, 0x0, @str='cgroup.threads\x00'}, @typed={0x4, 0xd4}, @generic="4672c1452e9368e6b6f91e246ad96f3966c26dc26030221bd0824acad4f4b075d3fb19118df186f0e08ff5b9d4c11fc7d76850ed1fe9c328b6725990bd7ad3d65a589e6e002827222703d6e8af2059834783a58236aa71ba215dd4d9e5a4ad41c5079df7a310b81be9e6035b9292ae9ecaf1030a47c93fb92aef3340c3c9a884919ee162af34f490275352ef63f220416c887c7bbc5ade649d65c592e7bfe996718e947c85685664b8a51959b0a2b5f995233a1bf3b86141601d0a0c191d1130b695a792c3a672a535a1e1a3bca96a80d4aa94e1149aa8b3eaed2eda0d57df3b93e41fdfbbc89ec26b72f17a6057b0a79e3ded79fe7b3e", @nested={0x4, 0x140}]}]}, 0x148}, {&(0x7f0000000c80)={0x26c8, 0x10, 0x8, 0x70bd28, 0x25dfdbff, "", [@nested={0x224d, 0x110, 0x0, 0x1, [@typed={0x7, 0xda, 0x0, 0x0, @str='.\\\x00'}, @generic="3c6128af3bfde079a933c077041bbccd3b1571689110b9ffb817ed44853232134188443d08e247c52128f571baa8a4c86cb04c893758a290722afdddabf7701eb614d5f692c2f7324609e1f0dcc31405999a011f7d933e79e86fdcbc80ad7380ded1bbbd65d874d9c8516c780c3fa1baac4126de077af9eb0c5e8701f832e7c1752bce8642086f4cee9ff35840b1f841bcdcc1f082cc7dbf51eb0eefb61b6c29cfbefae3c3b3a6b19305e3db11592b0bcc5b75fbdebb71e6f8f68b1eb7ab09c64935d2cde815783db9f8c4aeae90466c20fa5d65dc8ce8d5d1f3ba38587ee0f980223ddaa7", @generic="78620e96fa2af4cde80b1b2ddfbec5ea4ad0bb1bdc4fff66a785580e868b3b92184ddec150fe085358e7598d370b3d6c71efa682bc32ae25b3f10e908cfcea29381fd95b06e562542e120a8e07dcd7f73bf4240e8348992ab94c3f41430c19c15749924dcbcae134466c872f874f3ccb09a1627f5fddec3c28c09ed7082db497fc30f2823fb657e53bff2e90964b7d221a8e590970af4f59d69528293a9a0ca889d64f8b0b40fb277a9f1b02c606d217d1803dd4bbefe6ecd2e33013e0e6be9e01be738b6b73754b8e6c23bf76aa7290470493775797c2826f85018e558f5e27df8e1ac63a", @generic="07aa52dcda02338a6d708d6b417237b812569c3f0998365355a59d4e1a6d1889ad6b106cb5b5d499210b462d76b5f3928f537e0ca83f157591e80ea894dacb3ebbeba7e072534560c3cfb48ae0a0eca9d3cbbc1c485e119a264e1cc0e396665834dbbdfa79503db3c5d1d3", @nested={0x4, 0x11d}, @generic="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", @nested={0x4, 0x96}, @nested={0x4, 0xe4}, @generic="01a0a4220e95f67540ca65e12f5f13ed907a6681a85ee16dc09800e0d3e24248aaa27dfdd1c0597821dc3cda4b909ea108d5a2adf9d0b2df6dc6d1b1f51609cae9fc897cde078476e90cc20e5693a535dd2a84542af8d7649735f6774a51031068f7ed2d4cc9eea4d4185717d9c380c5d5d7aaf6ea1d2e947274bab97163d5b1c867f7973972064b280da4f365977458bad1f5c9b8b3606e38461cb6ef12a4dd34d13afc9f24fc89a1ab856cfe4e9211e7bc71ab3932309ccd287bd5f3820240f1b30cd57de60d8dea18de0c3608b9796c5f452426cb925fd57e252ab241dded086e996790f92e39f3c1ac61f9907961c514adb9e0f89298502fce9112616f891a28af035cf6c1b43845aef36becf69b9e21912a4b9b92a815ddb73e4588a44f3c03bb3f6789653a21ad7215c699865dda93a0089c8ce5cff2844abc50a281349caa7d5006fa4cd713c73fe4e2f3d74ea059cd604ea0b95013644e7ae071aa41137c80006d689723ad74e3671daac7a3694ec8dc405fb52ababdc9f9bea679ca0dbcad371239476d9c4fb39cb94ca33440ae786eceb23b9ef041c2b06a89d36a9d678291cb4f33bd7db45a0264b9dbd9f1c32ceceb8811f1a1c1e22c0c9a2e0fe4fa879c8570672200f9ed89c9ca1d1f4dadbb6163df811408e3585ccc80f233fe56dd0bc2c7c62a910b42cda693f02aaf494c2e0eff8b659cd782ba8abd3802d263db73eff8771ba790b07192b3bdc3fbb0fa566fc85578cc6d61087c47f1c5ff20bea28a3cea5d05940f3710ba8f1ec6ada3c6da3fd22bfa73365b5828c1ebb7b2e5097c77cc7f13beafa19643dcf87804d220e414779a26124662327d3dd8ef447cdcf54515fa1b78457dd9f35e3abc79fd285e4ed657bcae54b74960f27246e64b9a9c9ad8d606f79814895c4881a0af6aa707c519b5336d00a8b3c2178c31ca2a5775532825aab24f18440fbfb09422bbac8aa3b4caf3732ba45367ca44d0dff179b5da2ce60af9d8bcef8c6003e68ef171b9b304da96bbb35eec9e7be6864444f5d4692ba921acd7bef340d9ad04f31f96bf2336fe70aec132e04a7025fce946ec520b882c11214481081dcf20be440e14a5209445432365a4f495f3ae760786783d7d554090aa79971035c15e254545e46d1c9cbfdc2bbec178eea7988c601534c00878c6eca7d530ecd2898700656bc6010f0f1dafe14fc10205cdf62128072f17a5c9afe0d506b24f2818dbfa806fc77788ed2bd7d2b78a067e439b3d78b864b1c489f7052ec41b50cfbdcd05e6efe826826acb5a50b3e8b70b91e52b1dff70a1549c2c7c7351e39c8a11b7e5fe2b78f72ea43b8af92d308aee51d22c1522281521c7623fd6da494e1b0b339299bb32d86a04e7a4d3f2966369576dc094c603ab0020a0294a576cab8fd3bc94ffb213a710081bebe35d4148c6ab76148785ebe5f3e0b3b2cbb125ecbb2461e828d6327464fc2aeef34e501b372cb31a45e094840d42943e30ad2e6f11b4415b3269ea57be915e23e90645180368bfb4035007ac34472eca1ef96454691856e2d98e24334b6d159d6f615fee24d45ceadbd85bbe792ab6ad6053e175bfc8c9a71c7f76f76d1d951c41dd82fa41ee18fcb823fa0361e6f3bfe70ac845969c0a49e13e93a384f0836a3c8a1c4412bb757feaf06b5ff2027d890af14a2c930409e9fe3ee38518eec33fc3d68360d96301fc61db21be0d28bfb4d0760724e8280e4b2a3d8177eb798310938d24a9418d511ade3357ccb1410ade3ce87cf3abebf71d2a3bcec9c4b5540d2af20b2fc21c0487be572866cf36b3ce3afca15007774099d0340f8e9abed327de6f058db6fff541daa18c0ca04b0723c7b03ddd7c3a12420bb7994788e7d84ff18f99cdeaf73b869f273d538368b20bfaa7fa86f1b06db3d4990f2ae232b7dd8c51d9afc58e144029c5e12fbc787f36e1f16a7cbd4592a0f9ef7d7b52be6dda12044776696e3fd12d94bcf34dadad4096d9edb7bb9f145d419d9117a021c21f7da982b6ed2e296a5e16fe9b1c4add2b406d76efcd99bcdaeab0f27a6e10b15ed8ccf44ff98a2532f02e56894fc8cf98457625ac79b55d826b2852a9ab3800926c5b7c8567846686048fef4500e37fb2d5afdef4670e923709c65ada367c9c5b92259f87849016151c9bdd2266f032c85f0d8f95417a0103b2374f560a0bc0acfb6b868fa2daa455bbf94a3155fcfda90227be2098ea928efc0c7af71087efda165e13a734e9fba6080f629a68291122a75e3a29a0a78c3b39b2ce4e5b9e5396683cf0c13168c5f539bf7f020b96e5838eb23d94d327773d175b39462ce6667384320da1a97160d8818e738bbde6fc9e874173592baac9713a17ec7b84abd19646dcf1f0207b5317ae4949c55ecfece118e2feebce441103f882494a0931e84c8c9f5b9bc32a8497b2466f6ba425bd11b2ba42b417c33141b16626c3a6e5e51076c770679b92b116a5652cb48f9ff7e89c34a0122271cd48c497327436844ebb3df1f3f0b0dc8e7d2875264ddcb306a64ddc51328b8e7915540021f6112a2ff59ee26e68f9437663ded4f55d7fcac09022028f6fb8b025ce933c7135abd90d913726d000aee90570c254d92c381b662bc29251be922c0625e2d6d82750bd363b15b28efd45a42f4a9361199e840f6c8e920a8cf73872019529494e19c1debdc3f2933ff494c86851dea367da91330a2d23c20f89dcbcb46c8f1bd5fc729636ee2e210e5e5067316999786b6fe437b6cc3e4063e3a18d2f28b0be742bf816ac7932f192c379e3853ac8dab205c28868c93df71c19e156cb7e8730c1c1291200d016f931ab2256945fd66e5a737154257be9637f2b06afeff3b3377dcdd552be75921fea8e414bdc2b5ec3334fbe13af8e29b4e1c18a6cb6782e1aef955d8e12df73422c4bbdb1c06944aa8970bee0c3756cc48ee81d56c5e28c307da195805d2ceb9f87f7f31e362a5d838271192b8ce240151b380e41210e371c2e0fa9d477f9516119d64fa94223c1bff93f1782859549a447d07747a7e282e3b824aa44bb67f9199a2fd1ddc7bc8f737ba415be88bfebb1b4d7df2657655e599a7761800d208b376a4472d763bc7cf2b53e2584b8dd4d684baf06dda36a1c68c6c70d37ce1f082e02954b668368e82fc17fc1de993b2b708666ebf0209c950220deec28fbedfb4a99c58a422e4c0cfabb7fa726b1881289525d56ecc8ce76c2e9df1f42eb6b58db549fa65ac69d3cfcfddb9cc234d658900ab9d2534ed4aea70d3c81a6603c2e8450a4eb0e0469bf9d8594bb1ba0c499b5f6430eeff371d06a6e3055a3f0393cdc2b297acf6c6b48b9e50d408d69f9618cb2aa68c066fbc290f7b8f667e7cad43406cb149cbe49835d6a0ac3af7bc4d6a294a564c8be9624e3b50a6947782378b80c4113edab86b6784037ef6bd5de6a888852dff7ac5bf900a9277e224fbfe6bbb162c1e4971ab93786d393c8accfb2ddf5fc7179fd4593551905fb5cc0ce8fdb669154352837cb35074bd67ac5612a95263a074dfcacb23649825d7fa28ccf6a641b2f5342ff40fcdcb111f6561fb00bd375823eaebe67e2f72e15dd14dfa920e8a3c487566247e231cd17d60f29acbbbef52dd582765cb128f6f1493b66c8eb54849c588d17af60add0c5e9709d334b9d32fbb78d8b9a805faea7bbebb6beca60199aa24ec9df2bdedf847b1fda9cbb0832d86ac320a2c587bb5ffe03fb184c1af4f544ecc4bff5e0b6cca5f6107fb5f59038cb15ed6373f2c799d68fee0702ee515724320341ad5374eb2cbce4e807a12a97d8cf38b63419d6b84c98c17ef27f7b70162209de7b71c3520a0590d501f4c0a3e3f2ce37e8472fa80ac1fd31ccb345a5b39cbf058d94318881f20a72d7acddd8fc18aa1a835ab19091e2be7ac5c4f818cf0a8b202ddb5e40e63e8d3d8342434187b8a059db743e321f17e2561a4f464de5fb2bb01c201cb3cdbb6148f5cfee8068f172ca0da93f05e5f61758ae50095cb03e6ba61d30ead48a8466d74e513f75bdf42319cf3e99f9c1d76ce8cc1128742a039a8655ff06d55843fe401027b6066371c58cc90bfd2270e677b5f15baf8c9f08001ca0a0237d94d55c8b2306ed4744199a6ccd32625d2ce12494cf5ae19f3c35d48be907ade2399b28a4fe46fc414a96036dafdea918dc65f9c113311cfa044318f29c415a642145f94d309ce83cd711e49ad634672a3ad5d9c5dbcc095d622d762ba1f30adf23cf98a0c672170d644ac0a2bb98fd7800a46ac37f18bfca8482ce225abb491d656f4c470217a3f0c42a038bca55598190a62449efe60427d9a172d7dfae0807dfefcabf4c16c0bf4a2a8f80ca221c79739b4a3dae862424a89fbca8d2587fbaca4620ad7fe95756585df1a1ef9f8e69771653d13b698093b7bc3520f68150904fe08777bc42936622e86b7c7d8414e4e938ed1e28b4ec3d5cc5b8a7be9722d33199933274e688850f1564b14596926cb9fa9d47dfa7a245d55cc9fb199df74cceca156f320155982dc7cf55ea98af68ceef59f30517e19f8f14762f4b8f632437b702b4c9450a87be24e6dd7957a158671c5e466825922d299bd0da7b8d000d204a548ebb6c05d4734f91e91e698ce06e12d69a8e18c93c40678b6ef62f832a34e58d7164aab0989abc39023c307395b527ed3ec67e88ba12ce097ffc8da76486217b263daf8ae71aa7d95a1e0e5612c9dd20967291bc735c0a301c14fbaa9d6b7d0e21ea8b5f203c53ba400284e9119c89c1e67177012661e37d1e7d4edf74a80454d7147fab074c5715109435b46fa83137a2c7038f78624e99889d9a37e2a04b80e2ee1735552fcf90c650fd9c08c949f242827d4339c37abc81e12f6b1cf120d2ec981f1c603af976993ab396b8233ab3e2805a757f9cc74e2554f16d08accc306a1abc1e451054a0403a48b1d30baf6cf31078d2a98fbe41867e9dd5352ec4a8824c556dd647c4079d0cddea2cee45df24e99d0c410947db7af1cb4cc57c96b7d5e18b5914d344d53b4da047608f2da6a0a381a5b4dcb2afd544969495dbaf741edaafbb5fcbf769e0b364b8e23a5fe657f2460cec1490d37a4d29ee7ae2617ee6098a9f20be1dacebb51273ab42d6418d3aa956e3a20b7614fb4ca14e81e8d0c4fd1567c551646e4873d7cf701bcc4d43bd19a685a9be2ff4bf9d3c945f72f183b987c2daa3f1ce63aab913ab7eea892f68123bddf5eb77621fd0b8674feaf7712cdad49b96b41cac207099e23344f20d5619b2d41c6f196c1a8a43e699abb26f2413c198680743cba969d6564099eb581f07fa7a0ac8fc5ed75d1ce36d9fe1e0da99fde2bff46f871d100a8e30cb0b8829ef9a423310bf213b032ab9f704b512253e353909d99dc512a0341bb5d58abcedc22ae829497320cab0c57f1791e270e6ad0863d9c290282de5effcb13af5dd436cdce4fb9cd1e46db471d92c8eeea1c4f81b7f3ca57af1e4d90a5c8cb9fc0cfed2c6e087498ca31b383ca890cf47a538ea42f1a0db0db3456fe256756f26974386cf79945ae36bd61b3b569197f38bf24801c12c82194e0316af05717f09631575fb1fe4d30ee35e55577e298c0c73bac7337731af2c7ae608e154f110d069e82e00357e14d39afa00e441e7871b078d0220ff2c3280aea2cffaec18d04e7972b38c23e6018fe065e14b76a2c17cda6f545c29499b8e4d5c7465e62d5fe1645e1dd2c15d7b7551b7882dfbaf02b8a4a7464fd53ba9a9f9d4d1bc4df3aae6366c9bbed20057"]}, @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@local}, @nested={0x101, 0x114, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0x9, 0xc8, 0x0, 0x0, @str='!-]&\x00'}, @nested={0x4, 0x109}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x9}, @generic="5249da04bd05ea8d0046fee59b71fd3b97cf8efd76b677efe5d1ff351551fffd6778f2909266ef6612edb495b93c91bec3f6d1019a546a1a461d11abd582a8c427c68856633cc2d4ce7e50f4529aed5c4771ca70000e34cad9203387cabd5c273f4bde63595e09530701358e2f15b5653a9a788cca602bf0e4edaa325115c1fead1d14dcb4d024d10d3e33b869767a2896c1506b603fa1100ebd5a1b6b445516c48418b855f9a6190a492e3427d94423", @nested={0x4, 0x2}, @generic="610c8660f17010645f8ce69b158c91a2661ecf914be9cce2e630cdf37634682475e1ec11d864d41ed8"]}, @nested={0x81, 0x4c, 0x0, 0x1, [@generic="007ba0c34110e3987d508908e2b05eb9a756982e4178e13478dd3739d6b6f7fbc7d16d23e3e13842e1a84c41682a04a519b3deec7e71bbcbf1e141824e1d4b63fc65e5b4941d03c834d9fc327a92699c0f52305f024cb1905b0996a8deccd2635917544ec988ad7e583363ad20019701bfbd2121f5b44cd7aa2a55fbe4"]}, @generic="fc5572022498c38ff2f7b5566c9fabac20226300413ce5b5ff69cdc5a18dba3c3f69377d49142297a69252e75ba89d11de59479ec503b8947f04d025471f8cbed6521b2969258889a70279abf7adadb4099cd0ae928786d6726c8d515274c37c5ea7f99101e259ee4bca404ea2718a2c7fa22f1fde62f8479d3a0582", @typed={0x8, 0x54, 0x0, 0x0, @u32=0x5}, @nested={0xd0, 0x52, 0x0, 0x1, [@generic="0dda1134e3ac9010eec663942a423de053579710b43cfa82b0478ce47220a4012ea28736b77d588417124689dc37ae11e0094261d94095bdcc4eb97a89a1783c96ff50c9da873630cf7ea69c61e2a4e39a66e4b76064a0163aea3a85e81628c26123d77986e791bc563746b4493e231de68d4bc5407a5a1d12b69103c1e88e95918c4b2070b3bcbc58f5a50bc468026d0c62a58f99700c0a30920324da9185ed07a6a187b235c8d198a817a3c5044e97f7d863d9794e21c24c0568d08ea3bf01167163a59bdc9b58e65ab191"]}, @nested={0x176, 0xb2, 0x0, 0x1, [@generic="b998a4aa59ac0ae15fb12fe448ebe78435a3e611fff333ac9c5654b9a8fd204ebda4b21f8a9e4d0677fccfeb0cbb01b804ce536d2dff4a2199423876ac0352f43691610d719f4164f29a6dc776267cf508e802911306075b548f94cd8e5b10ab670f439f5d3465c06155e158fedd3151f8d92b", @nested={0x4, 0x56}, @generic="143f1adeba505ee07e32d1c4fa1b227d6791626a2a8b287c933ac57e3bc8f312a52b80a66c03d8aec2a55f0fb230b95a389be5c10f23f6e82fc3e31cbfa5a63566ceffab4cd93409e9b1c55bd4b83f817d0df4330d093ea3476f56eac64cf5ee4ef05a497bcdb2cb46e2cb1d17bf088c695233b2f8cbc8cf444788bb7a4a5bf2cd92f6a40480ecdf40dc9cf35f6d456787dc2f4a3dac93668afcc20d3e8f89ac88ed376615cf187acc29142a0bc3268973462d5a22044944b424b0d888dc69943f8aa5c5dabb509d965cbf971ea59554d7907fadd7b1ede3d57dc7", @nested={0x4, 0x132}, @typed={0x14, 0x12f, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xc3}, @nested={0x4, 0x11a}]}]}, 0x26c8}, {&(0x7f0000000480)={0x110, 0x42, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0x110}, @generic="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"]}, 0x110}], 0x3, 0x0, 0x0, 0x3e74f1b96515dfcc}, 0x0)

3.139562096s ago: executing program 6 (id=1007):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="2801000017000100fefffffb00000000fc01000000000000000000000000f4ffffffffffffff0000e000000100000000000000000000000020010000000000000000000000000001ff02000000000000000000000000000100000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000000000000000000000000000000000004e2100040200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000040000000000000000000008000000000900000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000a0000000000000009000000ba6b6e000200000000000000000400"/128], 0x128}, 0x1, 0x0, 0x0, 0x400c001}, 0x0)

3.087846335s ago: executing program 6 (id=1008):
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000300)=@in6={0xa, 0x4e63, 0x41d, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3c50}}], 0x18}, 0x80)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000000c0), &(0x7f00000004c0)=0x4)
mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ee01b5eaef95116d7cb61bcae6c8cfca486a5b94371d5e1c3604b25455e5ef7d4125a20760ce4dc838810f4306bbf4ab0c9aebfea0ab20fce34a13b1cb9e0e54b863c9cf73b1187bc2a145d4c6851994d8bfeb398368aff3654323cb8fab84c6839777c4348a76ba0ac1ad98aeefa7f3873e6a5fef1e21e99defe8e52118750569b7b51340f3b89e56d6e5a336ec4307adb685d517a3048e98"])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r7}) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async, rerun: 64)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) (rerun: 64)
r9 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)

2.933044843s ago: executing program 6 (id=1009):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0)

2.920973317s ago: executing program 6 (id=1010):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xfff1, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004094)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe80ffffffa000000000000000000010ff020000000000000000000000000001"], 0x340a)

2.780155156s ago: executing program 6 (id=1011):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x2, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x0, 0x3})
r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/ptype\x00')
r4 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8\x9e\x95\xdfa\xd5\xafA)t\x7fV\xf9\xe1\xe7\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15H\x84\xb8\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xfd\xff\xff\xff\xff\xff\xff\xff\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xe7\xc0\xe6v\xb5\xf5\x9d\x90W\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb-\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z\x00\xf8/\xcf\xc2\xb0\r\xde\xa3\x8aw\xf1C\x94\xb6\xf7\xde\"\xbe\xffk|\xaa\x0ez9f\b\xa9\f\xedW\xafe07\x1fP\xe0\x98\n\x93;\xea\x9b\x8c\x0f\x9d\x1a$\xe0\xa4\xd7\xc2\xe5b\xe29\xa8\xba\xc4)_\x99\xb6\xd8\xd5\xd9\x9c\xb5,]n\xeba\xbf\xc3!\x88X\x9a\xd9\x8b\xdcRF\x86\x87[\xb9\xb1\x04m\xf1Q9\x10)fZV\xd7N\xa5\x91\xa0\x12.H^\tH\xe5\x1f\x9b\x06\xad\xb8\xf2\x004G\r\xa8a\a\xf2\xbd\xa9\xd1\xe2\xd72!O\xe7C\xbb\xaawzn$\x11j\t\xc1c\xf2\xf2~\xa1@\xf60e`\x17)X\xc8(\x1b\xafJ*\xec\x16_\xcc\xbe\x85\xc4\xa4\x88\x00d\xaf!\xdd\x9e\x84W\xba\xd2\x7f;\x12\r\x01\f\x9b\xc7*.\xd84Ce).\xd7[\xdd\x87F\x19\x15\x84\x0eU\xa4P\xbdgf\xca\x8e\xa0\xc1\x04\xaf\xacj\xd9\xffQ', 0x2)
mmap(&(0x7f00008d4000/0x2000)=nil, 0x2000, 0x800002, 0x11, r4, 0x5454c000)
read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4081, 0xff1}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000100)=""/10, 0xa}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x1}], 0x1, 0x12022, &(0x7f0000000080)={0x77359400})
setfsgid(0xee00)
r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r7 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r7, &(0x7f0000000100)='fd/3\x00')
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000500)=@ethtool_gfeatures})
getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000002480)=""/104, &(0x7f0000000040)=0x68)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r2, 0xbac0b000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0)

2.440818396s ago: executing program 2 (id=1012):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x2, 0xd104c, 0x3f})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000100))
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000180))
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = userfaultfd(0xc00)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2000000})
getsockname(r5, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0)
r8 = syz_io_uring_complete(0x0)
ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f00000001c0))
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r9 = fcntl$dupfd(r7, 0x406, r7)
write$binfmt_aout(r9, 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000400)={0x2020}, 0x2020)
ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex\xba\xcf\xe4\x8a\x01')

2.222077899s ago: executing program 1 (id=1013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a3100000000090003007379"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000008f11ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20008f90"], 0xc9)

2.105995271s ago: executing program 1 (id=1014):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000ec0)={0x30, r1, 0x81, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xc, 0x5, 0xaa9, 0x1, 0x6, 0xf000, 0x5]}}]}]}]}, 0x30}}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYRESDEC], 0x0)

1.408910056s ago: executing program 2 (id=1015):
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x7000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write(r1, &(0x7f0000001280)='\f', 0x1)
shmctl$SHM_LOCK(r0, 0xb)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/123, 0xc51b6984e25ea18f, 0x1800, 0xbed9, 0x3}, 0x20)

1.407511021s ago: executing program 2 (id=1016):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32)
recvmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000000740)=""/83, 0x53}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f0000000d80)=""/23, 0x17}], 0x3}}], 0x2, 0x41, 0x0) (async, rerun: 32)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0x1a0db000) (async)
syz_usb_connect(0x2, 0x44, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xb6, 0x49, 0x2b, 0x0, 0xbaf, 0xf2, 0xa38d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x8, 0xf8, 0xa0, 0xc1, [{{0x9, 0x4, 0xf9, 0x0, 0x2, 0x2f, 0x54, 0x16, 0x9, [], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0xd, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x401}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x1, 0x7}}]}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xae, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xfa, {0x9, 0x21, 0x2, 0x5b, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x3, 0x8}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x53556bfcdef71d89, 0x6, 0xfb, 0x7, 0x40, 0xff}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xff, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0xecc8}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x58, &(0x7f00000001c0)=@string={0x58, 0x3, "4fd5b1767c69aa337e13c3aff3fa6f5b19bdec932150db8c54c8b5c6918967154c710571ae7fb980f4ef2b74fb62ef9d61c900dcade1d340a64b061c0308aebc6972bc7ac306452d4dcdfbbed1fd0bf4eccb5c415eed"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "053d0fcd0f50b9bcdedd446d4a3c4e3adf6e8bf1ec79d6a81281d686a0e1ce3ef69ba49dbead33047bedd084fd945d0f00bdfc1c1f75071653a071ab5a2a7b6f5b93318b686940df01d6fccb6a3756fc8361be437e439e0969d48e3531bdfbf8194b5f3ffcbb04c9c59b64284956"}}]})

1.352855458s ago: executing program 2 (id=1017):
r0 = socket$l2tp(0x2, 0x2, 0x73)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="86"], 0xd0060)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB='grpquota_inoTe_hardlimit=6, '])
sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x1, 0x4}}, 0x80, 0x0}}], 0x1, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000a110000000b95a8290a213ea815b03a7027f1351361"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

704.841148ms ago: executing program 1 (id=1018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0)

624.99834ms ago: executing program 1 (id=1019):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ef4000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000dad000/0x4000)=nil)
syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0)

536.152181ms ago: executing program 1 (id=1020):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYBLOB="0b87"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x28, {0x28, 0x35, "1b71706a46cdbb8c92a537f7341905057807db2c82bfe15924ef5b88ca9ef04c0d15900e1b1f"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x16, 0x4b, "a5219fc798f056a698ec665ac5bf3f5d45a0c972ef458a71e08877a4bd70a9ec046c085befa401a5b81b563e83833dd173a8832ff2b56884db6952c44bb8fe09213828bde2aca9303de521"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xda}})

228.348882ms ago: executing program 7 (id=1021):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
pipe(&(0x7f0000000000))
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c0000001c0a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

132.833688ms ago: executing program 7 (id=1022):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x58, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x23, 0x2, 0x1, "a677c17a5a00030000400000f9ff00000000000000000000008000", 0x31324d59})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0x2, 0x0, "72f043b00ace4f852f5edc85933ba5c228ea162fdfcd675c765fc5a06532ca9f"})
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406000005240004000d240f010900000000000000000424020a090581032000037fff0905820200000001000905030208e1"], 0x0)

68.294998ms ago: executing program 2 (id=1023):
r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n0']}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000007c0)={0x20, 0x2, 0x29, {0x29, 0x24, "b764faf4644f16ccea4a5f34dcd7dd2538afe0d8ed9be5079b9159913c76f00c2bed945cc9fd43"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f00000001c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x3, 0x200}, @generic={0x6c, 0x10, 0xb, "e421079b0653644965858fbca905e269cc167d984b33e81e1bac2266e9500bfb3bc6f52aac0484510151500d4893523378789f8a94246904e01e8e8928aa03057a36d4a04434f88a228457d7d987ee330d03a4ae6a8fa307c37e58bd4c427e9f73fe92e93d3bfa1860"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xb, 0x71}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x8, 0xde, "e81000", "17d09d5c"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x0, 0x1, 0x5, 0x6, 0x1000}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x14, 0x6d, "679143c51d10b131b05f4470a3be5f4d34c2b8e075c28ec683bcd265cc2f772dac6266b496218037a918307fff4189d1a3b7c952e517b32620f59733e78acbb9bdfad605511135821da46f4395ac563158cf2558ee1c49c55f5fc966f7a4de7d06b3ca39d99cca503c8da1faed"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x57}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x95}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "9a0c"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="931feeaa37f1"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f6c8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xc}, &(0x7f00000006c0)={0x40, 0x21, 0x1}})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) (async)
syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n0']}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000007c0)={0x20, 0x2, 0x29, {0x29, 0x24, "b764faf4644f16ccea4a5f34dcd7dd2538afe0d8ed9be5079b9159913c76f00c2bed945cc9fd43"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f00000001c0)={0x0, 0xf, 0x82, {0x5, 0xf, 0x82, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x3, 0x200}, @generic={0x6c, 0x10, 0xb, "e421079b0653644965858fbca905e269cc167d984b33e81e1bac2266e9500bfb3bc6f52aac0484510151500d4893523378789f8a94246904e01e8e8928aa03057a36d4a04434f88a228457d7d987ee330d03a4ae6a8fa307c37e58bd4c427e9f73fe92e93d3bfa1860"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xb, 0x71}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x8, 0xde, "e81000", "17d09d5c"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x0, 0x1, 0x5, 0x6, 0x1000}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x14, 0x6d, "679143c51d10b131b05f4470a3be5f4d34c2b8e075c28ec683bcd265cc2f772dac6266b496218037a918307fff4189d1a3b7c952e517b32620f59733e78acbb9bdfad605511135821da46f4395ac563158cf2558ee1c49c55f5fc966f7a4de7d06b3ca39d99cca503c8da1faed"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x57}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x95}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "9a0c"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="931feeaa37f1"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f6c8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xc}, &(0x7f00000006c0)={0x40, 0x21, 0x1}}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)

0s ago: executing program 2 (id=1024):
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_usb_connect(0x3, 0x2f, &(0x7f0000002dc0)=ANY=[@ANYBLOB="120110039c0e6308402000d3123101020301090a1d000208c4c00c09046793004d2dd6000904b30900ff0100fe0221"], &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)

kernel console output (not intermixed with test programs):

, changing to 0x8F
[  230.460880][   T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  230.472126][   T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  230.484113][   T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  230.499418][   T24] usb 3-1: config 168 interface 0 has no altsetting 0
[  230.509043][   T24] usb 3-1: string descriptor 0 read error: -22
[  230.515302][   T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  230.524444][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.541621][   T24] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  230.757704][   T24] usb 3-1: USB disconnect, device number 72
[  230.805793][   T89] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  230.828024][   T89] usb 1-1: device descriptor read/8, error -71
[  230.974979][ T8478] adutux: No device or device unplugged -19
[  230.983228][ T8478] comedi comedi3: 8255: I/O port conflict (0xffffffff80004f27,4)
[  230.991175][ T8478] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  230.997913][ T8478] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  231.004404][ T8478] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  231.010937][ T8478] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  231.017990][ T8478] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  231.024497][ T8478] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  231.031268][ T8478] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  231.037769][ T8478] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  231.044660][ T8478] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  231.052330][ T8478] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  231.058868][ T8478] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  231.065476][ T8478] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  231.072299][ T8478] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  231.078951][ T8478] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4)
[  231.087392][ T8478] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  231.095477][ T8478] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  231.101939][ T8478] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  231.104973][   T89] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  231.109767][ T8478] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  231.125074][ T8478] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  231.131584][ T8478] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  231.147379][   T89] usb 1-1: device descriptor read/8, error -71
[  231.275641][   T89] usb usb1-port1: unable to enumerate USB device
[  231.296549][ T5952] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[  231.470075][ T5952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  231.477512][ T5952] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  231.488768][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  231.499910][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  231.512074][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  231.523431][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  231.534761][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  231.548188][ T5952] usb 3-1: config 168 interface 0 has no altsetting 0
[  231.556114][ T5952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  231.563524][ T5952] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  231.574773][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  231.585978][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  231.597859][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  231.609257][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  231.620697][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  231.634181][ T5952] usb 3-1: config 168 interface 0 has no altsetting 0
[  231.641975][ T5952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  231.649509][ T5952] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  231.660690][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64
[  231.671706][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  231.683837][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  231.695371][ T5952] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  231.706759][ T5952] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  231.720291][ T5952] usb 3-1: config 168 interface 0 has no altsetting 0
[  231.730033][ T5952] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  231.739202][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.747393][ T5952] usb 3-1: Product: syz
[  231.751556][ T5952] usb 3-1: Manufacturer: syz
[  231.756148][ T5952] usb 3-1: SerialNumber: syz
[  231.989004][ T5952] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  232.000241][ T5952] usb 3-1: USB disconnect, device number 73
[  232.549545][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  232.732300][ T8486] comedi comedi0: rti800: I/O port conflict (0x9,16)
[  232.739846][ T8487] comedi comedi0: rti800: I/O port conflict (0x9,16)
[  232.777537][ T8489] overlayfs: failed to resolve './bus': -2
[  232.805497][  T797] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  232.816211][ T5920] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  232.966665][  T797] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  232.974781][  T797] usb 1-1: config 1 has no interface number 0
[  232.981007][ T5920] usb 3-1: Using ep0 maxpacket: 32
[  232.986232][  T797] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  232.998170][  T797] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  233.008610][  T797] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.021435][ T5920] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  233.031781][ T5920] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  233.043616][ T5920] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.055987][ T5920] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  233.070349][  T797] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  233.079661][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.087801][  T797] usb 1-1: Product: syz
[  233.092205][  T797] usb 1-1: Manufacturer: syz
[  233.096911][  T797] usb 1-1: SerialNumber: syz
[  233.102283][ T5920] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  233.112160][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.121327][ T5920] usb 3-1: Product: syz
[  233.125664][ T5920] usb 3-1: Manufacturer: syz
[  233.127008][ T8481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  233.130288][ T5920] usb 3-1: SerialNumber: syz
[  233.154543][    C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  233.166144][ T5920] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input28
[  233.364292][ T8481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  233.382182][ T5920] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  233.390505][ T5920]  (id 0x00)
[  233.446303][ T5920] rc_core: IR keymap rc-imon-pad not found
[  233.452287][ T5920] Registered IR keymap rc-empty
[  233.457602][ T5920] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  233.467963][ T5920] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  233.501826][ T5920] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  233.513912][ T5920] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input29
[  233.529129][ T5920] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:74> initialized
[  233.622498][  T797] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  233.804271][  T797] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71
[  233.811265][  T797] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71
[  233.818668][  T797] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71
[  233.825592][  T797] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71
[  233.838536][  T797] usb 1-1: USB disconnect, device number 95
[  233.848143][  T797] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem
[  233.911383][   T56] block nbd0: Possible stuck request ffff88802562e000: control (read@0,1024B). Runtime 90 seconds
[  233.923699][   T56] block nbd0: Possible stuck request ffff88802562e1c0: control (read@1024,1024B). Runtime 90 seconds
[  233.934834][   T56] block nbd0: Possible stuck request ffff88802562e380: control (read@2048,1024B). Runtime 90 seconds
[  233.946492][   T56] block nbd0: Possible stuck request ffff88802562e540: control (read@3072,1024B). Runtime 90 seconds
[  233.958031][  T797] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  234.128502][ T8484] imon:send_packet: task interrupted
[  234.136516][ T8484] imon:send_packet: packet tx failed (-512)
[  234.143170][ T8484] imon:vfd_write: send packet #2 failed
[  234.169211][ T5899] usb 3-1: USB disconnect, device number 74
[  234.503385][ T8526] batadv_slave_0: entered promiscuous mode
[  234.681728][ T8526] batadv_slave_0: left promiscuous mode
[  234.686983][ T5920] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  234.825993][ T5920] usb 1-1: device descriptor read/64, error -71
[  234.975700][  T797] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  235.082626][ T5920] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  235.136118][  T797] usb 3-1: Using ep0 maxpacket: 8
[  235.142478][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.154968][  T797] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  235.164261][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.172738][  T797] usb 3-1: Product: syz
[  235.176913][  T797] usb 3-1: Manufacturer: syz
[  235.181583][  T797] usb 3-1: SerialNumber: syz
[  235.188219][  T797] usb 3-1: config 0 descriptor??
[  235.195880][  T797] gspca_main: stk014-2.14.0 probing 05e1:0893
[  235.202094][  T797] usb 3-1: selecting invalid altsetting 1
[  235.232450][ T5920] usb 1-1: device descriptor read/64, error -71
[  235.351414][ T5920] usb usb1-port1: attempt power cycle
[  235.408756][  T797] gspca_stk014: init reg: 0x00
[  235.413590][  T797] stk014 3-1:0.0: probe with driver stk014 failed with error -5
[  235.627289][  T797] usb 3-1: USB disconnect, device number 75
[  235.713827][ T5920] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  235.735451][ T5920] usb 1-1: device descriptor read/8, error -71
[  235.991731][ T5920] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  236.014696][ T5920] usb 1-1: device descriptor read/8, error -71
[  236.131228][ T5920] usb usb1-port1: unable to enumerate USB device
[  236.622735][ T5899] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[  236.806440][ T5899] usb 3-1: config 162 has an invalid interface number: 251 but max is 1
[  236.814844][ T5899] usb 3-1: config 162 has an invalid interface number: 209 but max is 1
[  236.823972][ T5899] usb 3-1: config 162 has no interface number 0
[  236.831035][ T5899] usb 3-1: config 162 has no interface number 1
[  236.837447][ T5899] usb 3-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  236.850639][ T5899] usb 3-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  236.861722][ T5899] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  236.872857][ T5899] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  236.884056][ T5899] usb 3-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  236.895920][ T5899] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[  236.907374][ T5899] usb 3-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  236.920668][ T5899] usb 3-1: config 162 interface 251 has no altsetting 0
[  236.927691][ T5899] usb 3-1: config 162 interface 209 has no altsetting 0
[  236.937222][ T5899] usb 3-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  236.946308][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.954445][ T5899] usb 3-1: Product: syz
[  236.958634][ T5899] usb 3-1: Manufacturer: syz
[  236.963216][ T5899] usb 3-1: SerialNumber: syz
[  237.187082][ T5899] io_edgeport 3-1:162.251: required endpoints missing
[  237.401857][ T5899] io_edgeport 3-1:162.209: Edgeport 2 port adapter converter detected
[  237.668485][   T30] audit: type=1800 audit(1760769173.410:380): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.700" name="bus" dev="tmpfs" ino=1071 res=0 errno=0
[  237.832628][ T5899] usb 3-1:  � detected
[  238.023818][ T5920] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  238.050345][ T5899] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  238.063392][ T5899] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  238.184297][ T5920] usb 1-1: Using ep0 maxpacket: 32
[  238.191989][ T5920] usb 1-1: config 0 has an invalid interface number: 244 but max is 0
[  238.200279][ T5920] usb 1-1: config 0 has no interface number 0
[  238.206466][ T5920] usb 1-1: config 0 interface 244 has no altsetting 0
[  238.215756][ T5920] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[  238.225101][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.233156][ T5920] usb 1-1: Product: syz
[  238.237333][ T5920] usb 1-1: Manufacturer: syz
[  238.242531][ T5920] usb 1-1: SerialNumber: syz
[  238.251476][ T5920] usb 1-1: config 0 descriptor??
[  238.261379][ T5920] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort found
[  238.476444][ T5920] snd_usb_toneport 1-1:0.244: cannot get proper max packet size
[  238.484505][ T5920] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort now disconnected
[  238.494366][ T5920] snd_usb_toneport 1-1:0.244: probe with driver snd_usb_toneport failed with error -22
[  238.695850][ T5920] usb 1-1: USB disconnect, device number 100
[  239.532065][ T5952] usb 3-1: USB disconnect, device number 76
[  239.538166][    C0] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb
[  239.556739][ T5952] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  239.571475][ T5952] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  239.585837][ T5952] io_edgeport 3-1:162.209: device disconnected
[  239.806609][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.853181][ T5920] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  240.013103][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  240.019550][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  240.029265][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  240.038972][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  240.051227][ T5920] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  240.060335][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.068539][ T5920] usb 1-1: Product: syz
[  240.072704][ T5920] usb 1-1: Manufacturer: syz
[  240.077443][ T5920] usb 1-1: SerialNumber: syz
[  240.084027][ T5920] usb 1-1: config 0 descriptor??
[  240.089842][ T8575] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  240.098884][ T5952] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  240.110149][ T5920] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  240.116089][ T5920] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  240.122691][ T5920] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  240.128532][ T5920] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  240.135017][ T5920] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  240.275435][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.286660][ T5952] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  240.300071][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.318657][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.328514][ T5952] usb 3-1: config 0 descriptor??
[  240.336423][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.546010][ T5494] mcba_usb 1-1:0.0 can0: bit-timing not yet defined
[  240.819613][ T5952] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor
[  240.831278][ T5952] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input31
[  240.930676][ T5952] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  241.084606][    C0] Mem-Info:
[  241.088030][    C0] active_anon:37665 inactive_anon:0 isolated_anon:0
[  241.088030][    C0]  active_file:12545 inactive_file:40458 isolated_file:0
[  241.088030][    C0]  unevictable:768 dirty:27 writeback:0
[  241.088030][    C0]  slab_reclaimable:10802 slab_unreclaimable:96494
[  241.088030][    C0]  mapped:30234 shmem:32196 pagetables:1381
[  241.088030][    C0]  sec_pagetables:0 bounce:0
[  241.088030][    C0]  kernel_misc_reclaimable:0
[  241.088030][    C0]  free:1281670 free_pcp:15378 free_cma:0
[  241.133519][    C0] Node 0 active_anon:150660kB inactive_anon:0kB active_file:50180kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120936kB dirty:108kB writeback:0kB shmem:127248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.165472][    C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.195359][    C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.225173][    C0] lowmem_reserve[]: 0 2495 2496 2496 2496
[  241.230943][    C0] Node 0 DMA32 free:1221684kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:150660kB inactive_anon:0kB active_file:50180kB inactive_file:161632kB unevictable:1536kB writepending:108kB zspages:0kB present:3129332kB managed:2555436kB mlocked:0kB bounce:0kB free_pcp:40936kB local_pcp:19284kB free_cma:0kB
[  241.264303][    C0] lowmem_reserve[]: 0 0 1 1 1
[  241.269026][    C0] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.298566][    C0] lowmem_reserve[]: 0 0 0 0 0
[  241.303282][    C0] Node 1 Normal free:3889636kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20512kB local_pcp:12160kB free_cma:0kB
[  241.335508][    C0] lowmem_reserve[]: 0 0 0 0 0
[  241.340219][    C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.352892][    C0] Node 0 DMA32: 1*4kB (M) 0*8kB 1*16kB (U) 13*32kB (UME) 76*64kB (UME) 63*128kB (UME) 58*256kB (UM) 33*512kB (UME) 25*1024kB (UME) 10*2048kB (UME) 276*4096kB (UM) = 1221684kB
[  241.370331][    C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  241.381801][    C0] Node 1 Normal: 183*4kB (UE) 49*8kB (UME) 38*16kB (UME) 81*32kB (UME) 30*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3889636kB
[  241.399782][    C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.409316][    C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.418673][    C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.428202][    C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.437471][    C0] 85195 total pagecache pages
[  241.442147][    C0] 0 pages in swap cache
[  241.446281][    C0] Free swap  = 124996kB
[  241.450416][    C0] Total swap = 124996kB
[  241.454558][    C0] 2097051 pages RAM
[  241.458351][    C0] 0 pages HighMem/MovableOnly
[  241.463009][    C0] 426294 pages reserved
[  241.467143][    C0] 0 pages cma reserved
[  241.824377][ T5920] usb 3-1: USB disconnect, device number 77
[  242.173682][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.182314][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  242.193604][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  242.202917][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  242.211063][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  242.355156][ T8608] chnl_net:caif_netlink_parms(): no params data found
[  242.457682][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.465439][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.472662][ T8608] bridge_slave_0: entered allmulticast mode
[  242.480315][ T8608] bridge_slave_0: entered promiscuous mode
[  242.489062][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.496343][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.503779][ T8608] bridge_slave_1: entered allmulticast mode
[  242.511127][ T8608] bridge_slave_1: entered promiscuous mode
[  242.544833][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.557177][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.589261][ T8608] team0: Port device team_slave_0 added
[  242.597671][ T8608] team0: Port device team_slave_1 added
[  242.625224][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.632201][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.658853][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.673787][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.681561][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.686927][ T5952] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  242.708316][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.798133][ T8608] hsr_slave_0: entered promiscuous mode
[  242.805910][ T8608] hsr_slave_1: entered promiscuous mode
[  242.812590][ T8608] debugfs: 'hsr0' already exists in 'hsr'
[  242.819901][ T8608] Cannot create hsr debugfs directory
[  242.830126][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.839706][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.848892][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.860468][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.872418][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.883644][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.893339][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.907293][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.916338][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  242.923708][ T5952] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.933676][ T5952] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  242.944261][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.945676][ T5952] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  242.952986][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.965611][ T5952] usb 3-1: config 13 has no interface number 0
[  242.977449][ T5952] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0
[  242.988096][ T5952] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 0
[  242.999065][ T5952] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.030608][ T5952] usb 3-1: config 13 interface 50 has no altsetting 0
[  243.058442][ T5952] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  243.070797][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.081313][ T5952] usb 3-1: Product: syz
[  243.085871][ T5952] usb 3-1: Manufacturer: syz
[  243.090487][ T5952] usb 3-1: SerialNumber: syz
[  243.140202][ T8608] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  243.161229][ T8608] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  243.174401][ T8608] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  243.186915][ T8608] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  243.230056][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.237336][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.244884][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.252053][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.320216][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.337286][ T5952] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  243.343238][ T8608] 8021q: adding VLAN 0 to HW filter on device team0
[  243.353314][ T5952] usb 3-1: MIDIStreaming interface descriptor not found
[  243.353951][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.370335][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.406763][ T5952] usb 3-1: USB disconnect, device number 78
[  243.431810][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.439050][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.476216][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.483499][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.657948][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.839532][ T8608] veth0_vlan: entered promiscuous mode
[  243.856097][ T8608] veth1_vlan: entered promiscuous mode
[  243.888267][ T8608] veth0_macvtap: entered promiscuous mode
[  243.901052][ T8608] veth1_macvtap: entered promiscuous mode
[  243.924676][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.937514][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.958271][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.969491][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.980335][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.996025][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.079265][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.093362][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.136978][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.145437][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.159406][ T8655] binder: 8654:8655 unknown command 811954791
[  244.166682][ T8655] binder: 8654:8655 ioctl c0306201 200000000080 returned -22
[  244.430934][ T5843] Bluetooth: hci5: command tx timeout
[  244.526591][  T797] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  244.569351][ T5921] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  244.691426][  T797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.701748][  T797] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  244.711002][  T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.721911][  T797] usb 7-1: config 0 descriptor??
[  244.730477][  T797] pwc: Askey VC010 type 2 USB webcam detected.
[  244.742415][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  244.750448][ T5921] usb 3-1: config 0 has no interface number 0
[  244.758844][ T5921] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  244.768280][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.777462][ T5921] usb 3-1: Product: syz
[  244.781676][ T5921] usb 3-1: Manufacturer: syz
[  244.786743][ T5921] usb 3-1: SerialNumber: syz
[  244.793380][ T5921] usb 3-1: config 0 descriptor??
[  245.016056][ T5921] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  245.027476][ T5921] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  245.039712][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  245.047956][ T5921] usb 3-1: media controller created
[  245.065398][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.156940][  T797] pwc: recv_control_msg error -32 req 02 val 2b00
[  245.164506][  T797] pwc: recv_control_msg error -32 req 02 val 2700
[  245.171938][  T797] pwc: recv_control_msg error -32 req 02 val 2c00
[  245.179551][  T797] pwc: recv_control_msg error -32 req 04 val 1000
[  245.186663][  T797] pwc: recv_control_msg error -32 req 04 val 1300
[  245.193945][  T797] pwc: recv_control_msg error -32 req 04 val 1400
[  245.201685][  T797] pwc: recv_control_msg error -32 req 02 val 2000
[  245.209159][  T797] pwc: recv_control_msg error -32 req 02 val 2100
[  245.216631][  T797] pwc: recv_control_msg error -32 req 04 val 1500
[  245.224135][  T797] pwc: recv_control_msg error -32 req 02 val 2500
[  245.231210][  T797] pwc: recv_control_msg error -32 req 02 val 2400
[  245.238524][  T797] pwc: recv_control_msg error -32 req 02 val 2600
[  245.245541][  T797] pwc: recv_control_msg error -32 req 02 val 2900
[  245.252652][  T797] pwc: recv_control_msg error -32 req 02 val 2800
[  245.260482][  T797] pwc: recv_control_msg error -32 req 04 val 1100
[  245.270928][  T797] pwc: Registered as video103.
[  245.278680][  T797] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input32
[  245.291939][ T8666] netlink: 'syz.2.723': attribute type 10 has an invalid length.
[  245.301231][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.309305][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.335031][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.342296][ T8666] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.349955][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.357165][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.370660][ T8666] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  245.486218][ T5952] usb 7-1: USB disconnect, device number 2
[  246.230933][ T5921] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  246.231175][ T8665] usb 3-1: dvb_usb_ec168: I2C read not implemented
[  246.281635][ T5921] usb 3-1: USB disconnect, device number 79
[  246.505788][ T5952] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  246.548522][ T8676] mkiss: ax0: crc mode is auto.
[  246.596186][ T8680] efs: Unknown parameter 'usrquota'
[  246.655235][ T5843] Bluetooth: hci5: command tx timeout
[  246.666872][ T5952] usb 7-1: Using ep0 maxpacket: 32
[  246.686377][ T5952] usb 7-1: unable to get BOS descriptor or descriptor too short
[  246.699583][ T5952] usb 7-1: unable to read config index 0 descriptor/start: -71
[  246.707172][ T5952] usb 7-1: can't read configurations, error -71
[  247.104103][   T89] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  247.139012][ T8698] FAULT_INJECTION: forcing a failure.
[  247.139012][ T8698] name failslab, interval 1, probability 0, space 0, times 1
[  247.152615][ T8698] CPU: 1 UID: 0 PID: 8698 Comm: syz.1.736 Not tainted syzkaller #0 PREEMPT(full) 
[  247.152636][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  247.152647][ T8698] Call Trace:
[  247.152652][ T8698]  <TASK>
[  247.152656][ T8698]  dump_stack_lvl+0x189/0x250
[  247.152680][ T8698]  ? __pfx____ratelimit+0x10/0x10
[  247.152694][ T8698]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.152704][ T8698]  ? __pfx__printk+0x10/0x10
[  247.152716][ T8698]  ? __pfx___might_resched+0x10/0x10
[  247.152732][ T8698]  should_fail_ex+0x414/0x560
[  247.152748][ T8698]  should_failslab+0xa8/0x100
[  247.152762][ T8698]  __kmalloc_noprof+0xdf/0x800
[  247.152772][ T8698]  ? kfree+0x4d/0x6d0
[  247.152781][ T8698]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  247.152797][ T8698]  tomoyo_realpath_from_path+0xe3/0x5d0
[  247.152810][ T8698]  ? tomoyo_domain+0xd9/0x130
[  247.152824][ T8698]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  247.152834][ T8698]  tomoyo_path_number_perm+0x1e8/0x5a0
[  247.152846][ T8698]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  247.152879][ T8698]  ? __fget_files+0x2a/0x420
[  247.152894][ T8698]  ? __fget_files+0x3a0/0x420
[  247.152905][ T8698]  ? __fget_files+0x2a/0x420
[  247.152919][ T8698]  security_file_ioctl+0xcb/0x2d0
[  247.152930][ T8698]  __se_sys_ioctl+0x47/0x170
[  247.152942][ T8698]  do_syscall_64+0xfa/0xfa0
[  247.152954][ T8698]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.152967][ T8698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.152977][ T8698]  ? clear_bhb_loop+0x60/0xb0
[  247.152988][ T8698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.152997][ T8698] RIP: 0033:0x7fdb2818efc9
[  247.153011][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.153019][ T8698] RSP: 002b:00007fdb290cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.153030][ T8698] RAX: ffffffffffffffda RBX: 00007fdb283e5fa0 RCX: 00007fdb2818efc9
[  247.153037][ T8698] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  247.153043][ T8698] RBP: 00007fdb290cc090 R08: 0000000000000000 R09: 0000000000000000
[  247.153049][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.153055][ T8698] R13: 00007fdb283e6038 R14: 00007fdb283e5fa0 R15: 00007ffcd856aa28
[  247.153072][ T8698]  </TASK>
[  247.153076][ T8698] ERROR: Out of memory at tomoyo_realpath_from_path.
[  247.266086][   T89] usb 3-1: Using ep0 maxpacket: 8
[  247.398250][   T89] usb 3-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config
[  247.408651][   T89] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  247.419466][   T89] usb 3-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice= 8.6d
[  247.428628][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.441107][   T89] usb 3-1: Product: syz
[  247.445295][   T89] usb 3-1: Manufacturer: syz
[  247.450587][   T89] usb 3-1: SerialNumber: syz
[  247.458720][   T89] usb 3-1: config 0 descriptor??
[  247.492884][ T8704] sctp: [Deprecated]: syz.1.738 (pid 8704) Use of int in max_burst socket option deprecated.
[  247.492884][ T8704] Use struct sctp_assoc_value instead
[  247.848221][ T8718] sp0: Synchronizing with TNC
[  248.774931][ T8734] FAULT_INJECTION: forcing a failure.
[  248.774931][ T8734] name failslab, interval 1, probability 0, space 0, times 0
[  248.788988][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.6.749 Not tainted syzkaller #0 PREEMPT(full) 
[  248.789012][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  248.789023][ T8734] Call Trace:
[  248.789030][ T8734]  <TASK>
[  248.789038][ T8734]  dump_stack_lvl+0x189/0x250
[  248.789061][ T8734]  ? __pfx____ratelimit+0x10/0x10
[  248.789084][ T8734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.789102][ T8734]  ? __pfx__printk+0x10/0x10
[  248.789125][ T8734]  ? __pfx___might_resched+0x10/0x10
[  248.789146][ T8734]  ? fs_reclaim_acquire+0x7d/0x100
[  248.789170][ T8734]  should_fail_ex+0x414/0x560
[  248.789196][ T8734]  should_failslab+0xa8/0x100
[  248.789220][ T8734]  __kmalloc_noprof+0xdf/0x800
[  248.789239][ T8734]  ? tomoyo_encode+0x28b/0x550
[  248.789265][ T8734]  tomoyo_encode+0x28b/0x550
[  248.789291][ T8734]  tomoyo_realpath_from_path+0x58d/0x5d0
[  248.789314][ T8734]  ? tomoyo_domain+0xd9/0x130
[  248.789340][ T8734]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  248.789359][ T8734]  tomoyo_path_number_perm+0x1e8/0x5a0
[  248.789379][ T8734]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  248.789432][ T8734]  ? __fget_files+0x2a/0x420
[  248.789458][ T8734]  ? __fget_files+0x3a0/0x420
[  248.789477][ T8734]  ? __fget_files+0x2a/0x420
[  248.789499][ T8734]  security_file_ioctl+0xcb/0x2d0
[  248.789516][ T8734]  __se_sys_ioctl+0x47/0x170
[  248.789529][ T8734]  do_syscall_64+0xfa/0xfa0
[  248.789541][ T8734]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.789554][ T8734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.789564][ T8734]  ? clear_bhb_loop+0x60/0xb0
[  248.789576][ T8734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.789585][ T8734] RIP: 0033:0x7fd82dd8efc9
[  248.789596][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.789604][ T8734] RSP: 002b:00007fd82eb6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  248.789615][ T8734] RAX: ffffffffffffffda RBX: 00007fd82dfe5fa0 RCX: 00007fd82dd8efc9
[  248.789622][ T8734] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  248.789628][ T8734] RBP: 00007fd82eb6e090 R08: 0000000000000000 R09: 0000000000000000
[  248.789634][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.789640][ T8734] R13: 00007fd82dfe6038 R14: 00007fd82dfe5fa0 R15: 00007ffea4106178
[  248.789656][ T8734]  </TASK>
[  248.789668][ T8734] ERROR: Out of memory at tomoyo_realpath_from_path.
[  248.879611][ T5843] Bluetooth: hci5: command tx timeout
[  249.218985][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'.
[  249.436542][ T8750] overlayfs: conflicting lowerdir path
[  250.398212][ T5920] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  250.547938][ T5920] usb 7-1: device descriptor read/64, error -71
[  250.815234][ T5920] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  250.954344][ T5920] usb 7-1: device descriptor read/64, error -71
[  251.073442][ T5920] usb usb7-port1: attempt power cycle
[  251.090207][ T5921] usb 3-1: USB disconnect, device number 80
[  251.200319][ T5843] Bluetooth: hci5: command tx timeout
[  251.287315][ T8780] random: crng reseeded on system resumption
[  251.435604][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  251.458351][ T5920] usb 7-1: device descriptor read/8, error -71
[  251.724562][ T5920] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  251.749708][ T5920] usb 7-1: device descriptor read/8, error -71
[  251.863628][ T5920] usb usb7-port1: unable to enumerate USB device
[  252.098671][ T5952] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  252.280525][ T5952] usb 3-1: Using ep0 maxpacket: 16
[  252.287249][ T5952] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  252.297521][ T5952] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.309011][ T5952] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.318934][ T5952] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  252.332222][ T5952] usb 3-1: config 7 interface 0 has no altsetting 0
[  252.338917][ T5952] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  252.348004][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.794962][ T5952] hid (null): invalid report_size 829317484
[  252.809896][ T5952] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.001A/input/input33
[  252.907020][ T5952] kye 0003:0458:5010.001A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  253.241481][ T5952] usb 3-1: USB disconnect, device number 81
[  254.660537][ T8838] trusted_key: encrypted_key: insufficient parameters specified
[  254.670089][ T8838] trusted_key: encrypted_key: insufficient parameters specified
[  254.682458][ T8839] trusted_key: encrypted_key: insufficient parameters specified
[  254.693445][ T8840] trusted_key: encrypted_key: insufficient parameters specified
[  254.791790][ T8849] binder: 8848:8849 ioctl c0306201 2000000001c0 returned -14
[  254.869662][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.780'.
[  255.114788][   T89] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  255.243079][ T5899] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  255.275167][   T89] usb 3-1: Using ep0 maxpacket: 8
[  255.282699][   T89] usb 3-1: unable to get BOS descriptor or descriptor too short
[  255.292805][   T89] usb 3-1: config 9 has an invalid interface number: 33 but max is 0
[  255.300946][   T89] usb 3-1: config 9 has no interface number 0
[  255.307030][   T89] usb 3-1: config 9 interface 33 has no altsetting 0
[  255.315881][   T89] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8
[  255.325137][   T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.334489][   T89] usb 3-1: Product: syz
[  255.338650][   T89] usb 3-1: Manufacturer: syz
[  255.343311][   T89] usb 3-1: SerialNumber: syz
[  255.392942][ T5899] usb 7-1: device descriptor read/64, error -71
[  255.572469][ T8853] Mount JFS Failure: -5
[  255.576813][ T8853] jfs_mount failed w/return code = -5
[  255.650313][ T5899] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  255.687990][   T89] usbhid 3-1:9.33: couldn't find an input interrupt endpoint
[  255.697751][   T89] usb 3-1: USB disconnect, device number 82
[  255.802433][ T5899] usb 7-1: device descriptor read/64, error -71
[  255.917537][ T5899] usb usb7-port1: attempt power cycle
[  256.242895][   T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.254699][   T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.264578][   T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.274407][   T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.285031][   T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.292182][ T5899] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  256.305806][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'.
[  256.328414][ T5899] usb 7-1: device descriptor read/8, error -71
[  256.459569][ T8864] chnl_net:caif_netlink_parms(): no params data found
[  256.536034][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.543279][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.551061][ T8864] bridge_slave_0: entered allmulticast mode
[  256.558116][ T8864] bridge_slave_0: entered promiscuous mode
[  256.566124][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.573285][ T5920] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  256.573411][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.588200][ T8864] bridge_slave_1: entered allmulticast mode
[  256.594220][ T5899] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  256.597255][ T8864] bridge_slave_1: entered promiscuous mode
[  256.623348][ T5899] usb 7-1: device descriptor read/8, error -71
[  256.634919][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.647849][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.679026][ T8864] team0: Port device team_slave_0 added
[  256.687111][ T8864] team0: Port device team_slave_1 added
[  256.714065][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.721472][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.742133][ T5920] usb 3-1: Using ep0 maxpacket: 8
[  256.748366][ T5899] usb usb7-port1: unable to enumerate USB device
[  256.753435][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.776590][ T5920] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  256.777337][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.785974][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  256.792966][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.801509][ T5920] usb 3-1: Product: syz
[  256.828123][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.833631][ T5920] usb 3-1: Manufacturer: syz
[  256.847656][ T5920] usb 3-1: SerialNumber: syz
[  256.864457][ T5920] usb 3-1: config 0 descriptor??
[  256.884446][ T5920] gspca_main: sq905-2.14.0 probing 2770:9120
[  256.892842][ T8864] hsr_slave_0: entered promiscuous mode
[  256.899684][ T8864] hsr_slave_1: entered promiscuous mode
[  256.908309][ T8864] debugfs: 'hsr0' already exists in 'hsr'
[  256.914134][ T8864] Cannot create hsr debugfs directory
[  257.085154][ T8864] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  257.096884][ T8864] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  257.107598][ T8864] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  257.120647][ T8864] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  257.215610][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.239010][ T8864] 8021q: adding VLAN 0 to HW filter on device team0
[  257.253562][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.260769][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.278629][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.285827][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.487826][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.723525][ T8864] veth0_vlan: entered promiscuous mode
[  257.737537][ T8864] veth1_vlan: entered promiscuous mode
[  257.770640][ T8864] veth0_macvtap: entered promiscuous mode
[  257.780876][ T8864] veth1_macvtap: entered promiscuous mode
[  257.804382][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.819586][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.834469][ T3465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.843807][ T3465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.853803][ T3465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.862571][ T3465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.990824][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.999387][ T5920] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  258.018062][ T5920] sq905 3-1:0.0: probe with driver sq905 failed with error -71
[  258.028726][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.065026][ T5920] usb 3-1: USB disconnect, device number 83
[  258.088182][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.100459][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.463156][ T5843] Bluetooth: hci6: command tx timeout
[  258.467588][ T8906] mkiss: ax1: crc mode is auto.
[  258.684536][ T8916] netlink: 1192 bytes leftover after parsing attributes in process `syz.6.792'.
[  259.009516][   T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  259.180864][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  259.199582][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  259.212126][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  259.231821][   T10] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  259.248809][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.267760][   T10] usb 7-1: Product: syz
[  259.272061][   T10] usb 7-1: Manufacturer: syz
[  259.277487][   T10] usb 7-1: SerialNumber: syz
[  259.294310][   T10] usb 7-1: config 0 descriptor??
[  259.296624][ T8936] Invalid ELF header magic: != ELF
[  259.309176][   T10] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  259.522035][ T8916] netlink: 'syz.6.792': attribute type 21 has an invalid length.
[  259.529872][ T8916] netlink: 128 bytes leftover after parsing attributes in process `syz.6.792'.
[  259.540153][   T10] usb 7-1: USB disconnect, device number 13
[  260.141539][   T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  260.312699][   T10] usb 3-1: Using ep0 maxpacket: 16
[  260.320499][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.330916][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  260.342033][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  260.351953][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  260.362049][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.375048][   T89] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  260.384162][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  260.393281][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  260.401551][   T10] usb 3-1: Manufacturer: syz
[  260.411032][   T10] usb 3-1: config 0 descriptor??
[  260.537251][   T89] usb 7-1: Using ep0 maxpacket: 32
[  260.544813][   T89] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  260.557984][   T89] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  260.567511][   T89] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.575561][   T89] usb 7-1: Product: syz
[  260.579762][   T89] usb 7-1: Manufacturer: syz
[  260.584519][   T89] usb 7-1: SerialNumber: syz
[  260.591592][   T89] usb 7-1: config 0 descriptor??
[  260.597427][ T8954] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22
[  260.608596][   T89] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input34
[  260.697853][ T5843] Bluetooth: hci6: command tx timeout
[  260.730015][   T10] rc_core: IR keymap rc-hauppauge not found
[  260.739481][   T10] Registered IR keymap rc-empty
[  260.745304][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.773215][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.795102][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  260.808987][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35
[  260.826527][ T5920] usb 7-1: USB disconnect, device number 14
[  260.826669][    C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  260.842832][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.868835][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.902641][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.933151][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.954193][    C0] mceusb 3-1:0.0: long-range (0x8d) receiver active
[  260.961174][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  260.986568][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  261.008004][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  261.040248][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  261.061425][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  261.082838][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  261.107757][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  261.116991][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active)
[  261.194821][ T5920] usb 3-1: USB disconnect, device number 84
[  261.574832][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  261.583495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  261.627639][ T8969] netlink: 'syz.6.807': attribute type 5 has an invalid length.
[  261.742889][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  261.751882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  261.970754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  262.071442][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  262.170684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  262.280545][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  262.558815][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  262.817736][   T30] audit: type=1326 audit(1760770578.930:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.7.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe118f8efc9 code=0x0
[  262.912381][ T5843] Bluetooth: hci6: command tx timeout
[  263.037675][ T8979] Mount JFS Failure: -5
[  263.042027][ T8979] jfs_mount failed w/return code = -5
[  263.072088][ T5952] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  263.157529][ T5899] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  263.233336][ T5952] usb 7-1: Using ep0 maxpacket: 16
[  263.240764][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.263262][ T5952] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  263.274022][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.289227][ T5952] usb 7-1: config 0 descriptor??
[  263.296600][ T5899] usb 3-1: device descriptor read/64, error -71
[  263.553401][ T5899] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  263.695282][ T5899] usb 3-1: device descriptor read/64, error -71
[  263.747355][ T5952] aquacomputer_d5next 0003:0C70:F00B.001B: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0
[  263.827041][ T5899] usb usb3-port1: attempt power cycle
[  263.959631][ T5920] usb 7-1: USB disconnect, device number 15
[  264.205706][ T5899] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  264.227472][ T5899] usb 3-1: device descriptor read/8, error -71
[  264.505129][ T5899] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  264.527112][ T5899] usb 3-1: device descriptor read/8, error -71
[  264.553731][ T8999] openvswitch: netlink: IP tunnel dst address not specified
[  264.564774][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.819'.
[  264.644861][ T5899] usb usb3-port1: unable to enumerate USB device
[  265.136164][ T5843] Bluetooth: hci6: command tx timeout
[  265.510515][   T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd
[  265.672499][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  265.681904][   T10] usb 7-1: config 253 has an invalid interface number: 140 but max is 0
[  265.690689][   T10] usb 7-1: config 253 has no interface number 0
[  265.699862][   T10] usb 7-1: string descriptor 0 read error: -22
[  265.706136][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b
[  265.715207][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.728800][   T10] usbtest 7-1:253.140: Linux gadget zero
[  265.734494][   T10] usbtest 7-1:253.140: low-speed {control in/out} tests (+alt)
[  265.944417][ T5921] usb 7-1: USB disconnect, device number 16
[  266.079575][   T56] block nbd0: Possible stuck request ffff88802562e000: control (read@0,1024B). Runtime 120 seconds
[  266.090523][   T56] block nbd0: Possible stuck request ffff88802562e1c0: control (read@1024,1024B). Runtime 120 seconds
[  266.109380][   T56] block nbd0: Possible stuck request ffff88802562e380: control (read@2048,1024B). Runtime 120 seconds
[  266.120501][   T56] block nbd0: Possible stuck request ffff88802562e540: control (read@3072,1024B). Runtime 120 seconds
[  266.772653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  266.788730][ T5829] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  266.807901][ T5829] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  266.825024][ T5829] usb 2-1: USB disconnect, device number 71
[  267.200291][ T5829] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  267.228527][ T9020] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  267.233712][ T9020] Â: renamed from pim6reg1
[  267.371516][ T5920] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  267.429921][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short
[  267.441261][ T5829] usb 2-1: config 0 has an invalid interface number: 45 but max is 1
[  267.456816][ T5829] usb 2-1: config 0 has an invalid interface number: 41 but max is 1
[  267.465452][ T5829] usb 2-1: config 0 has an invalid interface number: 148 but max is 1
[  267.474331][ T5829] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  267.483444][ T5829] usb 2-1: config 0 has no interface number 0
[  267.489981][ T5829] usb 2-1: config 0 has no interface number 1
[  267.496116][ T5829] usb 2-1: config 0 has no interface number 2
[  267.502495][ T5829] usb 2-1: config 0 interface 41 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  267.513547][ T5829] usb 2-1: too many endpoints for config 0 interface 148 altsetting 223: 183, using maximum allowed: 30
[  267.525994][ T5829] usb 2-1: config 0 interface 148 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 183
[  267.538055][ T5920] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.543332][ T5829] usb 2-1: config 0 interface 45 has no altsetting 0
[  267.550275][ T5920] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  267.557677][ T5829] usb 2-1: config 0 interface 41 has no altsetting 0
[  267.570740][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0
[  267.585025][ T5829] usb 2-1: config 0 interface 148 has no altsetting 0
[  267.585599][ T5920] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  267.594586][ T5829] usb 2-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=e2.70
[  267.602152][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.610174][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.621196][ T5920] usb 7-1: config 0 descriptor??
[  267.626298][ T5829] usb 2-1: Product: syz
[  267.635507][ T5829] usb 2-1: Manufacturer: �쩔铰ᥠ㼣껰矹൨ⴷ⡙逇署ꜰ闈ᖆ㡜迥岈䧇⟎필�Ƛ�뫟黰甕ᶨ�죾씄㽘玨
[  267.652712][ T5829] usb 2-1: SerialNumber: syz
[  267.669722][ T5829] usb 2-1: config 0 descriptor??
[  267.745836][ T5921] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  267.906210][ T5921] usb 3-1: Using ep0 maxpacket: 8
[  267.915692][ T5829] usb 2-1: USB disconnect, device number 72
[  267.917720][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  267.934301][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  267.951090][ T5921] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  267.960901][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.968927][ T5921] usb 3-1: Product: syz
[  267.973187][ T5921] usb 3-1: Manufacturer: syz
[  267.977809][ T5921] usb 3-1: SerialNumber: syz
[  267.985006][ T5921] usb 3-1: config 0 descriptor??
[  268.047367][ T5921] rc_core: IR keymap rc-streamzap not found
[  268.053332][ T5921] Registered IR keymap rc-empty
[  268.061457][ T5921] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  268.074859][ T5921] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36
[  268.088220][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.099957][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.231221][ T9025] erofs (device nbd2): cannot find valid erofs superblock
[  268.243715][ T5921] usb 3-1: USB disconnect, device number 89
[  268.763521][ T5952] usb 7-1: USB disconnect, device number 17
[  268.836722][  T797] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  268.997097][  T797] usb 2-1: Using ep0 maxpacket: 32
[  269.004372][  T797] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.014423][  T797] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  269.027358][  T797] usb 2-1: config 0 interface 0 has no altsetting 0
[  269.034040][  T797] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  269.043170][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.053264][  T797] usb 2-1: config 0 descriptor??
[  269.400702][ T9042] syzkaller1: entered promiscuous mode
[  269.406636][ T9042] syzkaller1: entered allmulticast mode
[  269.503686][  T797] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  269.549595][  T797] hid-thrustmaster 0003:044F:B65D.001D: Wrong number of endpoints?
[  269.718953][    C1] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71
[  269.719429][ T5952] usb 2-1: USB disconnect, device number 73
[  269.941215][ T9057] netlink: 'syz.6.838': attribute type 38 has an invalid length.
[  269.952726][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.838'.
[  270.281611][   T30] audit: type=1326 audit(1760770585.905:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.7.841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe118f8efc9 code=0x0
[  270.687062][  T797] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  270.856001][  T797] usb 2-1: unable to get BOS descriptor or descriptor too short
[  270.872737][  T797] usb 2-1: not running at top speed; connect to a high speed hub
[  270.884275][  T797] usb 2-1: config 109 has an invalid interface number: 133 but max is 0
[  270.896624][  T797] usb 2-1: config 109 has no interface number 0
[  270.903221][  T797] usb 2-1: config 109 interface 133 has no altsetting 0
[  270.914040][  T797] usb 2-1: string descriptor 0 read error: -22
[  270.920297][  T797] usb 2-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=3c.39
[  270.929604][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.947368][  T797] gspca_main: benq-2.14.0 probing 04a5:3035
[  271.162379][  T797] usb 2-1: USB disconnect, device number 74
[  271.285864][ T5952] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  271.339344][ T5829] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  271.457033][ T5952] usb 7-1: Using ep0 maxpacket: 16
[  271.464608][ T5952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.476386][ T5952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.488273][ T5952] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.498052][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.506180][ T5829] usb 3-1: Using ep0 maxpacket: 16
[  271.511352][ T5952] usb 7-1: Product: syz
[  271.515508][ T5952] usb 7-1: Manufacturer: syz
[  271.520078][ T5952] usb 7-1: SerialNumber: syz
[  271.527112][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  271.536022][ T5829] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  271.545240][ T5829] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  271.557253][ T5829] usb 3-1: config 13 has no interface number 0
[  271.567373][ T5829] usb 3-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0
[  271.577684][ T5829] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 0
[  271.587858][ T5829] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.602288][ T5829] usb 3-1: config 13 interface 50 has no altsetting 0
[  271.611692][ T5829] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  271.620813][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.628906][ T5829] usb 3-1: Product: syz
[  271.633086][ T5829] usb 3-1: Manufacturer: syz
[  271.637767][ T5829] usb 3-1: SerialNumber: syz
[  271.753810][ T9088] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  271.766208][ T9088] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  271.777274][ T9088] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  271.788072][ T5952] usb 7-1: 0:2 : does not exist
[  271.814940][ T5952] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  271.855350][ T5952] usb 7-1: USB disconnect, device number 18
[  271.900021][ T5829] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  271.919600][ T5829] usb 3-1: MIDIStreaming interface descriptor not found
[  271.921078][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  271.985681][ T5829] usb 3-1: USB disconnect, device number 90
[  272.772473][ T5921] usb 7-1: new low-speed USB device number 19 using dummy_hcd
[  272.826014][  T797] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  272.935545][ T5921] usb 7-1: unable to get BOS descriptor or descriptor too short
[  272.945373][ T5921] usb 7-1: config 0 has an invalid interface number: 199 but max is 0
[  272.953593][ T5921] usb 7-1: config 0 has no interface number 0
[  272.959819][ T5921] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 8
[  272.971919][ T5921] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0x1 has invalid maxpacket 16, setting to 8
[  272.982669][ T5921] usb 7-1: config 0 interface 199 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  272.993517][ T5921] usb 7-1: config 0 interface 199 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  273.004557][ T5921] usb 7-1: config 0 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.016215][ T5921] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xE has invalid maxpacket 1536, setting to 8
[  273.027266][ T5921] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 8
[  273.039915][  T797] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.050019][  T797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.060665][  T797] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  273.070297][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  273.078861][  T797] usb 3-1: SerialNumber: syz
[  273.083647][ T5921] usb 7-1: string descriptor 0 read error: -22
[  273.089932][ T5921] usb 7-1: New USB device found, idVendor=0745, idProduct=0001, bcdDevice=6f.3e
[  273.099369][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.114377][ T5921] usb 7-1: config 0 descriptor??
[  273.132246][ T5921] pl2303 7-1:0.199: required endpoints missing
[  273.162288][ T9113] tipc: Started in network mode
[  273.167587][ T9113] tipc: Node identity 3, cluster identity 4711
[  273.174503][ T9113] tipc: Node number set to 3
[  273.332940][  T797] usb 3-1: 0:2 : does not exist
[  273.342147][  T797] usb 3-1: unit 255 not found!
[  273.356068][  T797] usb 3-1: USB disconnect, device number 91
[  273.376049][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.532035][ T5921] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  273.670910][ T5921] usb 2-1: device descriptor read/64, error -71
[  273.728757][ T5899] usb 7-1: USB disconnect, device number 19
[  273.927573][ T5921] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  274.066685][ T5921] usb 2-1: device descriptor read/64, error -71
[  274.184510][ T5921] usb usb2-port1: attempt power cycle
[  274.216412][ T5899] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  274.227288][ T5829] usb 3-1: new full-speed USB device number 92 using dummy_hcd
[  274.382009][ T5899] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  274.390269][ T5899] usb 7-1: config 0 has no interface number 0
[  274.396428][ T5899] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  274.409908][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.420163][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  274.431488][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  274.441909][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  274.455427][ T5899] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  274.465132][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.473391][ T5899] usb 7-1: Product: syz
[  274.477623][ T5899] usb 7-1: Manufacturer: syz
[  274.482418][ T5899] usb 7-1: SerialNumber: syz
[  274.487727][ T5829] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  274.497650][ T5829] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  274.506707][ T5899] usb 7-1: config 0 descriptor??
[  274.511898][ T5829] usb 3-1: Manufacturer: syz
[  274.520275][ T5899] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  274.529922][ T5829] usb 3-1: config 0 descriptor??
[  274.549883][ T5921] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  274.571227][ T5921] usb 2-1: device descriptor read/8, error -71
[  274.760610][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.771669][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.827900][ T5921] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  274.869479][ T5921] usb 2-1: device descriptor read/8, error -71
[  274.986870][ T5921] usb usb2-port1: unable to enumerate USB device
[  274.997061][   T30] audit: type=1326 audit(1760770590.309:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9128 comm="syz.6.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82dd8efc9 code=0x0
[  275.809423][ T5921] usb 7-1: USB disconnect, device number 20
[  275.823167][ T5921] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  276.600495][ T9138] syzkaller0: entered promiscuous mode
[  276.606173][ T9138] syzkaller0: entered allmulticast mode
[  277.140697][ T5952] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  277.318749][ T5829] rc_core: IR keymap rc-hauppauge not found
[  277.324870][ T5829] Registered IR keymap rc-empty
[  277.333306][ T5952] usb 7-1: Using ep0 maxpacket: 32
[  277.346945][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.364061][ T5952] usb 7-1: config 0 has no interfaces?
[  277.373939][ T5952] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  277.383208][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.391281][ T5952] usb 7-1: Product: syz
[  277.399290][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.407428][ T5952] usb 7-1: Manufacturer: syz
[  277.412057][ T5952] usb 7-1: SerialNumber: syz
[  277.438121][ T5829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  277.451141][ T5952] usb 7-1: config 0 descriptor??
[  277.459847][ T5829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38
[  277.483774][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.494306][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  277.512603][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.531893][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.556645][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.589453][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.617624][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.642017][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.661015][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.681711][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.703010][ T5829] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  277.712209][ T5952] usb 7-1: USB disconnect, device number 21
[  277.745380][ T5829] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  277.762182][ T5829] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  277.797405][ T5829] usb 3-1: USB disconnect, device number 92
[  278.807404][ T5952] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  278.842311][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[  278.986355][ T5952] usb 7-1: unable to get BOS descriptor or descriptor too short
[  279.004670][ T5952] usb 7-1: not running at top speed; connect to a high speed hub
[  279.027698][ T5952] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  279.043549][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.053519][ T5952] usb 7-1: Product: syz
[  279.057805][ T5952] usb 7-1: Manufacturer: syz
[  279.062866][ T5952] usb 7-1: SerialNumber: syz
[  279.080270][ T9181] batadv_slave_0: entered promiscuous mode
[  279.116713][ T9184] batadv_slave_0: left promiscuous mode
[  279.297212][ T5952] kalmia 7-1:106.0: probe with driver kalmia failed with error -22
[  279.382109][  T797] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  279.425117][ T5829] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  279.515508][   T10] usb 7-1: USB disconnect, device number 22
[  279.553945][  T797] usb 2-1: Using ep0 maxpacket: 32
[  279.560651][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  279.570779][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  279.584977][  T797] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99
[  279.585295][ T5829] usb 3-1: Using ep0 maxpacket: 16
[  279.594653][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.602652][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.608711][  T797] usb 2-1: Product: syz
[  279.621493][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.623705][  T797] usb 2-1: Manufacturer: syz
[  279.633503][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  279.639408][  T797] usb 2-1: SerialNumber: syz
[  279.651108][ T5829] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  279.658541][  T797] usb 2-1: config 0 descriptor??
[  279.665076][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.685316][ T5829] usb 3-1: config 0 descriptor??
[  279.895075][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.904063][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.912755][  T797] usb 2-1: USB disconnect, device number 79
[  280.170970][ T5829] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001E/input/input39
[  280.194745][ T5829] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  280.399441][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.408346][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.416317][  T797] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  280.439021][ T5921] usb 3-1: USB disconnect, device number 93
[  280.531728][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'.
[  280.593134][  T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  280.602998][  T797] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  280.615940][  T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64
[  280.630753][  T797] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  280.641205][  T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.649637][  T797] usb 7-1: Product: syz
[  280.653938][  T797] usb 7-1: Manufacturer: syz
[  280.658999][  T797] usb 7-1: SerialNumber: syz
[  280.669665][  T797] usb 7-1: config 0 descriptor??
[  280.675410][ T9195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  280.688927][  T797] radioshark2 7-1:0.0: Invalid radioSHARK2 device
[  280.695393][  T797] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22
[  280.903753][ T9223] netlink: 9 bytes leftover after parsing attributes in process `syz.2.893'.
[  280.909170][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.916780][ T9223] 0·: renamed from hsr0 (while UP)
[  280.927000][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.937073][ T9223] 0·: entered allmulticast mode
[  280.942765][ T9223] hsr_slave_0: entered allmulticast mode
[  280.948686][ T9223] hsr_slave_1: entered allmulticast mode
[  280.950028][  T797] usb 7-1: USB disconnect, device number 23
[  280.955694][ T9223] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  281.285838][ T5920] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  281.382129][ T5829] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  281.448848][ T5920] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.460035][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0
[  281.466636][ T5920] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  281.475833][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.486306][ T5920] usb 3-1: config 0 descriptor??
[  281.543322][ T5829] usb 2-1: Using ep0 maxpacket: 8
[  281.551007][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  281.573565][ T5829] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  281.583577][ T5829] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  281.592155][ T5829] usb 2-1: Product: syz
[  281.596525][ T5829] usb 2-1: Manufacturer: syz
[  281.601129][ T5829] usb 2-1: SerialNumber: syz
[  281.821679][  T797] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  281.829504][ T5829] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  281.838028][ T5829] usb 2-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  281.846358][ T5829] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  281.854358][ T5829] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  281.923878][ T5920] hid (null): report_id 29495 is invalid
[  281.929707][ T5920] hid (null): bogus close delimiter
[  281.939470][ T5920] wacom 0003:056A:00F8.001F: unknown main item tag 0x6
[  281.946391][ T5920] wacom 0003:056A:00F8.001F: report_id 29495 is invalid
[  281.953614][ T5920] wacom 0003:056A:00F8.001F: item 0 2 1 8 parsing failed
[  281.961858][ T5920] wacom 0003:056A:00F8.001F: parse failed
[  281.967691][ T5920] wacom 0003:056A:00F8.001F: probe with driver wacom failed with error -22
[  281.981100][  T797] usb 7-1: Using ep0 maxpacket: 16
[  281.988003][  T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  282.001464][  T797] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  282.010601][  T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.018776][  T797] usb 7-1: Product: syz
[  282.023005][  T797] usb 7-1: Manufacturer: syz
[  282.027827][  T797] usb 7-1: SerialNumber: syz
[  282.034994][  T797] usb 7-1: config 0 descriptor??
[  282.045519][  T797] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  282.048194][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.054774][  T797] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  282.070876][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.083010][ T5829] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  282.093086][ T5829] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  282.104599][ T5829] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  282.116889][ T5829] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  282.128575][ T5829] usb 2-1: USB disconnect, device number 80
[  282.140880][ T5829] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  282.146608][ T9225] genirq: Flags mismatch irq 32. 00200000 (comedi_parport) vs. 00200000 (virtio1-output.0)
[  282.154625][ T5829] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  282.172045][ T5829] visor 2-1:1.0: device disconnected
[  282.674330][ T9232] kvm: user requested TSC rate below hardware speed
[  282.686340][  T797] em28xx 7-1:0.0: chip ID is em2840
[  282.688655][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.702148][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.730027][   T10] usb 3-1: USB disconnect, device number 94
[  282.902273][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.896'.
[  283.002445][  T797] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  283.011182][  T797] em28xx 7-1:0.0: board has no eeprom
[  283.080227][ T9245] netlink: 'syz.2.902': attribute type 3 has an invalid length.
[  283.082652][  T797] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  283.097318][  T797] em28xx 7-1:0.0: dvb set to bulk mode.
[  283.102961][ T5921] em28xx 7-1:0.0: Binding DVB extension
[  283.125883][  T797] usb 7-1: USB disconnect, device number 24
[  283.153554][  T797] em28xx 7-1:0.0: Disconnecting em28xx
[  283.201886][ T5921] em28xx 7-1:0.0: Registering input extension
[  283.209164][  T797] em28xx 7-1:0.0: Closing input extension
[  283.243552][  T797] em28xx 7-1:0.0: Freeing device
[  283.259547][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.271022][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.457035][ T5920] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  283.510503][   T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  283.617939][ T5920] usb 2-1: Using ep0 maxpacket: 16
[  283.654512][ T5920] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  283.666419][ T5920] usb 2-1: config 0 has no interface number 0
[  283.673922][ T5920] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  283.674741][   T10] usb 3-1: device descriptor read/64, error -71
[  283.685954][ T5920] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  283.707284][ T5920] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  283.716664][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  283.725442][ T5920] usb 2-1: Product: syz
[  283.730815][ T5920] usb 2-1: SerialNumber: syz
[  283.739026][ T5920] usb 2-1: config 0 descriptor??
[  283.747369][ T5920] cm109 2-1:0.8: invalid payload size 0, expected 4
[  283.755471][ T5920] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input41
[  283.980639][ T9241] kAFS: No cell specified
[  283.986538][   T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  284.025850][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.033047][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.040241][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.047677][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.054850][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.062501][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.069894][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.077054][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.084544][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.091874][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  284.103391][  T797] usb 2-1: USB disconnect, device number 81
[  284.109382][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  284.119179][  T797] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  284.153145][   T10] usb 3-1: device descriptor read/64, error -71
[  284.269803][ T5920] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  284.270225][   T10] usb usb3-port1: attempt power cycle
[  284.408946][ T5920] usb 7-1: device descriptor read/64, error -71
[  284.656812][   T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  284.665757][ T5920] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  284.689226][   T10] usb 3-1: device descriptor read/8, error -71
[  284.702870][ T9278] capability: warning: `syz.1.910' uses 32-bit capabilities (legacy support in use)
[  284.806211][ T5920] usb 7-1: device descriptor read/64, error -71
[  284.882975][ T9285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  284.893004][ T9285] netlink: 'syz.1.913': attribute type 7 has an invalid length.
[  284.924292][ T5920] usb usb7-port1: attempt power cycle
[  284.943737][   T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  284.966070][   T10] usb 3-1: device descriptor read/8, error -71
[  285.084046][   T10] usb usb3-port1: unable to enumerate USB device
[  285.285931][ T5920] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  285.307689][ T5920] usb 7-1: device descriptor read/8, error -71
[  285.563924][ T5920] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  285.586015][ T5920] usb 7-1: device descriptor read/8, error -71
[  285.703302][ T5920] usb usb7-port1: unable to enumerate USB device
[  286.055967][ T5920] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  286.194923][ T5920] usb 2-1: device descriptor read/64, error -71
[  286.451759][ T5920] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  286.493715][ T9290] input: syz1 as /devices/virtual/input/input42
[  286.590686][ T5920] usb 2-1: device descriptor read/64, error -71
[  286.622405][   T30] audit: type=1326 audit(1760770601.173:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="syz.2.916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f9e33f8efc9 code=0x0
[  286.709373][ T5920] usb usb2-port1: attempt power cycle
[  287.071987][ T5920] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  287.094998][ T5920] usb 2-1: device descriptor read/8, error -71
[  287.350232][ T5920] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  287.372335][ T5920] usb 2-1: device descriptor read/8, error -71
[  287.500001][ T5920] usb usb2-port1: unable to enumerate USB device
[  287.531860][  T797] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  287.692253][  T797] usb 7-1: Using ep0 maxpacket: 16
[  287.699183][  T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.712253][  T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.722514][  T797] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  287.731667][  T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.741721][  T797] usb 7-1: config 0 descriptor??
[  287.927647][ T5921] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  288.098692][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  288.105436][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  288.114701][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61
[  288.122456][ T5921] usb 3-1: can't read configurations, error -61
[  288.183262][  T797] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0
[  288.190521][  T797] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0
[  288.197873][  T797] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0
[  288.204940][  T797] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0
[  288.212623][  T797] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0
[  288.223240][  T797] corsair 0003:1B1C:1B02.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0
[  288.269844][ T5921] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  288.402447][  T797] corsair 0003:1B1C:1B02.0020: Failed to get K90 initial state (error -32).
[  288.452831][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  288.476445][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  288.488393][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61
[  288.489701][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.498255][ T5921] usb 3-1: can't read configurations, error -61
[  288.508078][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.514478][ T5921] usb usb3-port1: attempt power cycle
[  288.607734][ T5952] usb 7-1: USB disconnect, device number 29
[  288.891668][ T5921] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  288.912218][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  288.919150][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  288.929813][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61
[  288.937631][ T5921] usb 3-1: can't read configurations, error -61
[  289.082750][ T5921] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  289.123063][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  289.135424][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  289.141684][ T9320] netlink: 'syz.6.925': attribute type 10 has an invalid length.
[  289.154961][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61
[  289.155273][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.168435][ T5921] usb 3-1: can't read configurations, error -61
[  289.170319][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.193704][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.194238][ T5921] usb usb3-port1: unable to enumerate USB device
[  289.200992][ T9320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.201315][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.221498][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.925'.
[  289.221860][ T9320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.250423][ T9320] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  289.260068][ T9323] bridge_slave_1: left allmulticast mode
[  289.271542][ T9323] bridge_slave_1: left promiscuous mode
[  289.277960][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.289663][ T9323] bridge_slave_0: left allmulticast mode
[  289.295316][ T9323] bridge_slave_0: left promiscuous mode
[  289.301667][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.335192][ T9323] bond0: (slave bridge0): Releasing backup interface
[  289.649484][ T5921] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  289.703043][  T797] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  289.811950][ T5921] usb 2-1: config 4 has an invalid interface number: 28 but max is 0
[  289.820060][ T5921] usb 2-1: config 4 has no interface number 0
[  289.828204][ T5921] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[  289.837317][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.845506][ T5921] usb 2-1: Product: syz
[  289.849793][ T5921] usb 2-1: Manufacturer: syz
[  289.854565][ T5921] usb 2-1: SerialNumber: syz
[  289.867865][  T797] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  289.879577][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input43
[  289.889159][  T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.902249][  T797] usb 7-1: config 0 descriptor??
[  289.912947][  T797] cp210x 7-1:0.0: cp210x converter detected
[  290.096695][ T5184] bcm5974 2-1:4.28: could not read from device
[  290.109369][ T5184] bcm5974 2-1:4.28: could not read from device
[  290.130577][  T797] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121
[  290.151484][ T5921] usb 2-1: USB disconnect, device number 86
[  290.162906][  T797] cp210x 7-1:0.0: querying part number failed
[  290.187005][  T797] usb 7-1: cp210x converter now attached to ttyUSB0
[  290.353507][ T9330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.366545][ T9330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.200287][ T5829] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  291.339402][ T5952] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  291.371466][ T5829] usb 2-1: Using ep0 maxpacket: 32
[  291.377918][ T5829] usb 2-1: config 1 has an invalid interface number: 194 but max is 0
[  291.386473][ T5829] usb 2-1: config 1 has no interface number 0
[  291.392591][ T5829] usb 2-1: config 1 interface 194 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  291.406522][ T5829] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=6a.1e
[  291.416928][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.426061][ T5829] usb 2-1: Product: syz
[  291.430242][ T5829] usb 2-1: Manufacturer: syz
[  291.434830][ T5829] usb 2-1: SerialNumber: syz
[  291.444463][ T5829] kvaser_usb 2-1:1.194: error -ENODEV: Cannot get usb endpoint(s)
[  291.478442][ T5952] usb 3-1: device descriptor read/64, error -71
[  291.668816][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  291.678385][ T9362] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003
[  291.735068][ T5952] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  291.747954][  T797] usb 2-1: USB disconnect, device number 87
[  291.884865][ T5952] usb 3-1: device descriptor read/64, error -71
[  292.016095][ T5952] usb usb3-port1: attempt power cycle
[  292.376847][ T5952] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  292.410819][ T5952] usb 3-1: device descriptor read/8, error -71
[  292.590697][ T5829] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  292.665582][ T5952] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  292.689483][   T10] usb 7-1: USB disconnect, device number 30
[  292.700640][ T5952] usb 3-1: device descriptor read/8, error -71
[  292.719119][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  292.728912][   T10] cp210x 7-1:0.0: device disconnected
[  292.763870][ T5829] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  292.773399][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.786361][ T5829] usb 2-1: config 0 descriptor??
[  292.837329][ T5952] usb usb3-port1: unable to enumerate USB device
[  293.126012][   T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  293.242037][ T5829] ath6kl: Failed to submit usb control message: -71
[  293.248992][ T5829] ath6kl: unable to send the bmi data to the device: -71
[  293.256187][ T5829] ath6kl: Unable to send get target info: -71
[  293.262963][ T5829] ath6kl: Failed to init ath6kl core: -71
[  293.270202][ T5829] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  293.279260][   T10] usb 7-1: device descriptor read/64, error -71
[  293.291536][ T5829] usb 2-1: USB disconnect, device number 88
[  293.553708][   T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  293.692452][   T10] usb 7-1: device descriptor read/64, error -71
[  293.811745][   T10] usb usb7-port1: attempt power cycle
[  294.173625][   T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  294.181387][ T5829] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  294.206575][   T10] usb 7-1: device descriptor read/8, error -71
[  294.346833][ T9387] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[  294.349746][ T5829] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  294.364223][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.373206][ T5829] usb 2-1: Product: syz
[  294.377792][ T5829] usb 2-1: Manufacturer: syz
[  294.383365][ T5829] usb 2-1: SerialNumber: syz
[  294.392551][ T5829] usb 2-1: config 0 descriptor??
[  294.462741][   T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  294.488272][   T10] usb 7-1: device descriptor read/8, error -71
[  294.613211][   T10] usb usb7-port1: unable to enumerate USB device
[  295.842064][   T24] usb 3-1: new low-speed USB device number 107 using dummy_hcd
[  296.035297][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  296.042766][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  296.066858][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.081913][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  296.104421][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  296.121653][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  296.147559][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  296.162882][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.196538][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  296.218785][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  296.235745][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  296.244337][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  296.255558][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.271849][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  296.289958][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  296.316121][   T24] usb 3-1: string descriptor 0 read error: -22
[  296.322478][   T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  296.332100][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.363753][   T24] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  296.440940][   T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  296.578800][   T24] usb 3-1: USB disconnect, device number 107
[  296.588087][ T9419] usb 3-1: Couldn't submit interrupt_out_urb -19
[  296.602158][   T10] usb 7-1: Using ep0 maxpacket: 8
[  296.616487][   T10] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  296.629570][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.638839][   T10] usb 7-1: Product: syz
[  296.643279][   T10] usb 7-1: Manufacturer: syz
[  296.652995][   T10] usb 7-1: SerialNumber: syz
[  296.665577][   T10] usb 7-1: config 0 descriptor??
[  296.678831][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  297.150301][ T5829] usb-storage 2-1:0.0: USB Mass Storage device detected
[  297.288682][ T5829] usb 2-1: USB disconnect, device number 89
[  297.405861][ T9432] Invalid ELF header magic: != ELF
[  297.681632][   T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  297.778849][   T10] gspca_se401: read req failed req 0x06 error -19
[  297.789237][   T10] usb 7-1: USB disconnect, device number 35
[  297.845266][   T24] usb 3-1: Using ep0 maxpacket: 8
[  297.852270][   T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.863586][   T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.873388][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  297.880134][   T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  297.889276][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.899646][   T24] usb 3-1: config 0 descriptor??
[  298.259424][   T56] block nbd0: Possible stuck request ffff88802562e000: control (read@0,1024B). Runtime 150 seconds
[  298.270315][   T56] block nbd0: Possible stuck request ffff88802562e1c0: control (read@1024,1024B). Runtime 150 seconds
[  298.281747][   T56] block nbd0: Possible stuck request ffff88802562e380: control (read@2048,1024B). Runtime 150 seconds
[  298.293278][   T56] block nbd0: Possible stuck request ffff88802562e540: control (read@3072,1024B). Runtime 150 seconds
[  298.352813][   T24] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  298.363653][   T24] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  298.370691][   T24] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  298.382445][   T24] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  298.389428][   T24] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  298.408063][   T24] ntrig 0003:1B96:0004.0021: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0
[  298.553608][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.569738][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.622060][   T24] usb 3-1: USB disconnect, device number 108
[  298.965095][ T5891] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  299.125407][ T5891] usb 7-1: Using ep0 maxpacket: 32
[  299.131969][ T5891] usb 7-1: config 0 has an invalid interface number: 125 but max is 0
[  299.140265][ T5891] usb 7-1: config 0 has no interface number 0
[  299.146366][ T5891] usb 7-1: config 0 interface 125 has no altsetting 0
[  299.155516][ T5891] usb 7-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  299.164649][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.172942][ T5891] usb 7-1: Product: syz
[  299.177111][ T5891] usb 7-1: Manufacturer: syz
[  299.181833][ T5891] usb 7-1: SerialNumber: syz
[  299.189354][ T5891] usb 7-1: config 0 descriptor??
[  299.415050][ T5891] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  299.747782][  T797] usb 2-1: new low-speed USB device number 90 using dummy_hcd
[  299.799270][ T5891] usb 7-1: reset high-speed USB device number 36 using dummy_hcd
[  299.808399][ T5891] usb 7-1: device reset changed ep0 maxpacket size!
[  299.817427][ T5891] ueagle-atm 7-1:0.125: usbatm_usb_probe: bind failed: -19!
[  299.831974][ T5891] usb 7-1: USB disconnect, device number 36
[  299.898066][  T797] usb 2-1: device descriptor read/64, error -71
[  300.002573][ T5891] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  300.152163][  T797] usb 2-1: new low-speed USB device number 91 using dummy_hcd
[  300.173568][ T5891] usb 7-1: Using ep0 maxpacket: 16
[  300.173976][   T89] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  300.190772][ T5891] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  300.200599][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.209020][ T5891] usb 7-1: Product: syz
[  300.213469][ T5891] usb 7-1: Manufacturer: syz
[  300.219793][ T5891] usb 7-1: SerialNumber: syz
[  300.232922][ T5891] usb 7-1: config 0 descriptor??
[  300.241690][ T5891] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  300.251116][ T5891] usb 7-1: Detected FT232H
[  300.291282][  T797] usb 2-1: device descriptor read/64, error -71
[  300.334088][   T89] usb 3-1: device descriptor read/64, error -71
[  300.409284][  T797] usb usb2-port1: attempt power cycle
[  300.590755][   T89] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  300.733352][   T89] usb 3-1: device descriptor read/64, error -71
[  300.783201][  T797] usb 2-1: new low-speed USB device number 92 using dummy_hcd
[  300.827494][  T797] usb 2-1: device descriptor read/8, error -71
[  300.859348][   T89] usb usb3-port1: attempt power cycle
[  301.082656][  T797] usb 2-1: new low-speed USB device number 93 using dummy_hcd
[  301.104797][  T797] usb 2-1: device descriptor read/8, error -71
[  301.223207][  T797] usb usb2-port1: unable to enumerate USB device
[  301.232364][   T89] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  301.254366][   T89] usb 3-1: device descriptor read/8, error -71
[  301.510513][   T89] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  301.523831][ T5891] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  301.533610][ T5891] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  301.540904][ T5891] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  301.543309][   T89] usb 3-1: device descriptor read/8, error -71
[  301.550334][ T5891] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  301.572043][ T5891] usb 7-1: USB disconnect, device number 37
[  301.588723][ T5891] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  301.599423][ T5891] ftdi_sio 7-1:0.0: device disconnected
[  301.685347][   T89] usb usb3-port1: unable to enumerate USB device
[  303.104941][  T797] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  303.126047][ T9513] netlink: 168 bytes leftover after parsing attributes in process `syz.6.984'.
[  303.264893][  T797] usb 2-1: Using ep0 maxpacket: 16
[  303.272230][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.284952][  T797] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  303.294405][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.306454][  T797] usb 2-1: config 0 descriptor??
[  303.563962][ T5891] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  303.724494][ T5891] usb 7-1: Using ep0 maxpacket: 32
[  303.731987][ T5891] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  303.741173][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.756090][ T5891] usb 7-1: config 0 descriptor??
[  303.969066][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.978539][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.978618][ T5891] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  303.996710][  T797] usbhid 2-1:0.0: can't add hid device: -71
[  304.003351][  T797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  304.014190][ T5891] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  304.023086][ T5891] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  304.032034][  T797] usb 2-1: USB disconnect, device number 94
[  304.419641][   T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  304.569342][   T10] usb 3-1: device descriptor read/64, error -71
[  304.836748][   T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  304.922521][ T5952] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  304.975675][   T10] usb 3-1: device descriptor read/64, error -71
[  305.085221][ T5952] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  305.094191][   T10] usb usb3-port1: attempt power cycle
[  305.099702][ T5952] usb 2-1: config 1 has no interface number 0
[  305.108257][ T5952] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  305.122404][ T5952] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  305.131828][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.139891][ T5952] usb 2-1: Product: syz
[  305.144043][ T5952] usb 2-1: Manufacturer: syz
[  305.148669][ T5952] usb 2-1: SerialNumber: syz
[  305.155999][ T9538] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  305.165433][ T5952] usb 2-1: Error in usbnet_get_endpoints (-22)
[  305.381449][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.390222][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.399715][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.408558][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.418653][ T5952] usb 2-1: USB disconnect, device number 95
[  305.468702][   T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  305.490590][   T10] usb 3-1: device descriptor read/8, error -71
[  305.756404][   T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  305.780662][   T10] usb 3-1: device descriptor read/8, error -71
[  305.896163][   T10] usb usb3-port1: unable to enumerate USB device
[  306.235538][ T9544] comedi comedi2: aio_aio12_8: I/O port conflict (0x1,32)
[  306.242919][   T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  306.419571][   T24] usb 2-1: Using ep0 maxpacket: 8
[  306.426514][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  306.434380][   T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.445939][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  306.462726][   T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.475001][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  306.494639][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  306.506750][   T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.520344][   T24] usb 2-1: config 168 interface 0 has no altsetting 0
[  306.528298][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  306.535967][   T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.547304][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  306.560560][   T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.574696][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  306.588457][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  306.600394][   T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.615191][   T24] usb 2-1: config 168 interface 0 has no altsetting 0
[  306.624399][   T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  306.633207][   T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.633263][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  306.633287][   T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.633311][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  306.679526][   T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  306.679559][   T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.707080][   T24] usb 2-1: config 168 interface 0 has no altsetting 0
[  306.717571][   T24] usb 2-1: string descriptor 0 read error: -22
[  306.724265][   T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  306.733761][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.764508][   T24] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  306.976319][   T24] usb 2-1: USB disconnect, device number 96
[  307.496949][ T9566] loop6: detected capacity change from 0 to 2640
[  307.504707][ T9566] buffer_io_error: 27 callbacks suppressed
[  307.504723][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.520464][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.528892][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.538305][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.546297][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.554912][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.563254][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.571331][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.579731][ T9566] ldm_validate_partition_table(): Disk read failed.
[  307.588941][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.597519][ T9566] Buffer I/O error on dev loop6, logical block 0, async page read
[  307.605698][ T9566] Dev loop6: unable to read RDB block 0
[  307.612447][ T9566]  loop6: unable to read partition table
[  307.618340][ T9566] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  307.799680][   T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  307.938310][   T10] usb 3-1: device descriptor read/64, error -71
[  308.023834][ T5952] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  308.195715][   T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  308.204982][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.215221][ T5952] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  308.224299][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.234138][ T5952] usb 2-1: config 0 descriptor??
[  308.244180][ T5952] pwc: Askey VC010 type 2 USB webcam detected.
[  308.334039][   T10] usb 3-1: device descriptor read/64, error -71
[  308.452044][   T10] usb usb3-port1: attempt power cycle
[  308.672533][ T5952] pwc: recv_control_msg error -32 req 02 val 2b00
[  308.679950][ T5952] pwc: recv_control_msg error -32 req 02 val 2700
[  308.690467][ T5952] pwc: recv_control_msg error -32 req 02 val 2c00
[  308.697577][ T5952] pwc: recv_control_msg error -32 req 04 val 1000
[  308.826110][   T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  308.848075][   T10] usb 3-1: device descriptor read/8, error -71
[  308.919878][ T5952] pwc: recv_control_msg error -32 req 04 val 1400
[  309.114880][   T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  309.138047][   T10] usb 3-1: device descriptor read/8, error -71
[  309.144425][ T5952] pwc: recv_control_msg error -32 req 02 val 2100
[  309.151939][ T5952] pwc: recv_control_msg error -32 req 04 val 1500
[  309.159731][ T5952] pwc: recv_control_msg error -32 req 02 val 2500
[  309.167404][ T5952] pwc: recv_control_msg error -32 req 02 val 2400
[  309.174453][ T5952] pwc: recv_control_msg error -32 req 02 val 2600
[  309.181438][ T5952] pwc: recv_control_msg error -32 req 02 val 2900
[  309.188379][ T5952] pwc: recv_control_msg error -32 req 02 val 2800
[  309.195636][ T5952] pwc: recv_control_msg error -32 req 04 val 1100
[  309.205492][ T5952] pwc: recv_control_msg error -32 req 04 val 1200
[  309.213397][ T5952] pwc: Registered as video103.
[  309.221749][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46
[  309.264839][   T10] usb usb3-port1: unable to enumerate USB device
[  310.007884][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.015244][ T5199] Dev loop6: unable to read RDB block 0
[  310.021373][ T5199]  loop6: unable to read partition table
[  310.076963][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.084216][ T5199] Dev loop6: unable to read RDB block 0
[  310.090964][ T5199]  loop6: unable to read partition table
[  310.131239][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.138341][ T5199] Dev loop6: unable to read RDB block 0
[  310.145966][ T5199]  loop6: unable to read partition table
[  310.241520][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.248915][ T5199] Dev loop6: unable to read RDB block 0
[  310.255840][ T5199]  loop6: unable to read partition table
[  310.297131][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.304176][ T5199] Dev loop6: unable to read RDB block 0
[  310.310068][ T5199]  loop6: unable to read partition table
[  310.436446][ T5199] ldm_validate_partition_table(): Disk read failed.
[  310.443861][ T5199] Dev loop6: unable to read RDB block 0
[  310.449968][ T5199]  loop6: unable to read partition table
[  310.982935][  T797] usb 2-1: USB disconnect, device number 97
[  311.456983][  T797] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  311.617414][  T797] usb 2-1: Using ep0 maxpacket: 16
[  311.624107][  T797] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  311.632563][  T797] usb 2-1: config 0 has no interface number 0
[  311.639199][  T797] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  311.649158][  T797] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  311.660739][  T797] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  311.674640][  T797] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  311.683841][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.691856][  T797] usb 2-1: Product: syz
[  311.696162][  T797] usb 2-1: Manufacturer: syz
[  311.700768][  T797] usb 2-1: SerialNumber: syz
[  311.708360][  T797] usb 2-1: config 0 descriptor??
[  311.714456][ T9601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  311.882312][ T9610] tmpfs: Unknown parameter 'grpquota_inoTe_hardlimit'
[  311.954403][  T797] usb 2-1: USB disconnect, device number 98
[  312.162830][ T5952] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  312.325841][ T5952] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  312.335942][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  312.344879][ T5952] usb 3-1: Product: syz
[  312.349066][ T5952] usb 3-1: SerialNumber: syz
[  312.355727][ T5952] usb 3-1: config 0 descriptor??
[  312.588158][ T5952] usb 3-1: USB disconnect, device number 121
[  312.954661][   T10] usb 2-1: new low-speed USB device number 99 using dummy_hcd
[  313.018813][ T9620] netlink: 'syz.7.1021': attribute type 3 has an invalid length.
[  313.128022][   T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  313.136750][   T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  313.144931][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  313.154309][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  313.167288][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  313.178658][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  313.188631][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  313.205293][   T10] usb 2-1: string descriptor 0 read error: -22
[  313.213064][   T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  313.223265][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.234291][   T10] usb 2-1: config 0 descriptor??
[  313.241611][ T9629] bridge0: port 3(syz_tun) entered blocking state
[  313.249976][   T10] hub 2-1:0.0: bad descriptor, ignoring hub
[  313.250003][ T9629] bridge0: port 3(syz_tun) entered disabled state
[  313.259480][   T10] hub 2-1:0.0: probe with driver hub failed with error -5
[  313.266972][ T9629] syz_tun: entered allmulticast mode
[  313.278443][ T9629] syz_tun: entered promiscuous mode
[  313.284246][ T9629] bridge0: port 3(syz_tun) entered blocking state
[  313.291489][ T9629] bridge0: port 3(syz_tun) entered forwarding state
[  313.309291][   T31] INFO: task syz.4.279:7042 blocked for more than 143 seconds.
[  313.317557][   T31]       Not tainted syzkaller #0
[  313.322631][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  313.331959][   T31] task:syz.4.279       state:D stack:26424 pid:7042  tgid:7041  ppid:6701   task_flags:0x400140 flags:0x00080002
[  313.344079][   T31] Call Trace:
[  313.347367][   T31]  <TASK>
[  313.350359][   T31]  __schedule+0x17c4/0x4d60
[  313.354962][   T31]  ? blkdev_writepages+0x10e/0x170
[  313.360090][   T31]  ? __lock_acquire+0xab9/0xd20
[  313.365077][   T31]  ? __lock_acquire+0xab9/0xd20
[  313.369964][   T31]  ? __pfx___schedule+0x10/0x10
[  313.374929][   T31]  ? schedule+0x91/0x360
[  313.379185][   T31]  schedule+0x165/0x360
[  313.383771][   T31]  schedule_preempt_disabled+0x13/0x30
[  313.389250][   T31]  __mutex_lock+0x7e6/0x1350
[  313.394163][   T31]  ? __mutex_lock+0x5bb/0x1350
[  313.398954][   T31]  ? sync_bdevs+0x1ac/0x340
[  313.403514][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  313.408566][   T31]  ? iput+0x5eb/0xc50
[  313.412575][   T31]  sync_bdevs+0x1ac/0x340
[  313.417254][   T31]  ksys_sync+0xb9/0x150
[  313.421443][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  313.426364][   T31]  ? do_syscall_64+0xbe/0xfa0
[  313.431082][   T31]  __ia32_sys_sync+0xe/0x20
[  313.435680][   T31]  do_syscall_64+0xfa/0xfa0
[  313.440237][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.445450][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.451609][   T31]  ? clear_bhb_loop+0x60/0xb0
[  313.456308][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.462280][   T31] RIP: 0033:0x7f884eb8efc9
[  313.466864][   T31] RSP: 002b:00007f884fac5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  313.475643][   T31] RAX: ffffffffffffffda RBX: 00007f884ede5fa0 RCX: 00007f884eb8efc9
[  313.484024][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  313.492404][   T31] RBP: 00007f884ede5fa0 R08: 0000000000000000 R09: 0000000000000000
[  313.500519][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.508628][   T31] R13: 00007f884ede6038 R14: 00007f884ede5fa0 R15: 00007ffcb1d664f8
[  313.516826][   T31]  </TASK>
[  313.519901][   T31] 
[  313.519901][   T31] Showing all locks held in the system:
[  313.528046][   T31] 3 locks held by kworker/0:1/10:
[  313.534458][   T31]  #0: ffff88801b6e5948 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  313.545642][   T31]  #1: ffffc900000f7ba0 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  313.558129][   T31]  #2: ffff888028414198 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x100
[  313.568811][ T5829] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  313.576795][   T31] 1 lock held by khungtaskd/31:
[  313.577486][   T10] usb 2-1: USB disconnect, device number 99
[  313.581758][   T31]  #0: ffffffff8e13d720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  313.599111][   T31] 2 locks held by getty/5593:
[  313.603831][   T31]  #0: ffff888033e5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  313.613857][   T31]  #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  313.624043][   T31] 6 locks held by kworker/0:3/5829:
[  313.629427][   T31]  #0: ffff8880216ac148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  313.640891][   T31]  #1: ffffc9000403fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  313.654857][   T31]  #2: ffff8880284c4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  313.663943][   T31]  #3: ffff8880284c7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[  313.675804][   T31]  #4: ffff888028463b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[  313.689338][   T31]  #5: ffffffff8edaf910 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750
[  313.700260][   T31] 6 locks held by kworker/1:4/5891:
[  313.705806][   T31]  #0: ffff8880216ac148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  313.718654][   T31]  #1: ffffc9000444fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  313.730747][   T31]  #2: ffff8880286ac198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  313.740046][   T31]  #3: ffff8880212f6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  313.750426][   T31]  #4: ffff88802832a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  313.760636][   T31]  #5: ffffffff8dfe2a70 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0
[  313.772257][   T31] 1 lock held by udevd/5973:
[  313.776883][   T31]  #0: ffff8881437bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  313.777794][ T5829] usb 3-1: Using ep0 maxpacket: 8
[  313.786635][   T31] 1 lock held by syz.4.279/7042:
[  313.794952][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  313.796219][   T31]  #0: ffff8881437bd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  313.806322][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61
[  313.813582][   T31] 1 lock held by syz.5.655/8397:
[  313.813611][   T31]  #0: ffff8881437bd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  313.836253][   T31] 2 locks held by syz.0.708/8572:
[  313.837242][ T5829] usb 3-1: can't read configurations, error -61
[  313.841414][   T31]  #0: ffff8880302660e0 (&type->s_umount_key#84/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930
[  313.857960][   T31]  #1: ffff8881437bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  313.867320][   T31] 4 locks held by syz.6.1011/9591:
[  313.872457][   T31]  #0: ffff888056e01908 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  313.882740][   T31]  #1: ffffffff8f54ab70 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  313.894162][   T31]  #2: ffff8880585720d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640
[  313.904660][   T31]  #3: ffffffff8e1431b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  313.915847][   T31] 
[  313.920222][   T31] =============================================
[  313.920222][   T31] 
[  313.929342][   T31] NMI backtrace for cpu 0
[  313.929357][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  313.929376][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  313.929387][   T31] Call Trace:
[  313.929394][   T31]  <TASK>
[  313.929401][   T31]  dump_stack_lvl+0x189/0x250
[  313.929427][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.929445][   T31]  ? __pfx__printk+0x10/0x10
[  313.929474][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  313.929496][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  313.929517][   T31]  ? __pfx__printk+0x10/0x10
[  313.929537][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  313.929560][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  313.929580][   T31]  watchdog+0xfa9/0xff0
[  313.929605][   T31]  ? watchdog+0x1f4/0xff0
[  313.929633][   T31]  kthread+0x711/0x8a0
[  313.929653][   T31]  ? __pfx_watchdog+0x10/0x10
[  313.929673][   T31]  ? __pfx_kthread+0x10/0x10
[  313.929693][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.929714][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.929735][   T31]  ? __pfx_kthread+0x10/0x10
[  313.929754][   T31]  ret_from_fork+0x4bc/0x870
[  313.929778][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  313.929807][   T31]  ? __switch_to_asm+0x39/0x70
[  313.929825][   T31]  ? __switch_to_asm+0x33/0x70
[  313.929847][   T31]  ? __pfx_kthread+0x10/0x10
[  313.929866][   T31]  ret_from_fork_asm+0x1a/0x30
[  313.929901][   T31]  </TASK>
[  313.929907][   T31] Sending NMI from CPU 0 to CPUs 1:
[  314.081642][    C1] NMI backtrace for cpu 1
[  314.081658][    C1] CPU: 1 UID: 0 PID: 8864 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  314.081675][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  314.081685][    C1] RIP: 0010:kasan_check_range+0x43/0x2c0
[  314.081707][    C1] Code: 4c 8d 04 37 49 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff <f3> 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba
[  314.081719][    C1] RSP: 0018:ffffc90003fcf948 EFLAGS: 00000002
[  314.081733][    C1] RAX: 1ffff110170e7501 RBX: ffff888026129e40 RCX: ffffffff8b4826ed
[  314.081744][    C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88802612b400
[  314.081753][    C1] RBP: ffffc90003fcfbb8 R08: ffff88802612b408 R09: ffff800000000000
[  314.081764][    C1] R10: dffffc0000000000 R11: fffffbfff1f3bb6f R12: dffffc0000000000
[  314.081775][    C1] R13: ffff88801d2c0000 R14: ffff8880b873add0 R15: ffff8880b873adc8
[  314.081786][    C1] FS:  000055556ddb8500(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[  314.081799][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.081809][    C1] CR2: 00007fdb283b4198 CR3: 0000000031998000 CR4: 00000000003526f0
[  314.081822][    C1] Call Trace:
[  314.081828][    C1]  <TASK>
[  314.081836][    C1]  __schedule+0xf3d/0x4d60
[  314.081858][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  314.081875][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  314.081893][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  314.081915][    C1]  ? __lock_acquire+0xab9/0xd20
[  314.081931][    C1]  ? __pfx___schedule+0x10/0x10
[  314.081955][    C1]  ? schedule+0x91/0x360
[  314.081972][    C1]  schedule+0x165/0x360
[  314.081990][    C1]  do_nanosleep+0x1c5/0x610
[  314.082006][    C1]  ? do_nanosleep+0x7f/0x610
[  314.082022][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  314.082038][    C1]  ? __hrtimer_setup+0x187/0x210
[  314.082055][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  314.082075][    C1]  hrtimer_nanosleep+0x169/0x360
[  314.082095][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  314.082114][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  314.082133][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  314.082154][    C1]  __se_sys_clock_nanosleep+0x339/0x390
[  314.082174][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  314.082194][    C1]  ? do_syscall_64+0xbe/0xfa0
[  314.082212][    C1]  do_syscall_64+0xfa/0xfa0
[  314.082229][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.082248][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.082263][    C1]  ? clear_bhb_loop+0x60/0xb0
[  314.082279][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.082294][    C1] RIP: 0033:0x7fe118fc1885
[  314.082307][    C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[  314.082319][    C1] RSP: 002b:00007ffc3a4c3370 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  314.082334][    C1] RAX: ffffffffffffffda RBX: 0000000000000076 RCX: 00007fe118fc1885
[  314.082345][    C1] RDX: 00007ffc3a4c33b0 RSI: 0000000000000000 RDI: 0000000000000000
[  314.082355][    C1] RBP: 00007ffc3a4c341c R08: 0000000000000000 R09: 0000000000000000
[  314.082365][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  314.082374][    C1] R13: 00000000000927c0 R14: 000000000004901f R15: 00007ffc3a4c3470
[  314.082395][    C1]  </TASK>
[  314.084324][ T5829] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  314.601425][ T5829] usb 3-1: Using ep0 maxpacket: 8
[  314.608392][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  314.618026][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61
[  314.625756][ T5829] usb 3-1: can't read configurations, error -61
[  314.632855][ T5829] usb usb3-port1: attempt power cycle
[  314.997065][ T5829] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  315.018896][ T5829] usb 3-1: Using ep0 maxpacket: 8
[  315.025758][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  315.034969][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61
[  315.042623][ T5829] usb 3-1: can't read configurations, error -61
[  315.189646][ T5829] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  315.212691][ T5829] usb 3-1: Using ep0 maxpacket: 8
[  315.219966][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  315.229300][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61
[  315.236930][ T5829] usb 3-1: can't read configurations, error -61
[  315.243610][ T5829] usb usb3-port1: unable to enumerate USB device
[  319.671796][ T5199] udevd[5199]: worker [5973] /devices/virtual/block/nbd0 is taking a long time