last executing test programs:

10.565727575s ago: executing program 3 (id=847):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400300142603600e1208000b0000001001a8001600", 0x34}], 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

9.587257255s ago: executing program 3 (id=849):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

8.635003733s ago: executing program 3 (id=853):
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)={0x14c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xda}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x90000000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xb75}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x646d}, {0x8, 0x15, 0xd}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008808}, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={<r2=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000680)={{r2, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323441b55cf23ec"], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], <r4=>0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x2, 0x5}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)

8.040312222s ago: executing program 1 (id=855):
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)={0x14c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xda}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x90000000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xb75}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x646d}, {0x8, 0x15, 0xd}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008808}, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={<r2=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000680)={{r2, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323"], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], <r4=>0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x2, 0x5}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)

7.70301437s ago: executing program 0 (id=856):
r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180))
r3 = syz_io_uring_setup(0x1f2f, &(0x7f0000000080)={0x0, 0x0, 0x10900}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000080)='O', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r4, 0x1)
getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000013c0))
read$dsp(r2, &(0x7f0000000440)=""/171, 0xab)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
syz_open_pts(r6, 0x0)

7.309653282s ago: executing program 4 (id=857):
socket$inet6(0xa, 0x1, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x6ed3, 0x0, 0x0, 0x0, 0x0)

6.740623729s ago: executing program 4 (id=858):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64], 0x2, 0xa4a, &(0x7f0000000300)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)

5.696736964s ago: executing program 4 (id=860):
socket$inet6(0xa, 0xa, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04060300c900544d6413c2f208687ccfc7e7344b5901c77db578252ed0f7d417e0d8753065075d2bf0fdb218b0f675212af8"], 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nossd}, {@commit={'commit', 0x3d, 0x4}}, {@check_int_data}, {@max_inline={'max_inline', 0x3d, [0x37, 0x36, 0x38, 0x37, 0x6d, 0x36, 0x6d]}}], [{@fsname={'fsname', 0x3d, '^\'++,&!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x31, 0x39, 0x36, 0x30, 0x32, 0x31], 0x2d, [0x37, 0x31, 0x65, 0x34], 0x2d, [0x33, 0x37, 0x36, 0x3e], 0x2d, [0x61, 0x32, 0x65, 0x61], 0x2d, [0x37, 0x62, 0x64, 0x31, 0x30, 0x39, 0x33, 0x33]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'commit'}}]}, 0x1, 0x55c1, &(0x7f000000ac40)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x121c82, 0x109)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x100800001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2fe)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r3, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000ec6d61001be95c03f000700ffff00000700"], 0x17)

5.121383331s ago: executing program 3 (id=861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05dd00000000000001090224"], 0x0)
unshare(0x20040600)
unshare(0x22020400)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.095977673s ago: executing program 0 (id=862):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '-'}]}, 0xd)
mmap(&(0x7f00008a5000/0x1000)=nil, 0x1000, 0x280000b, 0x11, r1, 0x0)
r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYBLOB="ed5e99ca796a2c4bfa82d28c20a05f855fa4d040d1357c3530307be87bf3f1d8e5d31c888e0c0d1e8d8e9e869f7abb8076f8323ff86e398a05cc152c74015c13798d8992802526168a349382bb698e9e12b9df0906362a03fcbce89693c814392a8df79b0aa0e296722d725f1583b45cc5225b12f6d0f1e47e5bd0a3"], 0x22)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
io_uring_setup(0x3eaa, &(0x7f0000002700)={0x0, 0x7966, 0x1844, 0x3, 0x179})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400362e092b010000000000000000000000000a4c000000060a090400000000000000000200000018000480140001800a0001006c696d6974000000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101200080008000100"], 0x17)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x17f29e3eb01d6942)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)

5.040695247s ago: executing program 1 (id=863):
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
write$dsp(r4, &(0x7f00000004c0)='\x00', 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd})
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

4.480846774s ago: executing program 0 (id=864):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0)
unshare(0x20040600)
unshare(0x22020400)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.116199733s ago: executing program 1 (id=865):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c00040014000000001400020002000000e000000200000000000000000d0001008b64703a73797a3200000000835f5423fed3c1efdc17d7ca536ece7cbe523460fa7c1d3e0a0373a130a1f20e92b1765187b50a734ada55e5ef4f6d6d5aa188fcf9986bf12237c47ae630291b5b5ad9b7ad9209415e6db407c00925cb36f762349bf805c5349eaa5f4931db0bbaa5a5df49aecefe71583fde20d476b70bb81869435a2562302275d89bcda2620f53b635da21173c6892594439c03dac5dcd335a15b5521cf502240c724fe298f453bc6ba7a842f2b505187b1e7e800f6867ac9605641973f49dab6324599469aba9d3eb9bc492d6077c01d4ce466b15526023e9fdd7a64530032924ba38b7aa8b36a71b89e753354b54c71fea552c869d172c7eaab02213c633bd7f5327604171de83b90bbbcae6e52bc3db1d553e0f2b45a10ffda1116b88b8b870966b9b00"/365], 0x54}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340), 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f000000fc00))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @private0}, 0x1c)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

4.000188563s ago: executing program 0 (id=866):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x280000b, 0x28011, r0, 0x0)
syz_emit_vhci(0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="02c8201c0018000180000000030256a5e95b367a8937c200000011000200f20ca40a51b632b750170000000000008eb1535bbe19f9940a58676b407003eb10cf5596067162ecfeae6df851d63b59814b184748f23e71c01ef8d6c733ec442d3324cdef6c7f1b83e7667a636a8f088f581db840889c2310f264062988cfbb7298cc0cbd92564e8c07e7b161f3a0fa8f59ba14b840458bdc6ea774684d8328985f39006ac3d9907d8e8ace12b36d3d430a911effc00ac6446b34d1c33150823c861f617ce01e3b148887cf44751fd8fa"], 0x21)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x2, 0xfffffffffffe7fff})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "6e9b"}, 0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
timerfd_create(0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0)

3.164759891s ago: executing program 1 (id=867):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0x84, 0x9d, 0x20, 0x1d6f, 0x10, 0xaa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xef, 0x4, 0x1}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x227d, 0x709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x40, 0x67, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x3, 0x54, 0x1, {0x22, 0x43e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x8, 0x3}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0xb, 0x0, 0x81, 0x48, 0x7}, 0x126, &(0x7f0000000580)={0x5, 0xf, 0x126, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0xa2, 0x6, 0xffff, 0xfa}, @generic={0xff, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "cacc046570c6ba0686c9b7091523f820"}]}, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}, {0x59, &(0x7f0000000740)=@string={0x59, 0x3, "80749fbdf9f6ba852d4fd3b592c14016c3f248b77a2395e1f78c8b29430261d7462908bd851624e687b39f0f441097165d272657c2dbbecaa956b5b2e3c733e694d199fcad16a1d2bca77b25c4b818fc6d63ff0a2d87ad"}}, {0xbc, &(0x7f00000007c0)=@string={0xbc, 0x3, "b648e0339b6734a0c8cfe1b9661d1099a2b4a87fd7aed2020d84deba45847910ae2d928a6fba7a61fddee4ae71ed8d203d83e229e8adbafb517662c4bc668a2f1b57b70168422c9a998382e4279d0d84ee76db1b4c405048e758bf41ff648234a1245865861c68c22b70cad3f0af43ecf57b96e4c50cad850b5f52f8d48a24467ee3d8733d218ba8f56b9f917d59814a6febaaf58019361556466ff36a350dd4129ffcffd581368f60ea14e7bffb426c67141be89e79b5195680"}}, {0x5, &(0x7f0000000880)=@string={0x5, 0x3, "573ccf"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x81a}}, {0xa5, &(0x7f0000000940)=@string={0xa5, 0x3, "f3652901d502e71952e8ca7e420f91065c3778d00d968b1d157ed206abea1c5cf67834dcd260e0a50d59f2b0e8d806807b81e36e80f102545d6201de24c5229177f2792d462fc00e28373ad9d86eb78da2bdeee2a70f689476f509371b497e1ae235cf07da814d8d347046de52fc8e1b726f5c9817fa8fd87242f19a96ef59ccaed26b89557d3c569fc60c14875d23810b6a1f3831b612b7559b5fb6a7dd25ae516629"}}]})
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="c3aa", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x4, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d9fba6188022"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x8, 0xa9, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0xc}, [@acm={0x4, 0x24, 0x2, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x0, 0x4, 0x14, 0x3, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4b, 0x7f, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xc7, 0x6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x5f, 0x8, 0xff, 0x8}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "a94d74ec61fe94a03976ac0babac43c8"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x3c, &(0x7f0000000200)=@string={0x3c, 0x3, "543821097eab19d80a7e864085fb865774836428912fa7f769b332c8f015e0141edddc414e4577ee4d42f2eaa011ee8677928b2c368e61eefaed"}}, {0xb0, &(0x7f0000000240)=@string={0xb0, 0x3, "7976cba7fd048af0c0aa2f5251e6187c321dccbff73bc53b5e3640294c3d6b2bc61b24f11ac3561a1d7f077f14879cb44e03fc662b2b47c271c2f3e47d79d4a716bd0179c6f2aba4e41edf085362004d064fc1dc709351f015e87488c3c641815be76a55f04c58c9c95b452b653243870798b76f228b43bca9219e223ffb944d2fd78735e17111c92ae6ca2922714d8eef93343b0cc4616f5563293aa210eea6569dbd5145dfd0b0e28cf9bc31e0"}}, {0xd4, &(0x7f0000000300)=@string={0xd4, 0x3, "4bd0c898c11701c92ba078375052a33a49b29f6a3ce3a2f960c696472f88a2ad19e510448055b509fa83e841f61431702a7da8b421a07613613f22b35cf5dccf992f6cc095f5c6b63b98f7d681d40a9389f278b8d6d88f8d36c7038539a114091d780c1e36e1b93b7a843e2ad5e32b4ad43547e47eb3c17460db6c8b34d70fb2c3e7fb9704b33fb154163c79290f3f97e445ee60a924b974d477292a6d7fbe78dc843057cce89e91e7866b5b7f03d968580d5207b1a24091ff6f52cc288d4e5bacf85f4b2cceae7d972f4855744e98fb97ca"}}, {0x68, &(0x7f0000000400)=@string={0x68, 0x3, "ede0bcc4020ea6a9a75737c8b589c05af6328cf94f0d947928c80af82a4570af9de3738be447c959c0f62a25a7d11a8f8f628c045039a6faaf326ef866e4ee6102fa9b7cdbfc850149c92dd2f90e4d196ab286f0a518714b4f23ba784fa707a99be3e07be844"}}]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.770948924s ago: executing program 2 (id=868):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '-'}]}, 0xd)
mmap(&(0x7f00008a5000/0x1000)=nil, 0x1000, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="ed5e99ca796a2c4bfa82d28c20a05f855fa4d040d1357c3530307be87bf3f1d8e5d31c888e0c0d1e8d8e9e869f7abb8076f8323ff86e398a05cc152c74015c13798d8992802526168a349382bb698e9e12b9df0906362a03fcbce89693c814392a8df79b0aa0e296722d725f1583b45cc5225b12f6d0f1e47e5bd0a3"], 0x22)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = io_uring_setup(0x3eaa, &(0x7f0000002700)={0x0, 0x7966, 0x1844, 0x3, 0x179})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400362e092b010000000000000000000000000a4c000000060a090400000000000000000200000018000480140001800a0001006c696d6974000000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101200080008000100"], 0x17)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x17f29e3eb01d6942)
socket$inet_sctp(0x2, 0x5, 0x84)

2.472805788s ago: executing program 2 (id=869):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0', [{0x20, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}], 0xa, "15bf3158f3b4c5beaa8a9ea511953cef08b81dedc6989a86c441759f9143160456a26319d35748b0fa16e646523ab5bd24785a1acbae1d23a93b9e516d3c74821654c0362f19a963"}, 0x77)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

2.463085569s ago: executing program 4 (id=870):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x79}, [@ldst]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000000300)=""/188}, 0x90)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0)
syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00056467df1d7e51024709ba80ded5bcf7d7b878086b77b4f6890d0c8518daec08a45899"], 0x1, 0x3b4, &(0x7f0000000480)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48)

2.390683965s ago: executing program 4 (id=871):
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x8)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x5}}, 0x50)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

2.340702499s ago: executing program 4 (id=872):
r0 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)={0x14c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xda}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x90000000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xb75}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x646d}, {0x8, 0x15, 0xd}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008808}, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={<r2=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000680)={{r2, 0x4429, 0x96, 0x400, 0x1ff, 0x6, 0x85eb, 0x6, 0x400, 0xfff, 0x0, 0x40, 0xa3, 0x9, 0x3}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5ba3e514e7323441b55cf23ec"], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x5}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], <r4=>0x0, 0x9c, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x401, 0x8, 0xffffffff, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x2, 0x5}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)

1.833123291s ago: executing program 3 (id=873):
r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180))
r3 = syz_io_uring_setup(0x1f2f, &(0x7f0000000080)={0x0, 0x0, 0x10900}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000080)='O', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r4, 0x1)
getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000013c0))
read$dsp(r2, &(0x7f0000000440)=""/171, 0xab)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
syz_open_pts(r6, 0x0)

1.583632511s ago: executing program 2 (id=874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

1.464030111s ago: executing program 2 (id=875):
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
write$dsp(r4, &(0x7f00000004c0)='\x00', 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd})
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

1.253372208s ago: executing program 1 (id=876):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x619d, &(0x7f0000000780)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18}, 0x18)

587.986493ms ago: executing program 2 (id=877):
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x8)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x5}}, 0x50)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

418.339666ms ago: executing program 2 (id=878):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x0, 0x300)
dup(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d40102030109021200"], 0x0)

386.036509ms ago: executing program 3 (id=879):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc0000"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

314.407105ms ago: executing program 0 (id=880):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '-'}]}, 0xd)
mmap(&(0x7f00008a5000/0x1000)=nil, 0x1000, 0x280000b, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="ed5e99ca796a2c4bfa82d28c20a05f855fa4d040d1357c3530307be87bf3f1d8e5d31c888e0c0d1e8d8e9e869f7abb8076f8323ff86e398a05cc152c74015c13798d8992802526168a349382bb698e9e12b9df0906362a03fcbce89693c814392a8df79b0aa0e296722d725f1583b45cc5225b12f6d0f1e47e5bd0a3"], 0x22)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = io_uring_setup(0x3eaa, &(0x7f0000002700)={0x0, 0x7966, 0x1844, 0x3, 0x179})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400362e092b010000000000000000000000000a4c000000060a090400000000000000000200000018000480140001800a0001006c696d6974000000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000a"], 0x74}}, 0x0)
socket(0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9101200080008000100"], 0x17)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x17f29e3eb01d6942)
socket$inet_sctp(0x2, 0x5, 0x84)

105.272392ms ago: executing program 1 (id=881):
socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {}, 0xff}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0600090582020000000000090503020000000000"], 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r6 = accept4(r3, &(0x7f0000001040)=@nl=@proc, &(0x7f00000010c0)=0x80, 0x0)
getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000001100), &(0x7f00000011c0)=0x4)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

0s ago: executing program 0 (id=882):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x79}, [@ldst]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000000300)=""/188}, 0x90)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0)
syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00056467df1d7e51024709ba80ded5bcf7d7b878086b77b4f6890d0c8518daec08a45899"], 0x1, 0x3b4, &(0x7f0000000480)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48)

kernel console output (not intermixed with test programs):

device strings: Mfr=1, Product=2, SerialNumber=3
[  244.519053][   T22] usb 2-1: Product: syz
[  244.527082][   T22] usb 2-1: Manufacturer: syz
[  244.534601][   T22] usb 2-1: SerialNumber: syz
[  244.645889][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.665525][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.693913][ T3595] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  244.706921][ T3595] cp210x 3-1:0.0: querying part number failed
[  244.753783][ T3595] usb 3-1: cp210x converter now attached to ttyUSB0
[  244.772798][ T3595] usb 3-1: USB disconnect, device number 20
[  244.775008][ T3637] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  244.799834][ T3595] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  244.801933][ T3637] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  244.817955][ T3595] cp210x 3-1:0.0: device disconnected
[  244.826496][ T3637] usb 1-1: USB disconnect, device number 16
[  245.511471][   T22] usb 2-1: 0:2 : does not exist
[  247.358725][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  247.380149][   T22] usb 2-1: USB disconnect, device number 11
[  247.633215][ T3905] udevd[3905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.861231][ T3637] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  248.021167][   T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  248.101177][ T3637] usb 1-1: Using ep0 maxpacket: 16
[  248.263232][   T22] usb 3-1: Using ep0 maxpacket: 8
[  248.381291][ T3637] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  248.390843][   T22] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  248.400279][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.408391][ T3637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.417285][ T3637] usb 1-1: Product: syz
[  248.432449][   T22] usb 3-1: config 0 descriptor??
[  248.438087][ T3637] usb 1-1: Manufacturer: syz
[  248.451467][ T3637] usb 1-1: SerialNumber: syz
[  248.463547][ T3637] usb 1-1: config 0 descriptor??
[  248.505091][ T3637] pwc: Logitech ViewPort AV 100 webcam detected.
[  248.601302][ T3590] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  248.676815][ T5935] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  248.771228][ T3637] pwc: Failed to set LED on/off time (-71)
[  248.791292][ T3637] pwc: send_video_command error -71
[  248.797765][ T3637] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  248.805979][ T3637] Philips webcam: probe of 1-1:0.0 failed with error -71
[  248.821142][ T3588] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  248.830223][ T3637] usb 1-1: USB disconnect, device number 17
[  248.841201][ T3590] usb 2-1: Using ep0 maxpacket: 32
[  249.121407][ T3590] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  249.130644][ T3590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.139687][ T3590] usb 2-1: Product: syz
[  249.150056][ T3590] usb 2-1: Manufacturer: syz
[  249.155127][ T3590] usb 2-1: SerialNumber: syz
[  249.166423][ T3590] usb 2-1: config 0 descriptor??
[  249.181290][ T3588] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.191588][ T3588] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.212084][ T3590] usb 2-1: bad CDC descriptors
[  249.217359][ T3590] cp210x 2-1:0.0: cp210x converter detected
[  249.351247][ T3588] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.360964][ T3588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.369360][ T3588] usb 5-1: Product: syz
[  249.374028][ T3588] usb 5-1: Manufacturer: syz
[  249.378686][ T3588] usb 5-1: SerialNumber: syz
[  249.422035][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.460623][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.521220][ T3590] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  249.528894][ T3590] cp210x 2-1:0.0: querying part number failed
[  249.549478][ T3590] usb 2-1: cp210x converter now attached to ttyUSB0
[  249.579657][ T3590] usb 2-1: USB disconnect, device number 12
[  249.643549][ T3590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  249.678866][ T3590] cp210x 2-1:0.0: device disconnected
[  249.765308][ T3588] usb 5-1: 0:2 : does not exist
[  250.029560][   T22] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  253.692437][   T22] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  253.716878][ T3588] usb 5-1: USB disconnect, device number 19
[  253.739004][   T22] asix: probe of 3-1:0.0 failed with error -71
[  253.837328][   T22] usb 3-1: USB disconnect, device number 21
[  254.122006][ T3595] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  254.141466][ T3588] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  254.185209][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  254.331163][ T3590] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  254.381171][ T3595] usb 2-1: Using ep0 maxpacket: 32
[  254.381224][ T3588] usb 5-1: Using ep0 maxpacket: 32
[  254.671250][ T3588] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  254.680712][ T3588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.689165][ T3588] usb 5-1: Product: syz
[  254.693781][ T3590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.705056][ T3588] usb 5-1: Manufacturer: syz
[  254.709676][ T3588] usb 5-1: SerialNumber: syz
[  254.714328][ T3590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.721235][ T3595] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  254.724894][ T3590] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  254.738581][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.744906][ T3588] usb 5-1: config 0 descriptor??
[  254.752227][ T3595] usb 2-1: Product: syz
[  254.756089][ T3590] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  254.759886][ T3595] usb 2-1: Manufacturer: syz
[  254.759901][ T3595] usb 2-1: SerialNumber: syz
[  254.780253][ T3590] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  254.788071][ T3595] usb 2-1: config 0 descriptor??
[  254.790117][ T3590] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  254.805291][ T3588] usb 5-1: bad CDC descriptors
[  254.810363][ T3588] cp210x 5-1:0.0: cp210x converter detected
[  254.848512][ T3595] usb 2-1: bad CDC descriptors
[  254.853753][ T3595] cp210x 2-1:0.0: cp210x converter detected
[  254.971425][ T3590] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  254.982870][ T3590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.990880][ T3590] usb 4-1: Product: syz
[  254.995337][ T3590] usb 4-1: Manufacturer: syz
[  254.999944][ T3590] usb 4-1: SerialNumber: syz
[  255.017364][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.026810][ T3556] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  255.029092][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.049292][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.068925][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.069080][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.084683][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.110048][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.135043][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.143688][ T3588] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  255.151487][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  255.159706][ T3588] cp210x 5-1:0.0: querying part number failed
[  255.167901][ T3588] usb 5-1: cp210x converter now attached to ttyUSB0
[  255.177991][ T3905] udevd[3905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.201619][ T3595] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  255.206426][ T3588] usb 5-1: USB disconnect, device number 20
[  255.212410][ T3595] cp210x 2-1:0.0: querying part number failed
[  255.240441][ T3595] usb 2-1: cp210x converter now attached to ttyUSB1
[  255.254147][ T3556] Bluetooth: hci4: Unknown advertising packet type: 0x16
[  255.254175][ T3556] Bluetooth: hci4: Unknown advertising packet type: 0x1c
[  255.261375][ T3556] Bluetooth: hci4: Malformed LE Event: 0x0d
[  255.269663][ T3588] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  255.277545][ T3595] usb 2-1: USB disconnect, device number 13
[  255.305887][ T3595] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  255.319969][ T3588] cp210x 5-1:0.0: device disconnected
[  255.321450][ T3595] cp210x 2-1:0.0: device disconnected
[  255.336341][ T3590] cdc_ncm 4-1:1.0: bind() failure
[  255.393598][ T3590] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  255.410457][ T3590] cdc_ncm 4-1:1.1: bind() failure
[  255.428196][ T3590] usb 4-1: USB disconnect, device number 16
[  255.487128][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.495162][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.796757][ T5976] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  256.073399][   T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  256.637985][   T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.650767][   T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.741991][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  256.861359][   T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  256.870430][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.897240][   T14] usb 3-1: Product: syz
[  256.911214][   T14] usb 3-1: Manufacturer: syz
[  256.929457][   T14] usb 3-1: SerialNumber: syz
[  257.096039][ T3595] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  257.291859][   T14] usb 3-1: 0:2 : does not exist
[  257.315197][   T14] usb 3-1: USB disconnect, device number 22
[  257.341321][ T3590] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  257.361431][ T3904] udevd[3904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.381312][ T3595] usb 2-1: Using ep0 maxpacket: 8
[  257.512101][ T3595] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  257.523735][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.538353][ T3595] usb 2-1: config 0 descriptor??
[  257.574986][ T5996] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  257.591268][ T3590] usb 4-1: Using ep0 maxpacket: 32
[  257.711308][ T3590] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  257.741775][ T3590] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  257.780818][ T3590] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  257.805860][ T3590] usb 4-1: config 1 has no interface number 0
[  257.818453][ T3590] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  257.846548][ T3590] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  257.873161][ T3590] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  257.891113][ T3590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.943502][ T3590] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  258.055225][ T3549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.065754][ T3560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.088473][ T3560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.101114][ T3549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.109295][ T3549] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  258.117159][ T3549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.244368][ T6019] chnl_net:caif_netlink_parms(): no params data found
[  258.289577][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.296908][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.305126][ T6019] device bridge_slave_0 entered promiscuous mode
[  258.311210][ T5262] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  258.313685][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.326691][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.335456][ T6019] device bridge_slave_1 entered promiscuous mode
[  258.363547][ T6019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.389953][ T4368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.406947][ T6019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.433749][ T6019] team0: Port device team_slave_0 added
[  258.445170][ T6019] team0: Port device team_slave_1 added
[  258.462768][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.469718][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.497891][ T6019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.528944][ T3590] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  258.555128][ T4368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.575393][ T6019] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.589152][ T6019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.618343][ T6019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.693884][ T4368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.711388][ T5262] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  258.728459][ T6019] device hsr_slave_0 entered promiscuous mode
[  258.738654][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.757416][ T6019] device hsr_slave_1 entered promiscuous mode
[  258.768148][ T5262] usb 3-1: config 0 descriptor??
[  258.806797][ T4368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.823301][ T5262] gspca_main: spca508-2.14.0 probing 8086:0110
[  258.951319][ T3595] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  258.967659][ T3595] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  258.985184][ T3595] asix: probe of 2-1:0.0 failed with error -71
[  259.016562][ T3595] usb 2-1: USB disconnect, device number 14
[  259.041282][ T6018] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  259.351496][ T5262] gspca_spca508: reg_read err -110
[  259.381328][ T5262] gspca_spca508: reg_read err -32
[  259.394005][ T6031] loop0: detected capacity change from 0 to 32768
[  259.410082][ T6031] XFS: ikeep mount option is deprecated.
[  259.416780][ T5262] gspca_spca508: reg_read err -32
[  259.430089][ T6031] XFS: ikeep mount option is deprecated.
[  259.446413][ T5262] gspca_spca508: reg_read err -32
[  259.460505][ T6031] XFS (loop0): Mounting V5 Filesystem
[  259.471236][ T5262] gspca_spca508: reg_read err -32
[  259.501416][ T5262] gspca_spca508: reg write: error -32
[  259.506851][ T5262] spca508: probe of 3-1:0.0 failed with error -32
[  259.561251][ T3590] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  259.583370][ T6031] XFS (loop0): Ending clean mount
[  259.597746][ T6031] XFS (loop0): Quotacheck needed: Please wait.
[  259.644148][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  259.664321][ T6031] XFS (loop0): Quotacheck: Done.
[  259.722799][ T3550] XFS (loop0): Unmounting Filesystem
[  259.909881][ T5262] usb 3-1: USB disconnect, device number 23
[  259.958409][ T3590] usb 4-1: USB disconnect, device number 17
[  259.971710][ T3590] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  260.203614][ T3556] Bluetooth: hci5: command tx timeout
[  260.239534][ T4368] device hsr_slave_0 left promiscuous mode
[  260.248874][ T4368] device hsr_slave_1 left promiscuous mode
[  260.317727][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.336872][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.357773][ T4368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.383592][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.401929][ T4368] device bridge_slave_1 left promiscuous mode
[  260.419582][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.446184][ T4368] device bridge_slave_0 left promiscuous mode
[  260.457560][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.557107][ T4368] device veth1_macvtap left promiscuous mode
[  260.587136][ T4368] device veth0_macvtap left promiscuous mode
[  260.608134][ T4368] device veth1_vlan left promiscuous mode
[  260.635126][ T4368] device veth0_vlan left promiscuous mode
[  260.939598][ T6061] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  261.136278][ T3556] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  261.289423][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  262.687656][ T3556] Bluetooth: hci5: command tx timeout
[  263.000520][ T4368] team0 (unregistering): Port device team_slave_1 removed
[  263.101793][ T4368] team0 (unregistering): Port device team_slave_0 removed
[  263.208335][ T3590] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  263.228595][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.389089][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.491292][ T3590] usb 3-1: Using ep0 maxpacket: 8
[  263.562536][ T6101] loop0: detected capacity change from 0 to 32768
[  263.763872][ T3590] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  263.773770][ T3590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.783541][ T3590] usb 3-1: config 0 descriptor??
[  263.930087][ T6108] find_entry called with index >= next_index
[  263.936211][ T6108] find_entry called with index >= next_index
[  263.942307][ T6108] find_entry called with index >= next_index
[  263.948310][ T6108] find_entry called with index >= next_index
[  263.954907][ T6108] find_entry called with index >= next_index
[  263.981240][ T6108] find_entry called with index >= next_index
[  263.987283][ T6108] find_entry called with index >= next_index
[  264.146117][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805d334400: rx timeout, send abort
[  264.271729][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  264.462567][ T4368] bond0 (unregistering): Released all slaves
[  264.578465][ T6019] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  264.600261][ T6019] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  264.617756][ T6019] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  264.629927][ T6019] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  264.655433][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805d334400: abort rx timeout. Force session deactivation
[  264.725231][ T6117] 9pnet_fd: Insufficient options for proto=fd
[  264.734085][ T6117] netlink: 'syz.0.592': attribute type 10 has an invalid length.
[  264.745809][ T6117] bond0: (slave bond_slave_0): Releasing backup interface
[  264.760164][ T3556] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  264.769453][ T3549] Bluetooth: hci5: command tx timeout
[  264.823141][ T6019] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.837079][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  264.845624][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  264.856315][ T6019] 8021q: adding VLAN 0 to HW filter on device team0
[  264.868236][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  264.878632][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  264.887162][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.894286][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.910323][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  264.918330][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  264.927248][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  264.935819][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.942958][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.957107][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  264.966439][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  264.986365][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  264.995833][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  265.004464][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  265.013241][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  265.022972][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  265.031415][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  265.039632][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  265.047960][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  265.056583][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  265.066296][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.151237][ T5262] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  265.181687][ T3590] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  265.218106][ T3590] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  265.271541][ T3590] asix: probe of 3-1:0.0 failed with error -71
[  265.291573][ T3590] usb 3-1: USB disconnect, device number 24
[  265.311247][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  265.356809][ T5262] usb 1-1: device descriptor read/64, error -71
[  265.381699][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  265.403392][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  265.415143][ T6019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.518022][ T6115] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  265.651521][ T5262] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  265.694502][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  265.714298][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  265.777903][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  265.805644][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  265.834535][ T6019] device veth0_vlan entered promiscuous mode
[  266.187811][ T6019] device veth1_vlan entered promiscuous mode
[  266.583087][ T6019] device veth0_macvtap entered promiscuous mode
[  266.589758][ T5262] usb 1-1: device descriptor read/64, error -71
[  266.626158][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  266.642232][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  266.654416][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  266.673108][ T6144] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  266.761870][ T3556] Bluetooth: hci2: command 0x0406 tx timeout
[  266.832769][ T5262] usb usb1-port1: attempt power cycle
[  266.839064][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  266.846864][ T3560] Bluetooth: hci5: command tx timeout
[  266.853334][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  266.862102][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  266.875255][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  266.895131][ T6019] device veth1_macvtap entered promiscuous mode
[  266.928733][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.952226][ T3637] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  266.976020][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.008141][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.070468][ T6150] 9pnet_virtio: no channels available for device 
[  267.080361][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.093554][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.124558][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.185093][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.201133][ T3637] usb 3-1: Using ep0 maxpacket: 32
[  267.213050][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.236541][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.251286][ T5262] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  267.262355][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  267.275233][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  267.301974][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.323497][ T3637] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  267.342015][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.344178][ T3637] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  267.362844][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.373378][ T3637] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  267.373401][ T3637] usb 3-1: config 1 has no interface number 0
[  267.373436][ T3637] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  267.373457][ T3637] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  267.382920][ T5262] usb 1-1: device descriptor read/8, error -71
[  267.434000][ T3637] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  267.447319][ T3637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.448262][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.485750][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.507302][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.523500][ T3637] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  267.530988][ T6019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.561164][ T6019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.584997][ T6019] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.602296][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  267.612119][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  267.641817][ T6019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.650539][ T6019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.680182][ T6019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.699256][ T6019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.731810][ T3637] snd_usb_pod 3-1:1.1: invalid control EP
[  267.737557][ T3637] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  267.751285][ T5262] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  267.789467][ T3637] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  267.799390][ T3637] snd_usb_pod: probe of 3-1:1.1 failed with error -22
[  267.881576][ T5262] usb 1-1: device descriptor read/8, error -71
[  268.015723][ T4961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.021337][ T5262] usb usb1-port1: unable to enumerate USB device
[  268.046284][ T4961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.104274][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.146925][ T4978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.169193][ T4978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.207999][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.238493][ T6159] 9pnet_fd: Insufficient options for proto=fd
[  268.289116][ T6159] netlink: 'syz.0.602': attribute type 10 has an invalid length.
[  268.359288][ T3560] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  268.921325][ T3560] Bluetooth: hci5: command tx timeout
[  270.361265][ T3560] Bluetooth: hci2: command 0x0406 tx timeout
[  270.821545][ T3560] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  270.836712][  T153] usb 3-1: USB disconnect, device number 25
[  271.088254][ T3560] Bluetooth: Unexpected continuation frame (len 18)
[  271.611200][   T14] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  271.892115][   T14] usb 1-1: Using ep0 maxpacket: 16
[  271.943568][ T6174] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  272.023286][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.031272][  T153] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  272.043841][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  272.079822][   T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  272.086480][ T6195] 9pnet_fd: Insufficient options for proto=fd
[  272.095787][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.317421][   T14] usb 1-1: config 0 descriptor??
[  272.541626][  T153] usb 2-1: Using ep0 maxpacket: 32
[  272.936926][ T6195] netlink: 'syz.4.613': attribute type 10 has an invalid length.
[  272.951291][ T6195] bond0: (slave bond_slave_0): Releasing backup interface
[  272.999537][ T3560] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200'
[  273.009371][ T3560] CPU: 0 PID: 3560 Comm: kworker/u5:7 Not tainted 6.1.98-syzkaller #0
[  273.017541][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  273.027605][ T3560] Workqueue: hci5 hci_rx_work
[  273.032301][ T3560] Call Trace:
[  273.035568][ T3560]  <TASK>
[  273.038504][ T3560]  dump_stack_lvl+0x1e3/0x2cb
[  273.043198][ T3560]  ? nf_tcp_handle_invalid+0x642/0x642
[  273.048658][ T3560]  ? panic+0x764/0x764
[  273.052730][ T3560]  sysfs_create_dir_ns+0x2c6/0x390
[  273.057848][ T3560]  ? sysfs_warn_dup+0xa0/0xa0
[  273.062537][ T3560]  kobject_add_internal+0x6df/0xd10
[  273.067740][ T3560]  kobject_add+0x14e/0x210
[  273.072160][ T3560]  ? device_add+0x3c2/0xfd0
[  273.076677][ T3560]  ? kobject_init+0x1d0/0x1d0
[  273.081368][ T3560]  ? __raw_spin_lock_init+0x41/0x100
[  273.086667][ T3560]  ? get_device_parent+0x128/0x400
[  273.091780][ T3560]  device_add+0x476/0xfd0
[  273.096124][ T3560]  hci_conn_add_sysfs+0xe4/0x1f0
[  273.101067][ T3560]  hci_sync_conn_complete_evt+0x723/0xac0
[  273.106793][ T3560]  hci_event_packet+0xa9d/0x1510
[  273.111743][ T3560]  ? hci_remote_ext_features_evt+0xbf0/0xbf0
[  273.117727][ T3560]  ? bis_list+0x290/0x290
[  273.122048][ T3560]  ? do_raw_spin_unlock+0x137/0x8a0
[  273.127248][ T3560]  ? kcov_remote_start+0x4b5/0x7d0
[  273.132359][ T3560]  ? lockdep_hardirqs_on+0x50/0x130
[  273.137559][ T3560]  ? hci_send_to_monitor+0x99/0x4d0
[  273.142756][ T3560]  hci_rx_work+0x3cd/0xce0
[  273.147163][ T3560]  ? do_raw_spin_unlock+0x137/0x8a0
[  273.152361][ T3560]  ? process_one_work+0x7a9/0x11d0
[  273.157465][ T3560]  process_one_work+0x8a9/0x11d0
[  273.162407][ T3560]  ? worker_detach_from_pool+0x260/0x260
[  273.168051][ T3560]  ? _raw_spin_lock_irqsave+0x120/0x120
[  273.173603][ T3560]  ? kthread_data+0x4e/0xc0
[  273.178109][ T3560]  ? wq_worker_running+0x97/0x190
[  273.183140][ T3560]  worker_thread+0xa47/0x1200
[  273.187814][ T3560]  ? _raw_spin_unlock+0x40/0x40
[  273.192662][ T3560]  ? __sched_text_start+0x8/0x8
[  273.197517][ T3560]  ? _raw_spin_unlock+0x40/0x40
[  273.202371][ T3560]  kthread+0x28d/0x320
[  273.206434][ T3560]  ? worker_clr_flags+0x190/0x190
[  273.211447][ T3560]  ? kthread_blkcg+0xd0/0xd0
[  273.216028][ T3560]  ret_from_fork+0x1f/0x30
[  273.220448][ T3560]  </TASK>
[  273.229750][ T3560] kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  273.231702][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.243505][ T3560] Bluetooth: hci5: failed to register connection device
[  273.280450][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.381365][  T153] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  273.421030][  T153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.472763][  T153] usb 2-1: Product: syz
[  273.499907][  T153] usb 2-1: Manufacturer: syz
[  273.507892][  T153] usb 2-1: SerialNumber: syz
[  273.523846][  T153] usb 2-1: config 0 descriptor??
[  273.598684][   T14] usbhid 1-1:0.0: can't add hid device: -71
[  274.298709][   T14] usbhid: probe of 1-1:0.0 failed with error -71
[  274.374142][   T14] usb 1-1: USB disconnect, device number 22
[  274.401917][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.421354][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.425517][  T153] usb 2-1: bad CDC descriptors
[  274.463506][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.471488][  T153] cp210x 2-1:0.0: cp210x converter detected
[  274.541670][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.631246][  T153] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  274.641258][  T153] cp210x 2-1:0.0: querying part number failed
[  274.775728][  T153] usb 2-1: cp210x converter now attached to ttyUSB0
[  274.796303][  T153] usb 2-1: USB disconnect, device number 15
[  274.961387][   T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  275.001200][ T3560] Bluetooth: hci5: command tx timeout
[  275.583584][  T153] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  275.591823][  T153] cp210x 2-1:0.0: device disconnected
[  275.981645][   T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.011313][   T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  276.030329][   T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  276.175562][ T3556] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1
[  276.232019][   T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.287295][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.295619][   T14] usb 4-1: Product: syz
[  276.302692][   T14] usb 4-1: Manufacturer: syz
[  276.318947][   T14] usb 4-1: SerialNumber: syz
[  276.441927][   T14] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  276.451423][   T14] cdc_ncm 4-1:1.0: bind() failure
[  276.665429][ T6225] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  277.070121][ T3556] Bluetooth: hci4: Unknown advertising packet type: 0x16
[  277.070151][ T3556] Bluetooth: hci4: Unknown advertising packet type: 0x1c
[  277.077392][ T3556] Bluetooth: hci4: Malformed LE Event: 0x0d
[  277.136134][ T3590] usb 4-1: USB disconnect, device number 18
[  277.334707][   T14] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  277.642334][   T14] usb 5-1: Using ep0 maxpacket: 16
[  278.009833][   T14] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  278.031298][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.047210][   T14] usb 5-1: Product: syz
[  278.075219][   T14] usb 5-1: Manufacturer: syz
[  278.111102][   T14] usb 5-1: SerialNumber: syz
[  278.176249][   T14] usb 5-1: config 0 descriptor??
[  278.268870][   T14] pwc: Logitech ViewPort AV 100 webcam detected.
[  278.544633][ T6260] 9pnet_fd: Insufficient options for proto=fd
[  278.563444][  T153] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  278.577639][ T6260] netlink: 'syz.1.634': attribute type 10 has an invalid length.
[  278.595152][   T14] pwc: Failed to set LED on/off time (-71)
[  278.616924][ T6260] bond0: (slave bond_slave_0): Releasing backup interface
[  278.652476][   T14] pwc: send_video_command error -71
[  278.658497][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  278.672432][   T14] Philips webcam: probe of 5-1:0.0 failed with error -71
[  278.728791][   T14] usb 5-1: USB disconnect, device number 21
[  278.824151][  T153] usb 1-1: Using ep0 maxpacket: 16
[  278.853308][ T6265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.864914][ T6254] loop3: detected capacity change from 0 to 32768
[  278.941454][  T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.952548][  T153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  278.965789][  T153] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  278.975123][  T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.991934][  T153] usb 1-1: config 0 descriptor??
[  279.458472][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.479463][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.521175][   T14] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  279.532064][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880202a7400: rx timeout, send abort
[  279.540671][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d32b800: rx timeout, send abort
[  279.549420][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880202a7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  279.564856][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d32b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  279.751377][  T153] usbhid 1-1:0.0: can't add hid device: -71
[  279.757470][  T153] usbhid: probe of 1-1:0.0 failed with error -71
[  279.789421][  T153] usb 1-1: USB disconnect, device number 23
[  279.831216][   T14] usb 5-1: Using ep0 maxpacket: 32
[  279.952339][   T14] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  279.963799][   T14] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  280.009052][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  280.018682][   T14] usb 5-1: config 1 has no interface number 0
[  280.046002][   T14] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  280.057050][   T14] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  280.083699][   T14] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  280.095086][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.158221][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  280.371406][ T4082] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  280.379744][   T14] snd_usb_pod 5-1:1.1: invalid control EP
[  280.388130][   T14] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  280.407475][   T14] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  280.418596][   T14] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[  280.651357][ T4082] usb 4-1: Using ep0 maxpacket: 32
[  280.754888][ T6293] bridge1: the hash_elasticity option has been deprecated and is always 16
[  280.804637][ T6291] 9pnet_fd: Insufficient options for proto=fd
[  280.813087][ T6291] netlink: 'syz.2.645': attribute type 10 has an invalid length.
[  280.824487][ T6291] bond0: (slave bond_slave_0): Releasing backup interface
[  280.840959][ T3556] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  280.972955][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.994223][ T4082] usb 4-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  281.006990][ T4082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.017693][ T4082] usb 4-1: Product: syz
[  281.026888][ T4082] usb 4-1: Manufacturer: syz
[  281.034555][ T4082] usb 4-1: SerialNumber: syz
[  281.051481][ T4082] usb 4-1: config 0 descriptor??
[  281.100230][ T4082] usb 4-1: bad CDC descriptors
[  281.106754][ T4082] cp210x 4-1:0.0: cp210x converter detected
[  281.311179][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.324054][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.343184][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.362537][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.391384][ T4082] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  281.403194][ T4082] cp210x 4-1:0.0: querying part number failed
[  281.414583][ T4082] usb 4-1: cp210x converter now attached to ttyUSB0
[  281.440547][ T4082] usb 4-1: USB disconnect, device number 19
[  281.464263][ T4082] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  281.478603][ T4082] cp210x 4-1:0.0: device disconnected
[  281.684927][ T6296] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  281.943363][ T6306] 9pnet_virtio: no channels available for device 
[  282.225963][  T153] usb 5-1: USB disconnect, device number 22
[  282.771837][ T3562] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  283.021218][ T3562] usb 5-1: Using ep0 maxpacket: 16
[  283.047970][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807670b800: rx timeout, send abort
[  283.056216][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807670ac00: rx timeout, send abort
[  283.064850][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807670b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  283.079307][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807670ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  283.176820][ T3562] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.198405][ T3562] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  283.218413][ T3562] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  283.221775][ T5262] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  283.248152][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.272922][ T3562] usb 5-1: config 0 descriptor??
[  283.424042][ T6327] 9pnet_fd: Insufficient options for proto=fd
[  283.439842][ T6327] netlink: 'syz.0.659': attribute type 10 has an invalid length.
[  283.450096][ T3556] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  283.631315][ T5262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.650707][ T5262] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.743390][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.759852][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.831475][ T5262] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  283.848587][ T5262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.858105][ T5262] usb 2-1: Product: syz
[  283.867361][ T5262] usb 2-1: Manufacturer: syz
[  283.875903][ T5262] usb 2-1: SerialNumber: syz
[  284.021213][ T3562] usbhid 5-1:0.0: can't add hid device: -71
[  284.029490][ T3562] usbhid: probe of 5-1:0.0 failed with error -71
[  284.071593][ T3562] usb 5-1: USB disconnect, device number 23
[  284.231311][ T5262] usb 2-1: 0:2 : does not exist
[  284.310073][ T5262] usb 2-1: USB disconnect, device number 16
[  286.432775][ T6350] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  286.516124][ T3556] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  288.143898][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d666000: rx timeout, send abort
[  288.159794][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d667400: rx timeout, send abort
[  288.175911][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d666000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  288.190275][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d667400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  290.914450][ T6386] rdma_op ffff88805d84f1f0 conn xmit_rdma 0000000000000000
[  290.962973][ T3556] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  291.042946][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  291.271187][ T4082] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  291.671238][ T4082] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.693542][ T4082] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  291.911351][ T4082] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  291.937770][ T4082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.954595][ T4082] usb 2-1: Product: syz
[  291.970417][ T3556] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  291.971157][ T4082] usb 2-1: Manufacturer: syz
[  291.993283][ T4082] usb 2-1: SerialNumber: syz
[  292.004762][ T6399] loop3: detected capacity change from 0 to 32768
[  292.156522][ T3556] Bluetooth: Unexpected start frame (len 26)
[  292.252717][ T6410] find_entry called with index >= next_index
[  292.258734][ T6410] find_entry called with index >= next_index
[  292.264824][ T6410] find_entry called with index >= next_index
[  292.270808][ T6410] find_entry called with index >= next_index
[  292.276845][ T6410] find_entry called with index >= next_index
[  292.288056][ T6410] find_entry called with index >= next_index
[  292.294114][ T6410] find_entry called with index >= next_index
[  292.301697][ T6410] find_entry called with index >= next_index
[  292.307688][ T6410] find_entry called with index >= next_index
[  292.403260][ T4082] usb 2-1: 0:2 : does not exist
[  292.770965][ T4082] usb 2-1: USB disconnect, device number 17
[  293.056641][ T6409] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  293.400968][ T6418] 9pnet_fd: Insufficient options for proto=fd
[  293.427134][ T6418] netlink: 'syz.3.684': attribute type 10 has an invalid length.
[  293.462995][ T6418] bond0: (slave bond_slave_0): Releasing backup interface
[  293.487510][ T3556] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  294.453280][ T6413] loop4: detected capacity change from 0 to 32768
[  294.526041][ T6413] 
[  294.526041][ T6413]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.526041][ T6413] 
[  294.598503][ T6413] 
[  294.598503][ T6413]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.598503][ T6413] 
[  294.609577][ T6413] 
[  294.609577][ T6413]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.609577][ T6413] 
[  294.658334][ T6413] 
[  294.658334][ T6413]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.658334][ T6413] 
[  294.678175][ T3556] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  294.686501][ T6413] 
[  294.686501][ T6413]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.686501][ T6413] 
[  294.768087][ T3556] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  294.771026][  T134] 
[  294.771026][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.771026][  T134] 
[  294.834826][ T6433] 
[  294.834826][ T6433]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.834826][ T6433] 
[  294.875623][ T6430] 
[  294.875623][ T6430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.875623][ T6430] 
[  294.909066][ T6433] 
[  294.909066][ T6433]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.909066][ T6433] 
[  294.921477][ T4082] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  294.989504][ T6430] 
[  294.989504][ T6430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.989504][ T6430] 
[  295.000211][ T6433] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  295.000211][ T6433] �o�*��e�4�b��L����*�" or missing value
[  295.191265][ T4082] usb 3-1: Using ep0 maxpacket: 16
[  295.365078][ T4082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.389014][ T4082] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  295.389907][ T6430] 
[  295.389907][ T6430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  295.389907][ T6430] 
[  295.402043][ T4082] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  295.423817][ T4082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.148410][ T4082] usb 3-1: config 0 descriptor??
[  296.162482][ T6430] 
[  296.162482][ T6430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.162482][ T6430] 
[  296.221870][ T6430] 
[  296.221870][ T6430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.221870][ T6430] 
[  296.270758][  T134] 
[  296.270758][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.270758][  T134] 
[  296.326168][ T6019] 
[  296.326168][ T6019]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.326168][ T6019] 
[  296.344249][ T6019] 
[  296.344249][ T6019]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.344249][ T6019] 
[  296.607361][ T6426] loop3: detected capacity change from 0 to 32768
[  296.625105][ T6437] loop0: detected capacity change from 0 to 32768
[  296.634158][ T6426] 
[  296.634158][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.634158][ T6426] 
[  296.648599][ T6437] 
[  296.648599][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.648599][ T6437] 
[  296.675260][ T6426] 
[  296.675260][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.675260][ T6426] 
[  296.686901][ T6426] 
[  296.686901][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.686901][ T6426] 
[  296.704409][ T6426] 
[  296.704409][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.704409][ T6426] 
[  296.704835][ T6437] 
[  296.704835][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.704835][ T6437] 
[  296.715479][ T6426] 
[  296.715479][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.715479][ T6426] 
[  296.738586][ T6437] 
[  296.738586][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.738586][ T6437] 
[  296.743132][  T134] 
[  296.743132][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.743132][  T134] 
[  296.749678][ T6437] 
[  296.749678][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.749678][ T6437] 
[  296.764976][ T6446] 
[  296.764976][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.764976][ T6446] 
[  296.770039][ T6437] 
[  296.770039][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.770039][ T6437] 
[  296.788186][ T6446] 
[  296.788186][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.788186][ T6446] 
[  296.802098][ T6446] 
[  296.802098][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.802098][ T6446] 
[  296.814563][ T6446] 
[  296.814563][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.814563][ T6446] 
[  296.826748][  T134] 
[  296.826748][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.826748][  T134] 
[  296.829045][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.847026][ T6446] 
[  296.847026][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.847026][ T6446] 
[  296.852279][ T6447] 
[  296.852279][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.852279][ T6447] 
[  296.868039][  T134] 
[  296.868039][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.868039][  T134] 
[  296.871490][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.887626][ T6447] 
[  296.887626][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.887626][ T6447] 
[  296.887971][ T6426] 
[  296.887971][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.887971][ T6426] 
[  296.900198][ T6447] 
[  296.900198][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.900198][ T6447] 
[  296.925755][ T6447] 
[  296.925755][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.925755][ T6447] 
[  296.929744][ T6426] 
[  296.929744][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.929744][ T6426] 
[  296.938966][ T6447] 
[  296.938966][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.938966][ T6447] 
[  296.947468][ T6426] 
[  296.947468][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.947468][ T6426] 
[  296.968566][ T6446] 
[  296.968566][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.968566][ T6446] 
[  296.971422][  T134] 
[  296.971422][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.971422][  T134] 
[  296.986906][ T6426] 
[  296.986906][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  296.986906][ T6426] 
[  297.001167][ T6426] 
[  297.001167][ T6426]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.001167][ T6426] 
[  297.008794][ T4969] 
[  297.008794][ T4969]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.008794][ T4969] 
[  297.019179][  T134] 
[  297.019179][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.019179][  T134] 
[  297.031935][ T4969] 
[  297.031935][ T4969]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.031935][ T4969] 
[  297.040363][ T6446] 
[  297.040363][ T6446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.040363][ T6446] 
[  297.044394][ T4969] 
[  297.044394][ T4969]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.044394][ T4969] 
[  297.058433][ T6446] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  297.058433][ T6446] �o�*��e�4�b��L����*�" or missing value
[  297.065449][  T133] 
[  297.065449][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.065449][  T133] 
[  297.161306][ T4082] usbhid 3-1:0.0: can't add hid device: -71
[  297.167590][ T4082] usbhid: probe of 3-1:0.0 failed with error -71
[  297.181969][ T4082] usb 3-1: USB disconnect, device number 26
[  297.188069][ T6437] 
[  297.188069][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.188069][ T6437] 
[  297.199589][ T6437] 
[  297.199589][ T6437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.199589][ T6437] 
[  297.215527][ T3798] 
[  297.215527][ T3798]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.215527][ T3798] 
[  297.222122][ T6437] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  297.222122][ T6437] �o�*��e�4�b��L����*�" or missing value
[  297.261300][ T3798] 
[  297.261300][ T3798]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.261300][ T3798] 
[  297.345966][ T3550] 
[  297.345966][ T3550]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.345966][ T3550] 
[  297.356976][ T3550] 
[  297.356976][ T3550]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  297.356976][ T3550] 
[  297.470869][ T6444] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  299.797174][ T3556] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  299.841845][ T6462] 9pnet_fd: Insufficient options for proto=fd
[  299.866779][ T3556] Bluetooth: Unexpected start frame (len 26)
[  299.880155][ T6462] netlink: 'syz.0.697': attribute type 10 has an invalid length.
[  299.892229][ T3556] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  300.069119][ T3556] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  300.163413][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  300.691215][   T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  300.851167][ T3562] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  300.951131][   T14] usb 4-1: Using ep0 maxpacket: 16
[  301.119602][ T3556] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1
[  301.128403][ T3556] Bluetooth: Unexpected start frame (len 26)
[  301.221192][ T3562] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.232130][ T3562] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.243758][ T3562] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.261888][   T14] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  301.278747][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.289779][   T14] usb 4-1: Product: syz
[  301.303763][   T14] usb 4-1: Manufacturer: syz
[  301.308729][   T14] usb 4-1: SerialNumber: syz
[  301.326576][   T14] usb 4-1: config 0 descriptor??
[  301.412383][ T3562] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  301.426511][   T14] pwc: Logitech ViewPort AV 100 webcam detected.
[  301.438796][ T3562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.465605][ T3562] usb 5-1: Product: syz
[  301.470022][ T3562] usb 5-1: Manufacturer: syz
[  301.479179][ T3562] usb 5-1: SerialNumber: syz
[  301.523038][ T6496] 9pnet_fd: Insufficient options for proto=fd
[  301.530613][ T6496] netlink: 'syz.0.711': attribute type 10 has an invalid length.
[  301.532728][ T3562] usb 5-1: selecting invalid altsetting 1
[  301.545748][ T3556] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  301.701338][   T14] pwc: Failed to set LED on/off time (-71)
[  301.730932][   T14] pwc: send_video_command error -71
[  301.744443][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  301.749319][ T3556] Bluetooth: hci5: Unknown advertising packet type: 0x16
[  301.751987][ T3556] Bluetooth: hci5: Unknown advertising packet type: 0x1c
[  301.759692][ T3556] Bluetooth: hci5: Malformed LE Event: 0x0d
[  301.774435][   T14] Philips webcam: probe of 4-1:0.0 failed with error -71
[  301.801358][ T5262] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  301.833031][   T14] usb 4-1: USB disconnect, device number 20
[  301.941237][ T3562] cdc_ncm 5-1:1.0: bind() failure
[  301.958463][ T3562] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  301.966662][ T3562] cdc_ncm 5-1:1.1: bind() failure
[  302.012945][ T3562] usb 5-1: USB disconnect, device number 24
[  302.111429][ T5262] usb 2-1: Using ep0 maxpacket: 16
[  302.441456][ T5262] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  302.461769][ T5262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.527522][ T5262] usb 2-1: Product: syz
[  302.537054][ T5262] usb 2-1: Manufacturer: syz
[  302.555034][ T5262] usb 2-1: SerialNumber: syz
[  302.578577][ T5262] usb 2-1: config 0 descriptor??
[  302.664304][ T5262] pwc: Logitech ViewPort AV 100 webcam detected.
[  302.961299][ T5262] pwc: Failed to set LED on/off time (-71)
[  302.991551][   T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  303.002298][ T5262] pwc: send_video_command error -71
[  303.008058][ T5262] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  303.018036][ T5262] Philips webcam: probe of 2-1:0.0 failed with error -71
[  303.034866][ T5262] usb 2-1: USB disconnect, device number 18
[  303.214296][ T4082] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  303.357602][   T14] usb 5-1: Using ep0 maxpacket: 32
[  303.722939][   T14] usb 5-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  303.754878][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.781609][ T4082] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.834851][ T4082] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.850315][   T14] usb 5-1: Product: syz
[  303.885700][   T14] usb 5-1: Manufacturer: syz
[  303.928844][   T14] usb 5-1: SerialNumber: syz
[  303.936984][ T4082] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  304.055030][   T14] usb 5-1: config 0 descriptor??
[  304.070829][ T4082] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  304.082417][ T4082] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  304.151785][ T4082] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  304.163008][   T14] usb 5-1: bad CDC descriptors
[  304.168090][   T14] cp210x 5-1:0.0: cp210x converter detected
[  304.228364][ T6529] 9pnet_fd: Insufficient options for proto=fd
[  304.278120][ T6529] netlink: 'syz.3.723': attribute type 10 has an invalid length.
[  304.351761][ T4082] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.427093][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.437773][ T4082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.466778][ T4082] usb 3-1: Product: syz
[  304.479203][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.491130][ T4082] usb 3-1: Manufacturer: syz
[  304.530115][ T4082] usb 3-1: SerialNumber: syz
[  306.228469][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.600681][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.831734][ T3562] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  308.881260][ T4082] usb 3-1: can't set config #1, error -71
[  308.904560][ T4082] usb 3-1: USB disconnect, device number 27
[  308.941512][   T14] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  308.959209][   T14] cp210x 5-1:0.0: querying part number failed
[  309.095547][   T14] usb 5-1: cp210x converter now attached to ttyUSB0
[  309.113430][   T14] usb 5-1: USB disconnect, device number 25
[  309.128367][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  309.161422][   T14] cp210x 5-1:0.0: device disconnected
[  309.691176][ T3562] usb 2-1: Using ep0 maxpacket: 32
[  310.017158][  T153] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  310.179145][ T6553] loop1: detected capacity change from 0 to 1764
[  310.185839][ T3562] usb 2-1: device descriptor read/all, error -71
[  310.232720][ T3904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.368415][ T4082] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  310.411333][  T153] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  310.423845][  T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.434540][  T153] usb 1-1: config 0 descriptor??
[  310.473464][  T153] gspca_main: spca508-2.14.0 probing 8086:0110
[  310.651144][ T4082] usb 3-1: Using ep0 maxpacket: 16
[  310.676384][ T6540] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  310.691397][  T153] gspca_spca508: reg_read err -71
[  310.711885][  T153] gspca_spca508: reg_read err -71
[  310.731157][  T153] gspca_spca508: reg_read err -71
[  310.754290][  T153] gspca_spca508: reg_read err -71
[  310.771300][  T153] gspca_spca508: reg_read err -71
[  310.791157][  T153] gspca_spca508: reg write: error -71
[  310.796630][  T153] spca508: probe of 1-1:0.0 failed with error -71
[  310.809551][  T153] usb 1-1: USB disconnect, device number 24
[  310.971343][ T4082] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  310.984675][ T4082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.111927][ T4082] usb 3-1: Product: syz
[  311.116130][ T4082] usb 3-1: Manufacturer: syz
[  311.156390][ T4082] usb 3-1: SerialNumber: syz
[  311.189353][ T4082] usb 3-1: config 0 descriptor??
[  311.234988][ T4082] pwc: Logitech ViewPort AV 100 webcam detected.
[  312.016487][ T4082] pwc: Failed to set LED on/off time (-71)
[  312.062844][ T4082] pwc: send_video_command error -71
[  312.078459][ T4082] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  312.127329][ T4082] Philips webcam: probe of 3-1:0.0 failed with error -71
[  312.156172][ T4082] usb 3-1: USB disconnect, device number 28
[  312.404160][ T6557] loop4: detected capacity change from 0 to 32768
[  312.534596][  T155] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  312.612304][   T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  313.421534][ T6577] find_entry called with index >= next_index
[  313.427556][ T6577] find_entry called with index >= next_index
[  313.433592][ T6577] find_entry called with index >= next_index
[  313.439555][ T6577] find_entry called with index >= next_index
[  313.445529][ T6577] find_entry called with index >= next_index
[  313.465600][ T6574] find_entry called with index >= next_index
[  313.471618][ T6574] find_entry called with index >= next_index
[  313.478994][ T6574] find_entry called with index >= next_index
[  313.485050][ T6574] find_entry called with index >= next_index
[  313.571106][  T155] usb 2-1: Using ep0 maxpacket: 32
[  313.986919][  T155] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  313.998533][  T155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.011282][  T155] usb 2-1: Product: syz
[  314.023304][  T155] usb 2-1: Manufacturer: syz
[  314.032237][  T155] usb 2-1: SerialNumber: syz
[  314.193308][  T155] usb 2-1: config 0 descriptor??
[  314.330668][  T155] usb 2-1: bad CDC descriptors
[  314.359110][  T155] cp210x 2-1:0.0: cp210x converter detected
[  317.239723][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.251117][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.281153][   T22] usb 4-1: unable to read config index 0 descriptor/all
[  317.281297][  T155] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  317.288134][   T22] usb 4-1: can't read configurations, error -71
[  317.352442][  T155] cp210x 2-1:0.0: querying part number failed
[  317.434492][  T155] usb 2-1: cp210x converter now attached to ttyUSB0
[  317.448998][  T155] usb 2-1: USB disconnect, device number 21
[  317.472517][ T6585] rdma_op ffff88805b5ff1f0 conn xmit_rdma 0000000000000000
[  317.486515][  T155] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  317.498312][  T155] cp210x 2-1:0.0: device disconnected
[  317.747733][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[  317.993579][  T155] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  318.538453][  T155] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.549091][  T155] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.741214][ T6594] loop4: detected capacity change from 0 to 32768
[  318.751724][  T155] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  318.772262][  T155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.874415][  T155] usb 2-1: Product: syz
[  318.996553][  T155] usb 2-1: Manufacturer: syz
[  319.098377][  T155] usb 2-1: SerialNumber: syz
[  320.332483][ T6610] find_entry called with index >= next_index
[  320.338485][ T6610] find_entry called with index >= next_index
[  320.344575][ T6610] find_entry called with index >= next_index
[  320.350566][ T6610] find_entry called with index >= next_index
[  320.356864][ T6610] find_entry called with index >= next_index
[  320.380182][ T6606] find_entry called with index >= next_index
[  320.386209][ T6606] find_entry called with index >= next_index
[  320.393463][ T6606] find_entry called with index >= next_index
[  320.399435][ T6606] find_entry called with index >= next_index
[  320.501315][  T155] usb 2-1: 0:2 : does not exist
[  320.624604][  T155] usb 2-1: USB disconnect, device number 22
[  320.815866][ T3556] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  320.888029][ T3904] udevd[3904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.923181][ T6607] loop3: detected capacity change from 0 to 32768
[  320.936697][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  320.950098][ T6607] 
[  320.950098][ T6607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  320.950098][ T6607] 
[  320.971296][ T3562] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  321.015692][ T6607] 
[  321.015692][ T6607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.015692][ T6607] 
[  321.036389][ T6607] 
[  321.036389][ T6607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.036389][ T6607] 
[  321.069753][ T6607] 
[  321.069753][ T6607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.069753][ T6607] 
[  321.121162][ T6607] 
[  321.121162][ T6607]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.121162][ T6607] 
[  321.133468][  T133] 
[  321.133468][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.133468][  T133] 
[  321.146800][ T6629] 
[  321.146800][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.146800][ T6629] 
[  321.158066][ T6629] 
[  321.158066][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.158066][ T6629] 
[  321.177977][ T6629] 
[  321.177977][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.177977][ T6629] 
[  321.195688][ T6629] 
[  321.195688][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.195688][ T6629] 
[  321.207624][ T6629] 
[  321.207624][ T6629]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.207624][ T6629] 
[  321.221100][ T3562] usb 3-1: Using ep0 maxpacket: 32
[  321.234979][  T133] 
[  321.234979][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.234979][  T133] 
[  321.250370][ T4954] 
[  321.250370][ T4954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.250370][ T4954] 
[  321.262428][ T4954] 
[  321.262428][ T4954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.262428][ T4954] 
[  321.274175][ T6632] 
[  321.274175][ T6632]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.274175][ T6632] 
[  321.288736][ T6633] 
[  321.288736][ T6633]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.288736][ T6633] 
[  321.308276][ T6632] 
[  321.308276][ T6632]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.308276][ T6632] 
[  321.319472][ T6632] 
[  321.319472][ T6632]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.319472][ T6632] 
[  321.336259][ T6632] 
[  321.336259][ T6632]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.336259][ T6632] 
[  321.347072][ T6632] 
[  321.347072][ T6632]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.347072][ T6632] 
[  321.362966][  T134] 
[  321.362966][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.362966][  T134] 
[  321.373551][ T5087] 
[  321.373551][ T5087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.373551][ T5087] 
[  321.398493][ T5087] 
[  321.398493][ T5087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.398493][ T5087] 
[  321.444095][ T5087] 
[  321.444095][ T5087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.444095][ T5087] 
[  321.460707][ T5087] 
[  321.460707][ T5087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.460707][ T5087] 
[  321.476678][ T6633] 
[  321.476678][ T6633]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.476678][ T6633] 
[  321.478462][ T3556] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  321.487234][ T6633] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  321.487234][ T6633] �o�*��e�4�b��L����*�" or missing value
[  321.501303][ T3562] usb 3-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  321.528454][ T3562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.537270][ T3562] usb 3-1: Product: syz
[  321.541739][ T3562] usb 3-1: Manufacturer: syz
[  321.546365][ T3562] usb 3-1: SerialNumber: syz
[  321.552944][ T3562] usb 3-1: config 0 descriptor??
[  321.592073][ T3562] usb 3-1: bad CDC descriptors
[  321.597451][ T3562] cp210x 3-1:0.0: cp210x converter detected
[  321.669558][ T3798] 
[  321.669558][ T3798]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.669558][ T3798] 
[  321.688757][ T3798] 
[  321.688757][ T3798]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  321.688757][ T3798] 
[  321.800863][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.823537][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.867977][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.921493][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.930933][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'.
[  321.991330][ T3562] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  322.000048][ T3562] cp210x 3-1:0.0: querying part number failed
[  322.019001][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  322.033443][ T3562] usb 3-1: cp210x converter now attached to ttyUSB0
[  322.051546][ T3562] usb 3-1: USB disconnect, device number 29
[  322.059880][ T3562] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  322.068412][ T3562] cp210x 3-1:0.0: device disconnected
[  322.231275][   T14] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  322.328108][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'.
[  322.501253][   T14] usb 5-1: Using ep0 maxpacket: 16
[  322.721504][  T155] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  322.791394][ T6658] rdma_op ffff8880761b19f0 conn xmit_rdma 0000000000000000
[  322.962459][   T14] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=e0.0d
[  322.972258][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.980681][   T14] usb 5-1: Product: syz
[  322.985294][   T14] usb 5-1: Manufacturer: syz
[  322.991904][   T14] usb 5-1: SerialNumber: syz
[  323.083869][   T14] usb 5-1: config 0 descriptor??
[  323.157735][   T14] pwc: Logitech ViewPort AV 100 webcam detected.
[  323.231616][  T155] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  323.251975][  T155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.786646][  T155] usb 2-1: config 0 descriptor??
[  323.831247][  T153] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  323.862858][   T14] pwc: Failed to set LED on/off time (-71)
[  323.870090][  T155] gspca_main: spca508-2.14.0 probing 8086:0110
[  323.880455][ T6667] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  323.901449][   T14] pwc: send_video_command error -71
[  323.906705][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  323.924223][   T14] Philips webcam: probe of 5-1:0.0 failed with error -71
[  323.933310][   T14] usb 5-1: USB disconnect, device number 26
[  324.072564][ T6650] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  324.111305][  T155] gspca_spca508: reg_read err -71
[  324.141288][  T155] gspca_spca508: reg_read err -71
[  324.161182][ T3562] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  324.167115][  T155] gspca_spca508: reg_read err -71
[  324.191201][  T153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.195912][  T155] gspca_spca508: reg_read err -71
[  324.206599][  T153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  324.224264][  T155] gspca_spca508: reg_read err -71
[  324.261296][  T155] gspca_spca508: reg write: error -71
[  324.267948][  T155] spca508: probe of 2-1:0.0 failed with error -71
[  324.286539][  T155] usb 2-1: USB disconnect, device number 23
[  324.372820][  T153] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.401151][ T3562] usb 3-1: Using ep0 maxpacket: 32
[  324.417030][  T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.425717][  T153] usb 4-1: Product: syz
[  324.430197][  T153] usb 4-1: Manufacturer: syz
[  324.438208][  T153] usb 4-1: SerialNumber: syz
[  324.522427][ T3562] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  324.535249][ T3562] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  324.544908][ T3562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  324.553961][ T3562] usb 3-1: config 1 has no interface number 0
[  324.560116][ T3562] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  324.572822][ T3562] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  324.585949][ T3562] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  324.595130][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.643737][ T3562] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  324.771283][  T153] usb 4-1: 0:2 : does not exist
[  324.793303][  T153] usb 4-1: USB disconnect, device number 23
[  325.012411][ T3904] udevd[3904]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  325.201649][ T3562] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  325.270446][ T3556] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  325.305019][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'.
[  325.396052][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  326.371210][ T3562] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  327.433019][ T3562] usb 3-1: USB disconnect, device number 30
[  327.442672][ T3562] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  327.582661][ T6711] rdma_op ffff8880219ed9f0 conn xmit_rdma 0000000000000000
[  327.816716][ T3560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.825436][ T3560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.833133][ T3560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.845000][ T6692] loop4: detected capacity change from 0 to 32768
[  327.850255][ T3560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.859908][ T6692] XFS: ikeep mount option is deprecated.
[  327.871783][ T6692] XFS: ikeep mount option is deprecated.
[  327.873179][ T3560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.885163][ T3560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.915077][ T6692] XFS (loop4): Mounting V5 Filesystem
[  327.941208][   T14] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  327.983899][ T6692] XFS (loop4): Ending clean mount
[  327.991702][ T3562] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  327.998228][ T6692] XFS (loop4): Quotacheck needed: Please wait.
[  328.048319][ T6692] XFS (loop4): Quotacheck: Done.
[  328.050374][ T4954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.136423][ T4954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.136706][ T6019] XFS (loop4): Unmounting Filesystem
[  328.158410][ T6714] chnl_net:caif_netlink_parms(): no params data found
[  328.226090][ T4954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.307875][ T4954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.322465][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.329633][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.338144][ T6714] device bridge_slave_0 entered promiscuous mode
[  328.349293][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.351314][ T3562] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.370368][ T3562] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  328.386652][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.394212][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.402606][ T6714] device bridge_slave_1 entered promiscuous mode
[  328.413031][   T14] usb 1-1: config 0 has no interfaces?
[  328.423162][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  328.427565][ T6710] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  328.436132][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.472396][   T14] usb 1-1: config 0 descriptor??
[  328.500397][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.541459][ T3562] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  328.553842][ T6733] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  328.562751][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.575751][ T3562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.584228][ T3562] usb 3-1: Product: syz
[  328.596673][ T3562] usb 3-1: Manufacturer: syz
[  328.611603][ T3562] usb 3-1: SerialNumber: syz
[  328.639904][ T6714] team0: Port device team_slave_0 added
[  328.657256][ T6714] team0: Port device team_slave_1 added
[  328.709395][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.716716][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.744736][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.805264][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.824993][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.851283][ T3595] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  328.872681][ T6700] kvm [6698]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc1 data 0xfffffc18
[  328.883601][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.016403][ T6714] device hsr_slave_0 entered promiscuous mode
[  329.022838][ T3562] usb 3-1: 0:2 : does not exist
[  329.036818][ T6714] device hsr_slave_1 entered promiscuous mode
[  329.048432][ T3562] usb 3-1: USB disconnect, device number 31
[  329.056483][ T6714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.065009][ T6714] Cannot create hsr debugfs directory
[  329.111338][ T3595] usb 2-1: Using ep0 maxpacket: 32
[  329.249060][ T3595] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  329.258824][ T3595] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  329.274683][ T3904] udevd[3904]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  329.298360][ T3595] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  329.335011][ T3595] usb 2-1: config 1 has no interface number 0
[  329.363640][ T3595] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  329.385902][ T3595] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  329.393911][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'.
[  329.405166][ T3595] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  329.423552][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.492307][ T3595] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  329.663676][ T3562] usb 1-1: USB disconnect, device number 25
[  329.692535][ T3595] snd_usb_pod 2-1:1.1: invalid control EP
[  329.698291][ T3595] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  329.728989][ T3595] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  329.737926][ T3595] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[  329.946017][ T6714] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  329.961332][ T3560] Bluetooth: hci1: command tx timeout
[  330.004215][ T4954] device hsr_slave_0 left promiscuous mode
[  330.010984][ T4954] device hsr_slave_1 left promiscuous mode
[  330.038193][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.051136][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.060602][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.069195][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.077133][ T4954] device bridge_slave_1 left promiscuous mode
[  330.083719][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.092941][ T4954] device bridge_slave_0 left promiscuous mode
[  330.099470][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.151575][ T4954] device veth1_macvtap left promiscuous mode
[  330.163269][ T4954] device veth0_macvtap left promiscuous mode
[  330.174275][ T4954] device veth1_vlan left promiscuous mode
[  330.184867][ T4954] device veth0_vlan left promiscuous mode
[  331.522280][ T5262] usb 2-1: USB disconnect, device number 24
[  331.585506][ T3560] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  331.760132][ T6797] rdma_op ffff888145bb71f0 conn xmit_rdma 0000000000000000
[  331.769014][ T3560] Bluetooth: Unexpected continuation frame (len 18)
[  332.041810][ T3560] Bluetooth: hci1: command tx timeout
[  332.090017][ T4954] team0 (unregistering): Port device team_slave_1 removed
[  332.091121][   T14] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  332.139775][ T4954] team0 (unregistering): Port device team_slave_0 removed
[  332.270363][ T4954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.541251][   T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.564443][   T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  332.812396][   T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  332.821995][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.831883][   T14] usb 3-1: Product: syz
[  332.836155][   T14] usb 3-1: Manufacturer: syz
[  332.840900][   T14] usb 3-1: SerialNumber: syz
[  333.053683][ T6808] loop4: detected capacity change from 0 to 32768
[  333.211707][ T4954] bond0 (unregistering): Released all slaves
[  333.321733][ T6714] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  333.336178][ T6714] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  333.345908][ T6714] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.760988][ T6816] find_entry called with index >= next_index
[  333.767097][ T6816] find_entry called with index >= next_index
[  333.773173][ T6816] find_entry called with index >= next_index
[  333.779194][ T6816] find_entry called with index >= next_index
[  333.785278][ T6816] find_entry called with index >= next_index
[  333.818459][ T6815] find_entry called with index >= next_index
[  333.824545][ T6815] find_entry called with index >= next_index
[  333.838177][ T6815] find_entry called with index >= next_index
[  333.844243][ T6815] find_entry called with index >= next_index
[  334.083642][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  334.100023][ T6813] bridge1: the hash_elasticity option has been deprecated and is always 16
[  334.121136][ T3560] Bluetooth: hci1: command tx timeout
[  334.251396][   T14] usb 3-1: 0:2 : does not exist
[  334.307551][   T14] usb 3-1: USB disconnect, device number 32
[  335.243455][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.320916][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.362000][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.379906][ T6714] 8021q: adding VLAN 0 to HW filter on device team0
[  335.401525][ T6823] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  335.436877][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.458853][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.509138][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.516292][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.525384][ T3560] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  335.562988][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  335.571883][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.580596][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.590382][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.597527][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.605739][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  335.614572][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  335.638706][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  335.668262][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  335.678505][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  335.707682][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  335.732148][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  335.757019][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  335.769715][ T6714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.792771][ T6835] loop4: detected capacity change from 0 to 1764
[  335.799314][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  335.815050][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  335.827569][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  335.857030][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  335.905094][ T3904] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  335.931201][ T4082] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  336.191332][ T4082] usb 1-1: Using ep0 maxpacket: 32
[  336.202818][ T3560] Bluetooth: hci1: command tx timeout
[  336.313124][ T4082] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  336.322273][ T4082] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  336.330979][ T4082] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  336.355825][ T4082] usb 1-1: config 1 has no interface number 0
[  336.362594][ T4082] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  336.379915][ T4082] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  336.419054][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.427481][ T4082] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  336.449318][ T4082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.495495][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  336.517358][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  336.538279][ T4082] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  336.554751][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.563838][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  336.594203][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  336.604968][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  336.659728][ T6714] device veth0_vlan entered promiscuous mode
[  336.678328][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  336.695074][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  336.722447][ T6714] device veth1_vlan entered promiscuous mode
[  336.741862][ T4082] snd_usb_pod 1-1:1.1: invalid control EP
[  336.749938][ T4082] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  336.795250][ T4082] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  336.822805][ T4082] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  336.854143][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  336.882459][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  336.890595][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  336.929982][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  336.956990][ T6847] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  336.965726][ T6714] device veth0_macvtap entered promiscuous mode
[  337.001684][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[  337.052596][ T6714] device veth1_macvtap entered promiscuous mode
[  337.093288][ T6869] bridge1: the hash_elasticity option has been deprecated and is always 16
[  337.210559][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.240106][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.281820][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.320738][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.351906][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.393321][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.441101][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.491307][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.533405][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.544396][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  337.559177][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  337.592098][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  337.600770][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  337.648136][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.687475][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.713266][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.740778][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.766205][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.810951][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.852981][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.899188][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.945651][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.980594][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  337.995935][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.034375][ T6714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.059278][ T6714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.085823][ T6714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.113816][ T6714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.158379][ T6876] loop2: detected capacity change from 0 to 32768
[  338.195092][ T6874] loop4: detected capacity change from 0 to 32768
[  338.340587][ T4082] usb 1-1: USB disconnect, device number 26
[  338.618799][ T6893] find_entry called with index >= next_index
[  338.624932][ T6893] find_entry called with index >= next_index
[  338.630951][ T6893] find_entry called with index >= next_index
[  338.636996][ T6893] find_entry called with index >= next_index
[  338.643039][ T6893] find_entry called with index >= next_index
[  338.781174][ T6893] find_entry called with index >= next_index
[  338.787287][ T6893] find_entry called with index >= next_index
[  338.822004][ T6893] find_entry called with index >= next_index
[  338.828018][ T6893] find_entry called with index >= next_index
[  339.521091][ T6893] read_mapping_page failed!
[  339.525751][ T6893] ERROR: (device loop2): txCommit: 
[  339.525751][ T6893] 
[  339.754175][ T6897] find_entry called with index >= next_index
[  339.760233][ T6897] find_entry called with index >= next_index
[  339.766267][ T6897] find_entry called with index >= next_index
[  339.772299][ T6897] find_entry called with index >= next_index
[  339.778317][ T6897] find_entry called with index >= next_index
[  339.807659][ T6895] find_entry called with index >= next_index
[  339.813758][ T6895] find_entry called with index >= next_index
[  339.827965][ T6895] find_entry called with index >= next_index
[  339.834052][ T6895] find_entry called with index >= next_index
[  340.063018][ T6893] ERROR: (device loop2): remounting filesystem as read-only
[  340.223895][ T6880] loop1: detected capacity change from 0 to 32768
[  340.231574][ T4952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.260452][ T6880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.815 (6880)
[  340.278864][ T4952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.306165][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  340.351456][ T4952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.359529][ T4952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.397665][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.549463][ T3560] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  340.922904][ T3588] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  340.961881][ T6920] 9pnet_fd: Insufficient options for proto=fd
[  341.008232][ T6920] netlink: 'syz.2.817': attribute type 10 has an invalid length.
[  341.055662][ T3560] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  341.301424][ T3588] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.332293][ T3588] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.371362][   T14] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  341.381381][ T3588] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  341.433494][ T3588] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  341.461374][ T3588] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  341.491174][ T3588] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  341.681236][ T3588] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  341.690458][ T3588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.699034][ T3588] usb 4-1: Product: syz
[  341.703914][ T3588] usb 4-1: Manufacturer: syz
[  341.708682][ T3588] usb 4-1: SerialNumber: syz
[  341.771310][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.811755][   T14] usb 2-1: config 0 has no interfaces?
[  341.855988][   T14] usb 2-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  341.888948][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.933224][   T14] usb 2-1: config 0 descriptor??
[  341.983257][ T3560] Bluetooth: hci1: Unknown advertising packet type: 0x16
[  341.983314][ T3560] Bluetooth: hci1: Unknown advertising packet type: 0x1c
[  341.992346][ T3560] Bluetooth: hci1: Malformed LE Event: 0x0d
[  342.031229][ T3588] cdc_ncm 4-1:1.0: bind() failure
[  342.047974][ T3588] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  342.055192][ T3588] cdc_ncm 4-1:1.1: bind() failure
[  342.073508][ T3588] usb 4-1: USB disconnect, device number 24
[  342.318991][ T6926] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  342.329234][ T6917] kvm [6915]: vcpu0, guest rIP: 0x1b4 disabled perfctr wrmsr: 0xc1 data 0xfffffc18
[  342.415689][ T6932] loop4: detected capacity change from 0 to 32768
[  342.439769][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  342.455936][ T6932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.824 (6932)
[  342.478641][ T6937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.529793][ T6932] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  342.549143][ T6932] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  342.558472][ T6932] BTRFS error (device loop4): support for check_integrity* not compiled in!
[  342.576509][ T6932] BTRFS error (device loop4): open_ctree failed
[  342.664564][ T3560] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260
[  342.937692][ T6935] loop0: detected capacity change from 0 to 32768
[  342.968635][   T14] usb 2-1: USB disconnect, device number 25
[  343.111154][ T3560] Bluetooth: hci3: command 0x0406 tx timeout
[  343.354598][ T6945] find_entry called with index >= next_index
[  343.360656][ T6945] find_entry called with index >= next_index
[  343.366742][ T6945] find_entry called with index >= next_index
[  343.372777][ T6945] find_entry called with index >= next_index
[  343.378796][ T6945] find_entry called with index >= next_index
[  343.403934][ T6945] find_entry called with index >= next_index
[  343.409993][ T6945] find_entry called with index >= next_index
[  343.424466][ T6945] find_entry called with index >= next_index
[  343.430511][ T6945] find_entry called with index >= next_index
[  343.716591][ T6945] read_mapping_page failed!
[  343.721688][ T6945] ERROR: (device loop0): txCommit: 
[  343.721688][ T6945] 
[  343.777536][ T6945] ERROR: (device loop0): remounting filesystem as read-only
[  343.909663][ T3556] Bluetooth: Unexpected start frame (len 28)
[  344.231126][  T153] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  344.471134][  T153] usb 3-1: Using ep0 maxpacket: 8
[  344.631197][  T153] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  344.662906][ T6943] loop1: detected capacity change from 0 to 32768
[  344.666222][  T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.712693][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  344.746737][ T6940] loop3: detected capacity change from 0 to 32768
[  344.775072][ T6943] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.796332][  T153] usb 3-1: config 0 descriptor??
[  344.796997][ T6943] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  344.829005][ T6943] BTRFS info (device loop1): use zlib compression, level 3
[  344.991161][ T6943] BTRFS info (device loop1): using free space tree
[  345.596686][ T6961] find_entry called with index >= next_index
[  345.602797][ T6961] find_entry called with index >= next_index
[  345.608823][ T6961] find_entry called with index >= next_index
[  345.614915][ T6961] find_entry called with index >= next_index
[  345.620935][ T6961] find_entry called with index >= next_index
[  345.648786][ T6959] find_entry called with index >= next_index
[  345.654871][ T6959] find_entry called with index >= next_index
[  345.667933][ T6959] find_entry called with index >= next_index
[  345.674548][ T6959] find_entry called with index >= next_index
[  345.779972][ T6971] 9pnet_fd: Insufficient options for proto=fd
[  345.790909][ T6971] netlink: 'syz.4.832': attribute type 10 has an invalid length.
[  345.800133][ T3556] Bluetooth: hci5: Ignoring HCI_Sync_Conn_Complete event for existing connection
[  345.932163][ T6943] BTRFS info (device loop1): enabling ssd optimizations
[  346.115745][ T3544] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.327142][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.836'.
[  346.339952][ T6989] bridge1: the hash_elasticity option has been deprecated and is always 16
[  346.401278][  T153] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  346.411719][  T153] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  346.422800][  T153] asix: probe of 3-1:0.0 failed with error -71
[  346.458654][  T153] usb 3-1: USB disconnect, device number 33
[  346.681366][ T3560] Bluetooth: hci1: command tx timeout
[  347.765220][ T3560] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  347.881115][ T3560] Bluetooth: hci5: command tx timeout
[  347.921442][   T14] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  348.191144][   T14] usb 4-1: Using ep0 maxpacket: 32
[  348.481244][   T14] usb 4-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  348.493502][ T7006] loop2: detected capacity change from 0 to 32768
[  348.517755][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.539778][   T14] usb 4-1: Product: syz
[  348.545173][ T7006] 
[  348.545173][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.545173][ T7006] 
[  348.558693][   T14] usb 4-1: Manufacturer: syz
[  348.594630][   T14] usb 4-1: SerialNumber: syz
[  348.644804][ T7006] 
[  348.644804][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.644804][ T7006] 
[  348.658828][   T14] usb 4-1: config 0 descriptor??
[  348.685213][ T7006] 
[  348.685213][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.685213][ T7006] 
[  348.695407][ T7017] loop0: detected capacity change from 0 to 32768
[  348.701560][ T7006] 
[  348.701560][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.701560][ T7006] 
[  348.721213][ T7017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.843 (7017)
[  348.741731][   T14] usb 4-1: bad CDC descriptors
[  348.749670][   T14] cp210x 4-1:0.0: cp210x converter detected
[  348.756724][ T7006] 
[  348.756724][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.756724][ T7006] 
[  348.824152][  T134] 
[  348.824152][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.824152][  T134] 
[  348.892912][ T7025] 
[  348.892912][ T7025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.892912][ T7025] 
[  348.923858][ T7017] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  348.947953][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.965153][ T7025] 
[  348.965153][ T7025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  348.965153][ T7025] 
[  348.985492][ T7017] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  348.996005][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.012643][ T7025] 
[  349.012643][ T7025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.012643][ T7025] 
[  349.025422][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.031186][ T7017] BTRFS error (device loop0): support for check_integrity* not compiled in!
[  349.046998][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.060467][ T7025] 
[  349.060467][ T7025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.060467][ T7025] 
[  349.094388][ T7017] BTRFS error (device loop0): open_ctree failed
[  349.131580][   T14] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  349.154026][   T14] cp210x 4-1:0.0: querying part number failed
[  349.163608][ T7025] 
[  349.163608][ T7025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.163608][ T7025] 
[  349.163862][ T7020] loop1: detected capacity change from 0 to 32768
[  349.186045][   T14] usb 4-1: cp210x converter now attached to ttyUSB0
[  349.213052][ T3560] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[  349.268058][   T14] usb 4-1: USB disconnect, device number 25
[  349.282897][ T7020] 
[  349.282897][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.282897][ T7020] 
[  349.360691][ T7020] 
[  349.360691][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.360691][ T7020] 
[  349.419276][ T7020] 
[  349.419276][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.419276][ T7020] 
[  349.472476][  T134] 
[  349.472476][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.472476][  T134] 
[  349.501206][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  349.515358][ T5057] 
[  349.515358][ T5057]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.515358][ T5057] 
[  349.526271][ T5057] 
[  349.526271][ T5057]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.526271][ T5057] 
[  349.529465][ T7020] 
[  349.529465][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.529465][ T7020] 
[  349.573748][   T14] cp210x 4-1:0.0: device disconnected
[  349.630412][ T5057] 
[  349.630412][ T5057]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.630412][ T5057] 
[  349.721230][ T7020] 
[  349.721230][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.721230][ T7020] 
[  349.740297][  T134] 
[  349.740297][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.740297][  T134] 
[  349.759732][ T7006] 
[  349.759732][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.759732][ T7006] 
[  349.797790][ T7006] 
[  349.797790][ T7006]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.797790][ T7006] 
[  349.819743][  T134] 
[  349.819743][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.819743][  T134] 
[  349.831753][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'.
[  349.869434][ T7036] 
[  349.869434][ T7036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  349.869434][ T7036] 
[  349.929677][ T7006] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  349.929677][ T7006] �o�*��e�4�b��L����*�" or missing value
[  349.961226][ T3560] Bluetooth: hci5: command tx timeout
[  350.011549][ T7036] 
[  350.011549][ T7036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.011549][ T7036] 
[  350.071192][ T3552] 
[  350.071192][ T3552]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.071192][ T3552] 
[  350.104399][ T3552] 
[  350.104399][ T3552]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.104399][ T3552] 
[  350.134325][ T7036] 
[  350.134325][ T7036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.134325][ T7036] 
[  350.196822][ T7020] 
[  350.196822][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.196822][ T7020] 
[  350.248459][ T7036] 
[  350.248459][ T7036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.248459][ T7036] 
[  350.297783][ T7036] 
[  350.297783][ T7036]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.297783][ T7036] 
[  350.348908][  T134] 
[  350.348908][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.348908][  T134] 
[  350.361975][ T7020] 
[  350.361975][ T7020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.361975][ T7020] 
[  350.437220][ T7034] 
[  350.437220][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.437220][ T7034] 
[  350.459748][ T7020] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  350.459748][ T7020] �o�*��e�4�b��L����*�" or missing value
[  350.497354][ T7034] 
[  350.497354][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.497354][ T7034] 
[  350.519630][ T7034] 
[  350.519630][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.519630][ T7034] 
[  350.545555][ T7034] 
[  350.545555][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.545555][ T7034] 
[  350.563747][ T7034] 
[  350.563747][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.563747][ T7034] 
[  350.650711][  T134] 
[  350.650711][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.650711][  T134] 
[  350.743462][ T3544] 
[  350.743462][ T3544]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.743462][ T3544] 
[  350.774474][ T3544] 
[  350.774474][ T3544]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  350.774474][ T3544] 
[  351.670275][ T7044] loop2: detected capacity change from 0 to 32768
[  351.769842][ T7050] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  352.081142][  T153] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  352.198674][ T3556] Bluetooth: Unexpected start frame (len 112)
[  352.203819][ T7054] loop4: detected capacity change from 0 to 32768
[  352.267797][ T7054] 
[  352.267797][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.267797][ T7054] 
[  352.357528][ T7054] 
[  352.357528][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.357528][ T7054] 
[  352.381136][ T7054] 
[  352.381136][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.381136][ T7054] 
[  352.401519][ T7054] 
[  352.401519][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.401519][ T7054] 
[  352.427268][ T7054] 
[  352.427268][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.427268][ T7054] 
[  352.463923][  T134] 
[  352.463923][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.463923][  T134] 
[  352.471459][  T153] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  352.484908][ T7073] 
[  352.484908][ T7073]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.484908][ T7073] 
[  352.509989][  T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.533031][ T7073] 
[  352.533031][ T7073]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.533031][ T7073] 
[  352.542642][  T153] usb 4-1: config 0 descriptor??
[  352.563896][ T7073] 
[  352.563896][ T7073]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.563896][ T7073] 
[  352.571152][ T3588] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  352.592654][ T7073] 
[  352.592654][ T7073]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.592654][ T7073] 
[  352.609347][ T7073] 
[  352.609347][ T7073]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.609347][ T7073] 
[  352.625783][  T153] gspca_main: spca508-2.14.0 probing 8086:0110
[  352.630821][ T7076] 
[  352.630821][ T7076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.630821][ T7076] 
[  352.687737][  T134] 
[  352.687737][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.687737][  T134] 
[  352.709786][ T7076] 
[  352.709786][ T7076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.709786][ T7076] 
[  352.737220][ T7076] jfs: Unrecognized mount option "����00000000000000000000000��"��C���o��"���'ή���_��0��-�%��+�t��6P���'�k�;/|�%�T�9i�(��%Z��@�G~��ͱ�\�����������%S:U�VT����OvO7MfO�Jj�N��"��Bn�]��XZ
[  352.737220][ T7076] �o�*��e�4�b��L����*�" or missing value
[  352.737231][ T7054] 
[  352.737231][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.737231][ T7054] 
[  352.792363][ T7054] 
[  352.792363][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.792363][ T7054] 
[  352.805313][ T7054] 
[  352.805313][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.805313][ T7054] 
[  352.817598][ T7054] 
[  352.817598][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.817598][ T7054] 
[  352.834230][ T7054] 
[  352.834230][ T7054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.834230][ T7054] 
[  352.857968][  T133] 
[  352.857968][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.857968][  T133] 
[  352.912799][ T6019] 
[  352.912799][ T6019]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.912799][ T6019] 
[  352.951601][ T3588] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  352.961218][ T6019] 
[  352.961218][ T6019]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  352.961218][ T6019] 
[  352.994219][ T3588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.018250][ T3588] usb 2-1: config 0 descriptor??
[  353.083757][ T3588] gspca_main: spca508-2.14.0 probing 8086:0110
[  353.181308][  T153] gspca_spca508: reg_read err -110
[  353.201237][  T153] gspca_spca508: reg_read err -32
[  353.221213][  T153] gspca_spca508: reg_read err -32
[  353.241681][  T153] gspca_spca508: reg_read err -32
[  353.261281][  T153] gspca_spca508: reg_read err -32
[  353.281287][  T153] gspca_spca508: reg write: error -32
[  353.295693][  T153] spca508: probe of 4-1:0.0 failed with error -32
[  353.303356][ T7072] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.585013][ T7084] loop4: detected capacity change from 0 to 1764
[  353.616376][ T3588] gspca_spca508: reg_read err -110
[  353.641607][ T3588] gspca_spca508: reg_read err -32
[  353.661342][ T3588] gspca_spca508: reg_read err -32
[  353.670979][ T3905] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  353.681466][ T3588] gspca_spca508: reg_read err -32
[  353.808106][ T3588] gspca_spca508: reg_read err -32
[  353.922466][ T5262] usb 4-1: USB disconnect, device number 26
[  353.991812][ T3556] Bluetooth: hci2: command 0x0406 tx timeout
[  354.493231][ T3588] gspca_spca508: reg write: error -32
[  354.504663][ T3588] spca508: probe of 2-1:0.0 failed with error -32
[  354.573057][ T3588] usb 2-1: USB disconnect, device number 26
[  355.260163][ T3556] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  355.328232][ T7096] loop4: detected capacity change from 0 to 32768
[  355.362333][ T7096] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.860 (7096)
[  355.405187][ T7096] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  355.429263][ T7096] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  355.448780][ T7096] BTRFS error (device loop4): support for check_integrity* not compiled in!
[  355.479028][ T7096] BTRFS error (device loop4): open_ctree failed
[  355.554620][ T3556] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260
[  355.587801][ T3556] Bluetooth: Unexpected start frame (len 18)
[  355.831124][ T3588] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  356.231200][ T3588] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.033783][ T3588] usb 4-1: config 0 has no interfaces?
[  357.079423][ T3588] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00
[  357.139014][ T3588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.168170][ T3588] usb 4-1: config 0 descriptor??
[  357.343795][ T4079] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  357.541110][ T4082] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  357.621248][ T4079] usb 2-1: Using ep0 maxpacket: 32
[  357.656257][ T3556] Bluetooth: Unexpected continuation frame (len 18)
[  357.811139][ T4082] usb 1-1: Using ep0 maxpacket: 8
[  357.951303][ T4079] usb 2-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7
[  357.960829][ T4082] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  357.970662][ T4082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.979171][ T4079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.987788][ T4079] usb 2-1: Product: syz
[  357.993123][ T4082] usb 1-1: config 0 descriptor??
[  357.998169][ T4079] usb 2-1: Manufacturer: syz
[  358.002812][ T4079] usb 2-1: SerialNumber: syz
[  358.009877][ T4079] usb 2-1: config 0 descriptor??
[  358.052715][ T4079] usb 2-1: bad CDC descriptors
[  358.058874][ T4079] cp210x 2-1:0.0: cp210x converter detected
[  358.241108][ T3588] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  358.255154][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.265099][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.277887][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.286863][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.292774][   T14] usb 4-1: USB disconnect, device number 27
[  358.341602][ T4079] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  358.349295][ T4079] cp210x 2-1:0.0: querying part number failed
[  358.358173][ T4079] usb 2-1: cp210x converter now attached to ttyUSB0
[  358.375776][ T4079] usb 2-1: USB disconnect, device number 27
[  358.394718][ T4079] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  358.410414][ T4079] cp210x 2-1:0.0: device disconnected
[  358.601450][ T3588] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  358.610642][ T3588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.646109][ T3588] usb 5-1: config 0 descriptor??
[  358.703122][ T3588] gspca_main: spca508-2.14.0 probing 8086:0110
[  358.911092][ T7143] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  359.242257][ T3588] gspca_spca508: reg_read err -110
[  359.261248][ T3588] gspca_spca508: reg_read err -32
[  359.281237][ T3588] gspca_spca508: reg_read err -32
[  359.301199][ T3588] gspca_spca508: reg_read err -32
[  359.321452][ T3588] gspca_spca508: reg_read err -32
[  359.332063][ T4082] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  359.341151][ T3588] gspca_spca508: reg write: error -32
[  359.347712][ T3588] spca508: probe of 5-1:0.0 failed with error -32
[  359.373216][ T4082] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  359.408752][ T4082] asix: probe of 1-1:0.0 failed with error -71
[  359.423077][ T4082] usb 1-1: USB disconnect, device number 27
[  359.652130][ T7155] loop1: detected capacity change from 0 to 32768
[  359.668578][ T7155] 
[  359.668578][ T7155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.668578][ T7155] 
[  359.714905][ T7155] 
[  359.714905][ T7155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.714905][ T7155] 
[  359.751219][ T7155] 
[  359.751219][ T7155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.751219][ T7155] 
[  359.772390][ T7155] 
[  359.772390][ T7155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.772390][ T7155] 
[  359.790624][ T7155] 
[  359.790624][ T7155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.790624][ T7155] 
[  359.868363][  T133] 
[  359.868363][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.868363][  T133] 
[  359.895023][ T7159] 
[  359.895023][ T7159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.895023][ T7159] 
[  359.915942][ T7159] 
[  359.915942][ T7159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.915942][ T7159] 
[  359.929906][ T7159] 
[  359.929906][ T7159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.929906][ T7159] 
[  359.946566][ T7159] 
[  359.946566][ T7159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.946566][ T7159] 
[  359.957905][ T7159] 
[  359.957905][ T7159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.957905][ T7159] 
[  359.971937][ T3590] usb 5-1: USB disconnect, device number 27
[  359.996324][  T134] 
[  359.996324][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  359.996324][  T134] 
[  360.018087][ T7161] 
[  360.018087][ T7161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.018087][ T7161] 
[  360.029449][ T7161] 
[  360.029449][ T7161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.029449][ T7161] 
[  360.041265][ T7161] 
[  360.041265][ T7161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.041265][ T7161] 
[  360.054467][ T7161] 
[  360.054467][ T7161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.054467][ T7161] 
[  360.069975][ T7161] 
[  360.069975][ T7161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.069975][ T7161] 
[  360.092761][  T133] 
[  360.092761][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.092761][  T133] 
[  360.116428][ T4954] 
[  360.116428][ T4954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.116428][ T4954] 
[  360.135264][ T4954] 
[  360.135264][ T4954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.135264][ T4954] 
[  360.146180][ T4954] 
[  360.146180][ T4954]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.146180][ T4954] 
[  360.157681][ T3588] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  360.167120][ T3544] 
[  360.167120][ T3544]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.167120][ T3544] 
[  360.179091][ T3544] 
[  360.179091][ T3544]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  360.179091][ T3544] 
[  360.191366][  T133] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN
[  360.203091][  T133] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  360.211506][  T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.98-syzkaller #0
[  360.219311][  T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  360.229364][  T133] RIP: 0010:lmLogSync+0x12c/0xad0
[  360.234403][  T133] Code: ae fe 49 8d 5f f0 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c2 29 d9 fe 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 a5 29 d9 fe 48 8b 3b e8 6d 1a ae
[  360.254022][  T133] RSP: 0018:ffffc90001597c20 EFLAGS: 00010206
[  360.260093][  T133] RAX: 0000000000000006 RBX: 0000000000000030 RCX: be328d3e89b18b00
[  360.268069][  T133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  360.275094][ T7174] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[  360.276028][  T133] RBP: ffffc90001597d38 R08: ffffffff81b70826 R09: ffffc90001597b70
[  360.291612][  T133] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805ccd0800
[  360.293560][ T7174] device bond2 entered promiscuous mode
[  360.299572][  T133] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807ae77a38
[  360.299588][  T133] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  360.299603][  T133] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  360.313516][ T7174] bridge1: the hash_elasticity option has been deprecated and is always 16
[  360.321972][  T133] CR2: 000000110c447507 CR3: 00000000661ea000 CR4: 00000000003506f0
[  360.321991][  T133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  360.322001][  T133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  360.322012][  T133] Call Trace:
[  360.322017][  T133]  <TASK>
[  360.322023][  T133]  ? __die_body+0x5e/0xa0
[  360.322060][  T133]  ? die_addr+0x95/0xc0
[  360.322082][  T133]  ? exc_general_protection+0x3ae/0x590
[  360.322109][  T133]  ? asm_exc_general_protection+0x22/0x30
[  360.386916][  T133]  ? filemap_fdatawrite_wbc+0xa6/0x180
[  360.392364][  T133]  ? lmLogSync+0x12c/0xad0
[  360.396766][  T133]  ? jfs_syncpt+0x22/0x90
[  360.401084][  T133]  ? lmWriteRecord+0x12e0/0x12e0
[  360.401137][ T3588] usb 3-1: Using ep0 maxpacket: 32
[  360.406017][  T133]  ? do_raw_spin_unlock+0x137/0x8a0
[  360.406041][  T133]  jfs_syncpt+0x79/0x90
[  360.420428][  T133]  txEnd+0x30b/0x560
[  360.424306][  T133]  jfs_lazycommit+0x610/0xb60
[  360.428964][  T133]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  360.434848][  T133]  ? lockdep_hardirqs_on+0x94/0x130
[  360.440039][  T133]  ? txFreelock+0x580/0x580
[  360.444525][  T133]  ? do_task_dead+0xd0/0xd0
[  360.449011][  T133]  ? _raw_spin_unlock+0x40/0x40
[  360.453846][  T133]  ? __kthread_parkme+0x168/0x1c0
[  360.458859][  T133]  kthread+0x28d/0x320
[  360.462906][  T133]  ? txFreelock+0x580/0x580
[  360.467386][  T133]  ? kthread_blkcg+0xd0/0xd0
[  360.471966][  T133]  ret_from_fork+0x1f/0x30
[  360.476398][  T133]  </TASK>
[  360.479417][  T133] Modules linked in:
[  360.492400][  T133] ---[ end trace 0000000000000000 ]---
[  360.497994][  T133] RIP: 0010:lmLogSync+0x12c/0xad0
[  360.503168][  T133] Code: ae fe 49 8d 5f f0 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c2 29 d9 fe 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 a5 29 d9 fe 48 8b 3b e8 6d 1a ae
[  360.523220][  T133] RSP: 0018:ffffc90001597c20 EFLAGS: 00010206
[  360.529376][  T133] RAX: 0000000000000006 RBX: 0000000000000030 RCX: be328d3e89b18b00
[  360.531802][ T3588] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.538927][  T133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  360.547905][ T3588] usb 3-1: config 0 has no interfaces?
[  360.555613][  T133] RBP: ffffc90001597d38 R08: ffffffff81b70826 R09: ffffc90001597b70
[  360.568998][  T133] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805ccd0800
[  360.577026][  T133] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807ae77a38
[  360.585063][  T133] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  360.594351][  T133] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  360.600934][  T133] CR2: 00007fff4327ef80 CR3: 000000007f78c000 CR4: 00000000003506f0
[  360.611929][  T133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  360.632333][  T133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  360.647894][  T133] Kernel panic - not syncing: Fatal exception
[  360.654193][  T133] Kernel Offset: disabled
[  360.658507][  T133] Rebooting in 86400 seconds..