last executing test programs:

2m42.302722231s ago: executing program 1 (id=2847):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8911, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0xfb, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a27a76d770bd15b16743994174b295fdf09ad"}], 0x1})

2m39.128189485s ago: executing program 1 (id=2864):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x1, {0xa, @raw_data="5ffa86489f50d1966bab2e5b171221ab7e81ae6f4f984ad4054d687db8f4e65559c7313e83a88a5c2625d612aa249f7b984be80f875ada965fe0cba043486e15d5dd39963f60307e5a65be4123a8666f5d6c8e28ece85dc8dba32f23925023243cf9fa8d3666cda826bfce01d8f78b4b75f6b34d0e5a9dd2599f1635ba7a3188eadde1500ed7a452cbfac5bd9030077851257d7c3ec646daa0229a154fd71b757f209fdfc95265f9f783bd77cf5f34aec548e4d40727fdae4f9d60b82992b03eb72728120079587d"}, 0x1}) (async)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x1, {0xa, @raw_data="5ffa86489f50d1966bab2e5b171221ab7e81ae6f4f984ad4054d687db8f4e65559c7313e83a88a5c2625d612aa249f7b984be80f875ada965fe0cba043486e15d5dd39963f60307e5a65be4123a8666f5d6c8e28ece85dc8dba32f23925023243cf9fa8d3666cda826bfce01d8f78b4b75f6b34d0e5a9dd2599f1635ba7a3188eadde1500ed7a452cbfac5bd9030077851257d7c3ec646daa0229a154fd71b757f209fdfc95265f9f783bd77cf5f34aec548e4d40727fdae4f9d60b82992b03eb72728120079587d"}, 0x1})
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)='Y', 0x1}], 0x1) (async)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000440)='Y', 0x1}], 0x1)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x3, 0x0, 0x2018, 0x8, 0x8, 0x101, 0xb46f3cd, 0x1})
r2 = open(&(0x7f0000000340)='./file0\x00', 0x121000, 0x1b)
syz_open_dev$evdev(&(0x7f0000001640), 0x2, 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000001640), 0x2, 0x0)
ioctl$EVIOCSREP(r3, 0x40084503, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000002c0)={{0x9, 0xf8}, {0x4, 0x81}, 0xb421, 0x4, 0x5})
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
landlock_create_ruleset(&(0x7f0000000580)={0x1}, 0x1, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f0800010041004600003f00000000008490783fffffffac1414aa00000000d8aa4592c82827eb3f2a7dcecbaff54e0eb61a2f46c94840f582fb0c7a8968abfe861f0eb404826277b150fdd26162", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0003e89078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r6, 0x0, 0x0, 0x800) (async)
r9 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040), 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000040)={0x0, @raw_data="b180580e632557abd723f5e9d1c3be41b1738ff714b50a553d663311d31c22648abef2c378f5cae3934280f2defd12632a3689b7374bd93b5e75f556ee599f641782a32d00a86b2093921910d63eccf381fe3f6ba6c079be0d132cd38b37f0105686af9cf41c79d6b087c651df399b68ff34aa75e7e65c4cbedb16686b43d7cb5f97370ba4a4c265c2f9566f0037ec6ec47fb44fb006995675078fb8a17a3d9925983b60e904ec941d4596dfb0da84095cba36f3e92ec8cf9ad3ef91a2a6dc4d5451c516106f0f6b"}) (async)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000040)={0x0, @raw_data="b180580e632557abd723f5e9d1c3be41b1738ff714b50a553d663311d31c22648abef2c378f5cae3934280f2defd12632a3689b7374bd93b5e75f556ee599f641782a32d00a86b2093921910d63eccf381fe3f6ba6c079be0d132cd38b37f0105686af9cf41c79d6b087c651df399b68ff34aa75e7e65c4cbedb16686b43d7cb5f97370ba4a4c265c2f9566f0037ec6ec47fb44fb006995675078fb8a17a3d9925983b60e904ec941d4596dfb0da84095cba36f3e92ec8cf9ad3ef91a2a6dc4d5451c516106f0f6b"})

2m38.793369602s ago: executing program 1 (id=2868):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (async)
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read$msr(r1, &(0x7f00000002c0)=""/195, 0xc3) (async)
read$msr(r1, &(0x7f00000002c0)=""/195, 0xc3)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @global=@item_4={0x3, 0x1, 0xb, "ec5d20ef"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @global=@item_4={0x3, 0x1, 0xb, "ec5d20ef"}]}}, 0x0}, 0x0)

2m35.65152412s ago: executing program 1 (id=2875):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x4, 0x1, 0x1, 0x47, 0x5, 0x5f61}, 0xc)
syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x8a, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x7f, 0xc}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0xc, 0x7, 0x40, 0xd6}, 0x157, &(0x7f0000000100)={0x5, 0xf, 0x157, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x14, 0x91, 0xdcf8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "fc4bc5854ebe99313e31155cc9f5bcc4"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x4, 0xffff, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x100, 0xf000, 0x9, [0xc0, 0xff00f0, 0xffc00f, 0x3f, 0xff00f0, 0xff00]}, @generic={0xfb, 0x10, 0x3, "33ac269c99b454920fa0fc7476720252033a0fd5495ad845e0c460b00d079cd5ef65e6f193f6f3c3b810698d7c07efa31c69b9bf03b4e77764b1144a33f1f21de2e38e4c62c3386e6d99eb090ce1f6cbd72633f64bf3ca5d25608e282be892715047c7895c74b572b5b503991ee2083e68307115777f87aad9d814f2f77dbe034412f1d6dff81b025aac49b8134ac79710d005d500b9620776e98776f3e1e71a7f221f797e0e30a2983acaa9631b2e20ba03cb2e9197aad84729b4513c3f5c3f5f89655e20c8371dcacd10cc15b79032f472b367b5cec60d69e2ab321ff90a98330ee047c1c5288af4692a0874fff33c3a1530335c4c6219"}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x419}}, {0x2a, &(0x7f0000000300)=@string={0x2a, 0x3, "aec98752dd3df2bc862cc8c4dda6c8a9d0c3e91c0f74804207e097de1c3d959735986b0cfbb1c8df"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81a}}, {0x3f, &(0x7f0000000380)=@string={0x3f, 0x3, "34582467ebbdee6f9c5f72b776217172d3f723ad794e680fb367367b7ef24baefa4509cca742f2722ad18119006237430c7c08638a27626ef952f1125a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "e21f4acf0b6254b0031a5a4415f15a34bbccb08456f70e3d610861c84e021b31c9ae1ecbce9fa19ef9d5d4358ff056887b984a2b556cefc11fcfbe875262a196a0ffa154c70be9e090eb1f90a02626ea2506e6f080788986b4695482647a072b0710ee4dbb7edaa7"}}, {0xab, &(0x7f0000000480)=@string={0xab, 0x3, "9f54b29635c4851d84c2fad6b141b27480414758cf92855ade643349fd9acdb6bda9a02c62e67dc1f188f500fcfc2288347f2a5c83cfd0ecc6e171d5581c06dcf1947d381cf79f5c38b4dcc4cc0dc2389ad1429d3c012c48b833fd36bbc1a732828324cab061a0e6da50c90c122ad0d315e71d644676d678f368beb14d4944dc7c8c4d4a70b1457ab1703edfe16b6e497cba5862bc0b027be749923b87a7b76b6a64f1575984fbe456"}}, {0xd, &(0x7f0000000540)=@string={0xd, 0x3, "3ed361541d6c2a3a4a7060"}}]})

2m34.311562813s ago: executing program 1 (id=2879):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000000fffffffffffffffb000064"], 0xfce)

2m34.199214452s ago: executing program 1 (id=2880):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000140)=0xde0, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @empty, 0x40005}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sync()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xd)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)

2m18.343341112s ago: executing program 32 (id=2880):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000140)=0xde0, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @empty, 0x40005}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sync()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xd)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)

1m51.517764562s ago: executing program 4 (id=3023):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8911, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(0x0, 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0xfb, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a27a76d770bd15b16743994174b295fdf09ad"}], 0x1})

1m49.351771149s ago: executing program 4 (id=3028):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x100000000000000, 0x5}, {}, 0x0, 0x0, 0x3, 0x0, 0x2, 0x3}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffffe}}, 0xe4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x600000000000000}, 0x0)

1m49.223461955s ago: executing program 4 (id=3030):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
creat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x12)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r3, 0xf5bd}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000001980)=[@uexit={0x0, 0x18, 0x4}, @code={0xa, 0x56, {"66b89a000f00d0470f01c9670f01ca440f20c03505000000440f22c0c4c189692866ba430066b8010066ef66ba6100ec660ff7f70fba73020e66baf80cb8d4614d86ef66bafc0cb80b000000ef"}}, @rdmsr={0x32, 0x18, {0x841}}, @code={0xa, 0x73, {"c744240000000100c7442402f78a8ab2c7442406000000000f0114240f01c8652e0f78d7b8010000000f01c166420f38f636c4827978ba0180000066baf80cb8dc03a884ef66bafc0cecf246ffad96f70000b805000000b9b26f5ce50f01d90f00d4"}}, @cpuid={0x14, 0x18, {0x4, 0x4}}, @rdmsr={0x32, 0x18, {0x9a1}}, @rdmsr={0x32, 0x18, {0xae0}}, @cpuid={0x14, 0x18, {0x5, 0xfffffffb}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @wrmsr={0x1e, 0x20, {0x263, 0xfffffffffffffc00}}, @rdmsr={0x32, 0x0, {0x20c}}, @uexit={0x0, 0x18, 0x5}, @wr_crn={0x46, 0x20, {0x8, 0x9}}, @uexit={0x0, 0x18, 0x7f}, @rdmsr={0x32, 0x18, {0x2c5}}, @wr_crn={0x46, 0x20, {0x4}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @wr_crn={0x46, 0x0, {0x0, 0x6}}, @uexit={0x0, 0x18, 0x8}, @code={0xa, 0x5f, {"0f01c9460f32b9800000c00f3235004000000f30b805000000b90a0000000f01c1b9800000c00f3235000800000f30460f0766baf80cb8b483798aef66bafc0ced0f01caf4f30f2a8cfc24000000"}}, @wr_crn={0x46, 0x20, {0x2, 0x9d0}}, @rdmsr={0x32, 0x18, {0x866}}, @rdmsr={0x32, 0x18, {0xbca}}, @rdmsr={0x32, 0x18, {0x8f2}}, @wr_crn={0x46, 0x20}, @cpuid={0x14, 0x40, {0x5}}], 0x398})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x20, 0xd, 0xbe, {0xbe, 0x3, "8d29e1b49f5b05356a6d0aa0fb89a8f23cc25dc6e1a1fb57f0a25219ba91a152c892a835c8769bd29e12a7e7ac2fb006f8ce0a5225624fb7e46952b20c818656f47a4fc83bc95bcb0ee0e3a1dd3e4944967fbc19cb9b9101d444e262e3dfa288383cb0ccf345539970b4b53c00b3dac7aa8b3d0e114295bfa549887e768502d009ba03f1ee4f5025081173d24133dc4d3fe31c465aabf6f92524289412bda107db31b9e6c865248c202557bf38088a2119d537a8e2a8853775004b99"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="00fe1201000000cec4ed"]}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x7, 0x8, "cb06fb900f5374b8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x1, "12"}, &(0x7f0000000380)={0x20, 0x82, 0x1, 'L'}, &(0x7f0000000400)=ANY=[@ANYBLOB="208303fbffffcfac7d"], &(0x7f0000000440)={0x20, 0x84, 0x4, "b3c38a54"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "3e838c"}})
r8 = syz_open_dev$hidraw(&(0x7f0000000100), 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0xf)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r9], 0xc4}}, 0x0)
syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000140)='g')
preadv(r8, &(0x7f0000000040), 0x0, 0x100006, 0xc052)

1m46.137821801s ago: executing program 4 (id=3041):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f00000000c0)={0xa, 0xe1d, 0x0, @mcast2}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4)
setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)

1m46.063603013s ago: executing program 4 (id=3042):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f50000000000000000fbff0000000064"], 0xfce)

1m45.803426325s ago: executing program 4 (id=3043):
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103)
dup3(r3, r1, 0x80000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r4=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m45.45550179s ago: executing program 33 (id=3043):
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat$null(r3, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103)
dup3(r3, r1, 0x80000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r4=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

21.498905258s ago: executing program 0 (id=3457):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={<r3=>0x0, 0xe}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/226)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0x400, 0x9, 0x29, 0x0, 0x7, 0x10000, 0x5000, '\x00', 0x4})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x4, @dev={0xac, 0x14, 0x14, 0x36}, 0x4e20, 0x2, 'wlc\x00', 0x0, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'sh\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt(r8, 0x75b6, 0x9c5c, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x2, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x13, 0x4, 0x81}, {@private=0xa010102, 0x4e20, 0x0, 0xc8, 0x80012d58, 0x12d5c}}, 0xffffff57)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

21.360684532s ago: executing program 0 (id=3458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x9)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800170000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x6c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x7050, 0x2f3, 0x88, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x40)

19.550085784s ago: executing program 0 (id=3467):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001340)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, r1, 0x0, 0x0, 0xa513})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r3, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f00000000c0)={0x20, r4, 0x0}) (async)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x3, r4, 0x0, 0x1, 0xb6, &(0x7f0000000240)="e3b23103c09d4abdc9ce9355261ac79ce421d4ea28a71c8d997844482d77302c270712a7c27d837445479f883f33f759bffcd68a2552785735c4a81de0dd19c31cb7f88f6546422e34bc4b39bae1309ffdf8af999146110797f83fe0655c26bc92d418b6c30c72add9cceb26858bc1edbf46b5e7e39585ecd97473cf9c169b603b91ba1c6b591b01b94f70e87920446eec63693aafa681c06086048531ec706c1af7ed0f5017509f7c8babaab4a9ef58872c966e08fa"})
r5 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000540)="a1f65d510d0915841a9bc1b674b44d6338729898e45163dcf2c8d29b77970d2e14004affcb9eca40751c74b74847963e2356f8008bd438cb3f16f647"}) (async, rerun: 64)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000480)=0x8, 0x4) (rerun: 64)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000440)={0x200, @tick=0x8, 0x3, {0x1, 0x7}, 0xd, 0x2, 0x8})
ppoll(&(0x7f00000004c0)=[{r5, 0x80}, {0xffffffffffffffff, 0x804d}, {r5, 0x2000}], 0x3, 0x0, 0x0, 0x0) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r11, 0xaea2, 0xfffffffffffffff7) (async)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r12, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='wlan1\x00'}) (async)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r14=>0x0})
setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000140)={r14, 0x1, 0x6, @local}, 0x10) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0)
setsockopt$packet_drop_memb(r13, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10) (async)
r15 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r15, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]})

19.359529669s ago: executing program 0 (id=3468):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="bc01000001018610f4205ae06d6c0102030109022400eb010000000904690202ff5aa300090402"], 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]})
r3 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16, @ANYRES16], 0x0)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008})
syz_usb_ep_read(r3, 0x1, 0xe2, &(0x7f0000000280)=""/226)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl$Q_QUOTAOFF(0xffffffff00000605, 0x0, 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0xf4}, 0x1, 0x0, 0x0, 0x4004000}, 0x880)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="bc01000001018610f4205ae06d6c0102030109022400eb010000000904690202ff5aa300090402"], 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES16, @ANYRES16], 0x0) (async)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)) (async)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008}) (async)
syz_usb_ep_read(r3, 0x1, 0xe2, &(0x7f0000000280)=""/226) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
quotactl$Q_QUOTAOFF(0xffffffff00000605, 0x0, 0x0, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0xf4}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) (async)

18.260973872s ago: executing program 0 (id=3476):
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0xe4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0xe4}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r4, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'})
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x8, @local, 0x4e24, 0x1, 'nq\x00', 0x4, 0xa94, 0x6d}, 0x2c)
sendto$inet(r1, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x8d}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d0822475", 0x23}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc7", 0x15}], 0x3}}], 0x1, 0x20008000)
shutdown(r1, 0x1) (async)
shutdown(r1, 0x1)
read$alg(r0, &(0x7f0000001280)=""/4096, 0x1000)
write(r0, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a)

18.050614373s ago: executing program 0 (id=3477):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$sndseq(r1, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0xfd, @tick, {0x4}, {0xe}, @raw8}], 0x1c)
mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x40)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000967e61f976d2b7d629cb182705272a409ab932b009deee2d8b7fbbe80693fef5841e323c3261fa49ee30363e4cc791fdaa7389097fb042ed2b2490402671b9950676150d507c6e56442b8276f7e50870c1659d0f84b5585525fe0fb64ff954cdaf65ab250fad092431713be6b73272a2a9eb727c63f777169f1d9862c70155391a6035d23b3208adb11154a570496c8df791d4bc50547d6640c5d656ee6fe5b8e34426a7bc5820bc1e7cc5a67af8405a189b50040a7099dec8f001b03860", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf25110000000c0009800800010001000100"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r5 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x108)
accept4$llc(r7, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000340)=0x10, 0x800)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e019", 0x2}], 0x1}}], 0x1, 0x2000c000)
sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)="6991067f52c9da7793d0c05742d726670e0a58fa1abf60adc96dc1e15a3edc1feac629ac149b6d0faff7409aa6760bd21dbc4d5353061d28959c712c24fc01dcedb0561dc70bd2e4c244cb9895452d63198207ed9d8c46f7e118dd4050a3c21b40c60b6771d093804f913d19063b4beac6", 0x71}], 0x1}}], 0x1, 0x24040040)

15.983287628s ago: executing program 3 (id=3490):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) (async)
write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x7a268b9e, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7fe, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x5, 0x3, 0x2, 0x5f, 0x4, 0x54e, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xb4, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x24a9, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x495c9741, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x80a, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x0, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff8, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0xffd, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xe, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdac, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000004c0)={0x5, 0x0, 0x7f}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000004c0)={0x5, 0x0, 0x7f})
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00'})

15.596670246s ago: executing program 3 (id=3492):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "a4457f8aa407495a", "e63bc7e08bd0f55cdd29e098d9a2ffab", "e2d13355", "e0cc0221e01f20fb"}, 0x28)
r1 = socket$inet6(0x10, 0x5, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

15.451466521s ago: executing program 3 (id=3493):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mincore(&(0x7f00003f3000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/190)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x7})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) (async)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
set_mempolicy(0x4, 0x0, 0x0) (async)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x91, 0xfb, 0x48, 0x8, 0xc72, 0xc, 0x57da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x4, 0x4, 0x0, 0xb6, 0x3a, 0x5a, 0xf4}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x2, 0x1ffe, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async)
syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) (async)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9})

15.37365362s ago: executing program 3 (id=3495):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x1085408, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="1b51a7ab6f7cc057d39672feb6fff2e39e3952b861", 0x15}], 0x1, 0x0, 0x0, 0x8011}], 0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
move_mount(0xffffffffffffffff, &(0x7f0000000300)='./bus/../file0\x00', r1, &(0x7f0000000340)='./bus\x00', 0x80)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xe}, &(0x7f00000001c0)=0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="375a7a04425bb30000", @ANYRES16=r4, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008a000000100049"], 0x34}}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000100)={[{@xino_auto}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x1085408, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="1b51a7ab6f7cc057d39672feb6fff2e39e3952b861", 0x15}], 0x1, 0x0, 0x0, 0x8011}], 0x1, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
move_mount(0xffffffffffffffff, &(0x7f0000000300)='./bus/../file0\x00', r1, &(0x7f0000000340)='./bus\x00', 0x80) (async)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xe}, &(0x7f00000001c0)=0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="375a7a04425bb30000", @ANYRES16=r4, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008a000000100049"], 0x34}}, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000100)={[{@xino_auto}, {@volatile}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='pids.current\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) (async)

15.121518157s ago: executing program 3 (id=3496):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000000000000000000000000fb64"], 0xfce)

14.702913171s ago: executing program 3 (id=3497):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="239dc63572010000", @ANYRES32=r3, @ANYBLOB="10005a800c0001800400010004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})

14.48869243s ago: executing program 34 (id=3497):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="239dc63572010000", @ANYRES32=r3, @ANYBLOB="10005a800c0001800400010004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})

9.662023369s ago: executing program 5 (id=3504):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
r1 = open(&(0x7f0000000000)='.\x00', 0x200002, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200)
mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x208002, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

7.280441545s ago: executing program 2 (id=3509):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905}})
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x4000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5411, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0)
connect$vsock_stream(r5, 0x0, 0x0)
r6 = dup(r4)
read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a)
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc5, 0x4f, 0x40, 0x2, 0x0, 0x1, 0x3, 0x44, 0x8, 0x3, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x5, 0x9, 0xff, 0x4, 0x3, 0x1, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0xf9, 0x9, 0x40, 0xfb, 0x6, 0x7b, 0x0, 0x2, 0x4}], 0x9})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x9, 0x4], 0xeeee8000, 0x400})
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, <r11=>0x0}, &(0x7f0000000280)=0x5)
setuid(r11)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000081)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

6.589226103s ago: executing program 5 (id=3513):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x6820, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}, {@cache_fscache}], [], 0x6b}})
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e044f6d0c"], 0x7)
openat$dir(0xffffffffffffff9c, 0x0, 0x6c6882, 0x6d)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000000), 0x4)
splice(r3, &(0x7f0000000340)=0x5, r5, &(0x7f0000000400)=0xffff, 0xa, 0x8)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x8000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008040)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r6)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109026600010000ae0009040000024f69960009050f"], 0x0)
setsockopt(r7, 0x4, 0x6, &(0x7f0000000440)="fcd8db3557c3a820a92204685e0c512cd25a0fc59e4149418cb465a11375506a8cc0b9bf709c6f77c190", 0x2a)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x4)
syz_open_dev$vim2m(&(0x7f00000000c0), 0xe3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2481000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xb0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xfc5b, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000006c0)=""/85, 0x55}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000a00)=""/205, 0xcd}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

4.13984867s ago: executing program 2 (id=3515):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000080))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'bond0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0)

3.555478333s ago: executing program 5 (id=3516):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000000000406a05ba0000000000000109022400010000000009040001010300010009210010060122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, 'y'}, @main=@item_4={0x3, 0x0, 0xb, "5b45d449"}]}}, 0x0}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x10, 0xb4, {0xb4, 0xd, "0fdcc5f3ff18eeadbd4e4dab2d098abe238585e3289dc0d892d9c60a754374b3482af973ef25351089870638f8e07bf29da9e0609e7053b9f7fad24d35ae3a81821a8a2266c58b8da30625d720b785f48a5e826e31475ec156348f2c1d86250d8cacb5235d985c255ff8e956a38ecff01ef28be9d6983ee59adc8f0215906fd8b35e78d16d0cd1219d60b890e0172c68f5f6f5d9edb46afd429d96952b3e314211292be961ec5fc392d9324c8f02d6a913c2"}}, &(0x7f0000000140)={0x0, 0x3, 0x5a, @string={0x5a, 0x3, "2dbdf78d60a0a1c649009f443769b53072dbdc6ad19666c95a997e67663c8b71e452e9cfbc63f575c0fc61c675af943d412c30e7a55e390359fb3ba8089926a9a42cf6d2bd1ae0e0e63ba82ceaa36b70bb5ed40ab9a60192"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x0, 0xb, 0x40, "33ab51a074ae4f82fd76cb6a39cfc5855c4eeb5733a702d948adaf8ec5d1d8110537c5e49d5869fc7e2f9f2d113f1252c0a545607d73780b902310efff28c6d8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000400)=ANY=[@ANYBLOB="2000190000000017dbfd8e682bad0feed9f3e468e92f8433e20d3a925f7f5be5b0c91986ab167764e82f80c40e81711b6fb5820cf2f93757a6ab93feecfdeecb8c8b16d3cf2cec7fa3f29c80402bcb4daffd6146481b37745d20272b2a4c3667a2b824a8d246f1aecb106a6c1382943dc9f4b242e3b7093c5e810972d4a14a7053a333024895255e70d8"], &(0x7f0000000340)={0x20, 0x1, 0x1, 0x43}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}})

2.88843646s ago: executing program 35 (id=3477):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$sndseq(r1, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0xfd, @tick, {0x4}, {0xe}, @raw8}], 0x1c)
mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x40)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000967e61f976d2b7d629cb182705272a409ab932b009deee2d8b7fbbe80693fef5841e323c3261fa49ee30363e4cc791fdaa7389097fb042ed2b2490402671b9950676150d507c6e56442b8276f7e50870c1659d0f84b5585525fe0fb64ff954cdaf65ab250fad092431713be6b73272a2a9eb727c63f777169f1d9862c70155391a6035d23b3208adb11154a570496c8df791d4bc50547d6640c5d656ee6fe5b8e34426a7bc5820bc1e7cc5a67af8405a189b50040a7099dec8f001b03860", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf25110000000c0009800800010001000100"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r5 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x108)
accept4$llc(r7, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000340)=0x10, 0x800)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e019", 0x2}], 0x1}}], 0x1, 0x2000c000)
sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)="6991067f52c9da7793d0c05742d726670e0a58fa1abf60adc96dc1e15a3edc1feac629ac149b6d0faff7409aa6760bd21dbc4d5353061d28959c712c24fc01dcedb0561dc70bd2e4c244cb9895452d63198207ed9d8c46f7e118dd4050a3c21b40c60b6771d093804f913d19063b4beac6", 0x71}], 0x1}}], 0x1, 0x24040040)

2.881179427s ago: executing program 2 (id=3518):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x3a) (async)
r1 = socket$netlink(0x10, 0x3, 0x13) (async)
r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0x6, 0x2, &(0x7f00000000c0)={0xc, "738c0ffa025c21f900"}}) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
ioctl$FITHAW(r1, 0xc0045878) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async)
ioctl$TCFLSH(r3, 0x89f2, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 64)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x5e, @private=0xa010100, 0x4e20, 0x3, 'sed\x00', 0x30, 0x200, 0x76}, 0x2c) (async)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a84b17e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572602324b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b80a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfe9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c92e8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fcd100ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b89a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9b874a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2bc, 0x4000, 0x0, 0x0) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)="946441960afadc888b6f7600008bf66aba78e14128f4174b6f0fa935396e48a1ba0eea52b66b95dd21f4719709f2c19825daf042ba7ae98578a2012afe139d23dccfcf82c28fd1f6eaa93e4e36e29c76fcab2b0d9e55bfe60be1ab027b4c07f188bee57d5bd79fa46880cca27aa94d5c2f", 0x71}, {&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc3089667968a8eac3", 0x46}], 0x2) (async)
setgroups(0x0, &(0x7f00000003c0))
read$FUSE(r7, &(0x7f0000003000)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0x3) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105020000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)

2.735237476s ago: executing program 2 (id=3519):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000099000040"])
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0xfffffffe, &(0x7f0000000080)})

2.645436988s ago: executing program 6 (id=3520):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
syz_open_dev$dri(&(0x7f0000000d40), 0x1, 0x0)
write$sndseq(r0, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000140)={'veth0_to_batadv\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000))
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1)

2.526869931s ago: executing program 2 (id=3521):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}}}, 0xe0}}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000040))
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c59bbcb8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/69, 0x45}], 0x1)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000002100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002140)=0x1c)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000100)=0x7, 0x4)
pipe2$9p(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
write$9p(r7, &(0x7f0000000040)="9daa3de1b1c00bceab43eaba112d8410b9f4ad13ec1904c71b71f4de", 0x1c)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000025c0)=ANY=[@ANYBLOB="2400a04623db22c00000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250b000000050029000100000005002f0000000000"], 0x24}}, 0x0)
read$FUSE(r6, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
wait4(r8, 0x0, 0x2, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r9 = syz_clone3(&(0x7f0000002540)={0x4800000, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300), {0x2}, &(0x7f0000002340)=""/228, 0xe4, &(0x7f0000002440)=""/147, &(0x7f0000002500)=[r8, r8, r8], 0x3}, 0x58)
prlimit64(r9, 0x6, 0x0, 0x0)

2.223602104s ago: executing program 6 (id=3522):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000180)=0xffff0018)
ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000608000008000e"], 0x24}}, 0x0)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x20000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r3)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1d, 0xa8, @random="ff40734df16b68033ef15cd5cb33ebd3bb1d586432d2cb0f9d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361c0000000000000000275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0)

1.595164397s ago: executing program 6 (id=3523):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x60, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "436d9bb9c5e13fcd62bca7f88d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080)

1.551791549s ago: executing program 6 (id=3524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x64, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg$unix(r3, 0x0, 0x0, 0x0, &(0x7f000000b700))
r4 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41)
ioctl$BLKSECDISCARD(r4, 0x127d, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

1.503692676s ago: executing program 2 (id=3525):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000104)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8911, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x8000, 0x2d, &(0x7f0000000200)="5c8c9b3871fe66783719f3407146a37948fc25617888afb8bd3da46d8e9902bd7a27a76d770bd15b1674399417"}], 0x1})

1.461881196s ago: executing program 6 (id=3526):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0x2000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb1000040"])
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009a47ad20b80402024630000000010902120001000040000904"], 0x0)

497.152501ms ago: executing program 5 (id=3527):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000))

375.650639ms ago: executing program 5 (id=3528):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "0040001e1d113c812e5d6000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="2fb6e6bd", 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {{'ctr-cast6-avx\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32)
setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000140)=0x4, 0x4)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

185.658295ms ago: executing program 5 (id=3529):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
r1 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r1, 0x4000000)
fcntl$addseals(r1, 0x409, 0x2)
r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x2000})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000780)={0x28, 0x7, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000280)={0x28, 0x7, r5, r5, 0x7, 0xffffffffffff9d3b, 0x1ff})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000840)={0x28, 0x4, r5, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0xffffffff, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
syz_usb_disconnect(r0)

0s ago: executing program 6 (id=3530):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYBLOB="22bbd2b4a2174af895aab4f66495dbb511489e6400777ed6fcd8aec59a13304d8feb1a5d1a870b2a5fc40e098797eef586627a90aa994e233985ba6ec2897f4afeaed26abbbc23c54a005a975db4537ea8a788862cdd74a1fb5bffaf60f976c4c2aef3db730067ed349358ed80847464a727a51c624376c156751322b4", @ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}, {&(0x7f0000000180)="56b3a748208223559da71e82e45f04c643d85e703a4d035b062cb37605ae869de6f371574645667ccc59af156fd7012245a995b1dfbe35d812d5e4fb36962d5c1f356300c20fd5775b11eed19d902c3f9344064a97a69ce6717840b9aae09f23facbd9af40cf3e6fb60c51fe5137830dc057f9", 0x73}, {&(0x7f0000000200)="ea3957b7564a77fea3959e853a119fd9357ef9d8052bc870ca12e7955c1efcf3a8fe6863005805f50d3749e0648b21a045a18523f20c135e7d8e8de20078e74e7240b2db21c530f311", 0x49}], 0x3, 0x0, 0x0, 0x7400}, 0x4001)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x582030addc1e9a91, &(0x7f00000000c0)=0x3fa, 0x1b)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0xc0, 0xa2, 0x8, 0x10b8, 0x1e6e, 0x308d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x94, 0x0, 0x0, 0xd3, [{{0x9, 0x4, 0x2e, 0x0, 0x0, 0xac, 0x19, 0x17}}]}}]}}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000480)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f00000004c0)={r6})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000680)={0x20, 0x12, 0x1, '3'}, 0x0, 0x0})
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r2, 0xfffefffe)
listen(r3, 0xffff8001)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="ecf963daaac8a7c2bd489c810c91d5c5ac1a7d095f85aab7b3f725697f518df8f0c92e0f3ce64fabf5b40eb6389197ef929a746bfced63411d81f09605d7294ce26a6b00982ddfc6cb8961264239c2c43a255d479fc66ea941b816e77c54fcf342e4858e40ed515fe484340e6f11d0c3a457bd13478c8534e9766eb09cca6897a24cfc48f47d6dbde67f788b371fd58b4acf45914835ff4ed91ff71fd25eaa747d245fa382684c0d6a035ecfba50ee51e4b73815a38209066154ccdd207f9a8cd5c45b9068f349f5d2c505"], 0x1ff7)

kernel console output (not intermixed with test programs):

 config 0 descriptor??
[  585.446563][ T5964] usb 1-1: Using ep0 maxpacket: 8
[  585.458030][ T5964] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  585.466321][ T5964] usb 1-1: config 179 has no interface number 0
[  585.472862][ T5964] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  585.484042][ T5964] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  585.495680][ T5964] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  585.507007][ T5964] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  585.518517][ T5964] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  585.532413][ T5964] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  585.541959][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.554236][T15398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  585.644021][T15409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.664409][T15409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.674658][  T956] nzxt-kraken2 0003:1E71:170E.0035: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.3-1/input0
[  585.859319][  T956] usb 4-1: USB disconnect, device number 3
[  585.914470][   T43] usb 1-1: USB disconnect, device number 101
[  585.914548][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  585.914596][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  586.086210][ T5947] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  586.246444][ T5947] usb 3-1: Using ep0 maxpacket: 8
[  586.253334][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.263753][ T5947] usb 3-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  586.277933][ T5947] usb 3-1: config 1 interface 0 has no altsetting 0
[  586.286452][   T43] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  586.294008][ T5947] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.303829][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.312188][ T5947] usb 3-1: Product: syz
[  586.316531][ T5947] usb 3-1: Manufacturer: syz
[  586.321124][ T5947] usb 3-1: SerialNumber: syz
[  586.436218][   T43] usb 1-1: Using ep0 maxpacket: 32
[  586.449595][   T43] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  586.459814][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.471432][   T43] usb 1-1: Product: syz
[  586.475765][   T43] usb 1-1: Manufacturer: syz
[  586.480835][   T43] usb 1-1: SerialNumber: syz
[  586.488632][   T43] usb 1-1: config 0 descriptor??
[  586.502805][   T43] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  586.571783][ T5947] usb 3-1: bad CDC descriptors
[  586.588960][ T5947] usb 3-1: USB disconnect, device number 127
[  586.779978][   T30] audit: type=1326 audit(6049207156.653:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15427 comm="syz.3.3184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f390338eba9 code=0x0
[  587.905504][ T5964] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  588.055257][ T5964] usb 4-1: Using ep0 maxpacket: 16
[  588.062160][ T5964] usb 4-1: config 129 has an invalid interface number: 169 but max is 0
[  588.070793][ T5964] usb 4-1: config 129 has no interface number 0
[  588.078849][ T5964] usb 4-1: config 129 interface 169 altsetting 129 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  588.091107][ T5964] usb 4-1: config 129 interface 169 altsetting 129 endpoint 0xD has invalid maxpacket 512, setting to 64
[  588.102912][ T5964] usb 4-1: config 129 interface 169 altsetting 129 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  588.114584][ T5964] usb 4-1: config 129 interface 169 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 32
[  588.125474][ T5964] usb 4-1: config 129 interface 169 altsetting 129 endpoint 0xF has an invalid bInterval 128, changing to 7
[  588.137163][ T5964] usb 4-1: config 129 interface 169 altsetting 129 has a duplicate endpoint with address 0x3, skipping
[  588.148455][ T5964] usb 4-1: config 129 interface 169 has no altsetting 0
[  588.158803][ T5964] usb 4-1: New USB device found, idVendor=1019, idProduct=0f38, bcdDevice=9d.2d
[  588.168007][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.176110][ T5964] usb 4-1: Product: ब꘡鶎慱㱖㧷懓뽭﨩�೬걷뾖⠱饑瑹�Ⱳ̀鈙�㖄凛Ꙍ෇�ॳ᱄梅號깶榄窑토�輊㔱ᢽ炪䪦䳦
[  588.191453][ T5964] usb 4-1: Manufacturer: 㻃쬆祫㠕�䞦��਺뗥鑰�⯃�齲㰧㧊Ꜣ掊�垌ᒷ 自��殞変嚹鮑㊋㋑�湲ᾯ⹅쵉ғ烫䡥斒ᣇ烞㙃棹ᓰ㹸胨⩮୽⨿ᗢ뜵ϔ쥧幽榎ᙦ婚沈�ł쨒꾭�㵓챢底䨈�䯗ᰙ쫸챑ꆮᱠ䖤㜰쥭鹲䥟샮�꽮㔄휯�ٙ䙆�窛褣ﻵ弪췗ン�੊಴��웗縻᭑✱
[  588.225987][ T5964] usb 4-1: SerialNumber: â°‰
[  588.234007][T15436] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  588.738209][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.751250][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.999983][ T5964] usb 4-1: USB disconnect, device number 4
[  589.208126][ T5864] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  589.209357][T15468] netlink: 'syz.2.3198': attribute type 2 has an invalid length.
[  589.344793][ T5964] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  589.464675][ T5947] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  589.496456][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  589.508124][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  589.519780][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  589.535647][ T5964] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  589.544958][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.552969][ T5964] usb 4-1: Product: syz
[  589.557280][ T5964] usb 4-1: Manufacturer: syz
[  589.561892][ T5964] usb 4-1: SerialNumber: syz
[  589.569773][ T5964] usb 4-1: config 0 descriptor??
[  589.614651][ T5947] usb 3-1: Using ep0 maxpacket: 16
[  589.622816][ T5947] usb 3-1: config index 0 descriptor too short (expected 102, got 36)
[  589.631465][ T5947] usb 3-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[  589.642160][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 97, changing to 7
[  589.654191][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1573, setting to 1024
[  589.665420][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  589.680664][ T5947] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  589.689846][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.698043][ T5947] usb 3-1: Product: syz
[  589.702218][ T5947] usb 3-1: Manufacturer: syz
[  589.707006][ T5947] usb 3-1: SerialNumber: syz
[  589.713890][ T5947] usb 3-1: config 0 descriptor??
[  589.723892][ T5947] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  589.768306][   T43] gspca_stk1135: reg_w 0x353 err -71
[  589.775296][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.785006][   T43] gspca_stk1135: Sensor write failed
[  589.790473][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.799378][   T43] gspca_stk1135: Sensor write failed
[  589.806961][ T5864] Bluetooth: hci0: unexpected event for opcode 0x1408
[  589.809493][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.819559][T15460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.830598][T15460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.834178][   T43] gspca_stk1135: Sensor read failed
[  589.845713][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.853862][T12216] usb 4-1: USB disconnect, device number 5
[  589.859149][   T43] gspca_stk1135: Sensor read failed
[  589.866112][   T43] gspca_stk1135: Detected sensor type unknown (0x0)
[  589.872759][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.880571][   T43] gspca_stk1135: Sensor read failed
[  589.886729][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.893067][   T43] gspca_stk1135: Sensor read failed
[  589.898446][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.908321][   T43] gspca_stk1135: Sensor write failed
[  589.913621][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  589.920090][   T43] gspca_stk1135: Sensor write failed
[  589.928097][   T43] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  589.928394][ T5947] usb 3-1: USB disconnect, device number 2
[  589.950421][   T43] usb 1-1: USB disconnect, device number 102
[  590.318817][T15470] bridge0: port 3(syz_tun) entered blocking state
[  590.325630][T15470] bridge0: port 3(syz_tun) entered disabled state
[  590.332258][T15470] syz_tun: entered allmulticast mode
[  590.340444][T15470] syz_tun: entered promiscuous mode
[  590.347126][T15470] bridge0: port 3(syz_tun) entered blocking state
[  590.353619][T15470] bridge0: port 3(syz_tun) entered forwarding state
[  590.664750][ T5947] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  590.733893][ T5964] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  590.834491][ T5947] usb 4-1: Using ep0 maxpacket: 8
[  590.841022][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  590.852664][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  590.862608][ T5947] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  590.880670][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  590.892479][ T5947] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  590.898394][ T5964] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  590.904140][ T5947] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  590.912795][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.929044][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.929107][ T5964] usb 3-1: Product: syz
[  590.940320][ T5947] usb 4-1: config 0 descriptor??
[  590.948445][ T5964] usb 3-1: Manufacturer: syz
[  590.953324][ T5964] usb 3-1: SerialNumber: syz
[  590.955056][T15472] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  591.025458][T12216] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  591.186768][T12216] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  591.195096][T12216] usb 1-1: config 0 has no interface number 0
[  591.201248][T12216] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.213241][T12216] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.223395][T12216] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  591.232534][T12216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.243752][T12216] usb 1-1: config 0 descriptor??
[  591.389220][ T5864] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  591.391635][  T956] usb 4-1: USB disconnect, device number 6
[  591.917576][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'.
[  593.056268][ T5964] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  593.069460][ T5964] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  593.083075][ T5964] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  593.096481][ T5964] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  593.109517][ T5964] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  593.120906][ T5964] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  593.139805][ T5964] usb 3-1: USB disconnect, device number 3
[  593.788429][T12216] usbhid 1-1:0.1: can't add hid device: -71
[  593.802407][T12216] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  593.820212][T12216] usb 1-1: USB disconnect, device number 103
[  593.827095][ T5864] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  593.836407][ T5864] Bluetooth: hci0: Injecting HCI hardware error event
[  593.846556][ T5864] Bluetooth: hci0: hardware error 0x00
[  593.873732][T15501] netlink: 'syz.0.3211': attribute type 2 has an invalid length.
[  593.883050][ T5964] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  594.045728][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  594.056807][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  594.068413][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  594.085209][ T5964] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  594.094513][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.102775][ T5964] usb 3-1: Product: syz
[  594.106939][ T5964] usb 3-1: Manufacturer: syz
[  594.111511][ T5964] usb 3-1: SerialNumber: syz
[  594.119861][ T5964] usb 3-1: config 0 descriptor??
[  594.223317][T12216] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  594.339520][   T52] Bluetooth: hci4: unexpected event for opcode 0x1408
[  594.350058][T15497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.359292][T15497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.371144][ T5964] usb 3-1: USB disconnect, device number 4
[  594.382318][T12216] usb 1-1: Using ep0 maxpacket: 16
[  594.390455][T12216] usb 1-1: config index 0 descriptor too short (expected 102, got 36)
[  594.399343][T12216] usb 1-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[  594.411030][T12216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 97, changing to 7
[  594.422184][T12216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1573, setting to 1024
[  594.433744][T12216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  594.453850][T12216] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  594.464453][T12216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.473689][T12216] usb 1-1: Product: syz
[  594.478324][T12216] usb 1-1: Manufacturer: syz
[  594.489456][T12216] usb 1-1: SerialNumber: syz
[  594.497904][T12216] usb 1-1: config 0 descriptor??
[  594.509977][T12216] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  594.542482][ T5947] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  594.710010][  T956] usb 1-1: USB disconnect, device number 104
[  594.723901][ T5947] usb 4-1: Invalid ep0 maxpacket: 64
[  594.862173][ T5947] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  595.036707][ T5947] usb 4-1: Invalid ep0 maxpacket: 64
[  595.042425][ T5947] usb usb4-port1: attempt power cycle
[  595.381786][ T5947] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  595.403120][ T5947] usb 4-1: Invalid ep0 maxpacket: 64
[  595.531494][T12216] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  595.539616][ T5947] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  595.562078][ T5947] usb 4-1: Invalid ep0 maxpacket: 64
[  595.567674][ T5947] usb usb4-port1: unable to enumerate USB device
[  595.691418][T12216] usb 1-1: Using ep0 maxpacket: 32
[  595.698313][T12216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.709445][T12216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.719506][T12216] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  595.728672][T12216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.738760][T12216] usb 1-1: config 0 descriptor??
[  595.752039][T12216] hub 1-1:0.0: USB hub found
[  595.911391][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  595.947976][T12216] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  596.165532][T12216] hid-generic 0003:046D:C31C.0036: item fetching failed at offset 0/1
[  596.174976][T12216] hid-generic 0003:046D:C31C.0036: probe with driver hid-generic failed with error -22
[  596.381753][ T5864] Bluetooth: Unknown LE signaling command 0x52
[  596.388803][ T5864] Bluetooth: Wrong link type (-22)
[  596.501162][ T5964] usb 1-1: USB disconnect, device number 105
[  597.700687][   T43] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  597.854391][   T43] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  597.862698][   T43] usb 4-1: config 8 has no interface number 0
[  597.868784][   T43] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  597.880099][   T43] usb 4-1: config 8 interface 177 has no altsetting 0
[  597.887391][   T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  597.896862][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.909761][T15534] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  598.028046][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3226'.
[  598.047830][T15538] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3226'.
[  598.083954][T15538] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3226'.
[  598.118908][ T5864] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  598.136413][T15534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.144806][T15542] netlink: 'syz.2.3228': attribute type 2 has an invalid length.
[  598.170044][T15534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.185336][   T43] usb 4-1: string descriptor 0 read error: -71
[  598.201828][   T43] ir_toy 4-1:8.177: required endpoints not found
[  598.213568][   T43] usb 4-1: USB disconnect, device number 11
[  598.410094][  T956] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  598.440080][ T5947] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  598.560190][  T956] usb 3-1: Using ep0 maxpacket: 16
[  598.566927][  T956] usb 3-1: config index 0 descriptor too short (expected 102, got 36)
[  598.575241][  T956] usb 3-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[  598.585654][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 97, changing to 7
[  598.596614][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1573, setting to 1024
[  598.604414][ T5947] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  598.607655][  T956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  598.624272][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.642612][  T956] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  598.644170][ T5947] usb 1-1: Product: syz
[  598.651882][  T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.651906][  T956] usb 3-1: Product: syz
[  598.651920][  T956] usb 3-1: Manufacturer: syz
[  598.651934][  T956] usb 3-1: SerialNumber: syz
[  598.654793][  T956] usb 3-1: config 0 descriptor??
[  598.659165][ T5947] usb 1-1: Manufacturer: syz
[  598.679614][  T956] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  598.683844][ T5947] usb 1-1: SerialNumber: syz
[  598.900216][   T43] usb 3-1: USB disconnect, device number 5
[  598.992005][T15544] dlm: no locking on control device
[  599.000851][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'.
[  600.029850][   T30] audit: type=1326 audit(6049207169.910:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15552 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390338eba9 code=0x7fc00000
[  600.068217][ T5864] Bluetooth: hci5: unexpected event 0x31 length: 36 > 6
[  600.070218][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[  600.097054][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  600.108773][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  600.129639][ T5947] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  600.150024][ T5947] usb 1-1: USB disconnect, device number 106
[  600.366942][T15572] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3237'.
[  600.382904][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3237'.
[  600.428430][T15574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3238'.
[  600.591324][ T5947] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  600.721768][T15581] syz.5.3241 uses old SIOCAX25GETINFO
[  600.731089][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  600.770578][ T5947] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  600.779109][ T5947] usb 4-1: config 0 has no interface number 0
[  600.785347][ T5947] usb 4-1: config 0 interface 104 has no altsetting 0
[  600.795766][ T5947] usb 4-1: New USB device found, idVendor=045e, idProduct=04e2, bcdDevice=1c.4d
[  600.807361][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.815424][ T5947] usb 4-1: Product: syz
[  600.820380][ T5947] usb 4-1: Manufacturer: syz
[  600.824991][ T5947] usb 4-1: SerialNumber: syz
[  600.837961][ T5947] usb 4-1: config 0 descriptor??
[  600.851597][ T5947] ipaq 4-1:0.104: PocketPC PDA converter detected
[  600.859631][ T5947] usb 4-1: active config #0 != 1 ??
[  600.886439][T15585] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  600.894446][T15585] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  600.901336][T15585] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  600.907944][T15585] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  600.908755][ T5916] usb 3-1: Using ep0 maxpacket: 8
[  600.917573][T15585] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  600.926566][T15585] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  600.930649][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short
[  600.933901][T15585] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  600.948749][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  600.954493][T15585] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  600.960546][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  600.968321][T15585] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  600.977826][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  600.977856][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  600.977878][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  600.977899][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  600.977919][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  600.977938][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  600.977963][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  600.980298][ T5916] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  600.992989][T15585] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  600.995197][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.008228][T15585] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  601.019014][ T5916] usb 3-1: Product: syz
[  601.028843][T15585] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  601.043647][ T5916] usb 3-1: Manufacturer: syz
[  601.047796][T15585] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  601.070419][ T5916] usb 3-1: SerialNumber: syz
[  601.096873][ T5964] usb 4-1: USB disconnect, device number 12
[  601.119185][T15585] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4)
[  601.137758][ T5916] usb 3-1: config 0 descriptor??
[  601.155100][ T5916] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  601.158454][T15585] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  601.172272][T15585] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  601.179201][T15585] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  601.187706][T15585] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  601.197027][T15585] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  601.293623][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.351319][ T5916] usb 3-1: USB disconnect, device number 6
[  601.501708][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'.
[  601.836561][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[  601.903679][   T56] block nbd0: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 240 seconds
[  601.917439][   T56] block nbd0: Possible stuck request ffff8880255a01c0: control (read@1024,1024B). Runtime 240 seconds
[  601.928753][   T56] block nbd0: Possible stuck request ffff8880255a0380: control (read@2048,1024B). Runtime 240 seconds
[  601.940271][   T56] block nbd0: Possible stuck request ffff8880255a0540: control (read@3072,1024B). Runtime 240 seconds
[  602.035439][T15620] openvswitch: netlink: Key 24 has unexpected len 2 expected 4
[  602.128229][T13494] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  602.229130][ T5916] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  602.288108][T13494] usb 4-1: Using ep0 maxpacket: 16
[  602.300510][T13494] usb 4-1: unable to get BOS descriptor or descriptor too short
[  602.310554][T13494] usb 4-1: config 3 has an invalid interface number: 119 but max is 0
[  602.326633][T13494] usb 4-1: config 3 has no interface number 0
[  602.333376][T13494] usb 4-1: config 3 interface 119 has no altsetting 0
[  602.351145][T13494] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff61, bcdDevice=71.7e
[  602.361501][T13494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.374749][T13494] usb 4-1: Product: syz
[  602.379552][T13494] usb 4-1: Manufacturer: syz
[  602.387878][T13494] usb 4-1: SerialNumber: syz
[  602.421376][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short
[  602.434483][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -71
[  602.446594][ T5916] usb 3-1: can't read configurations, error -71
[  602.628073][ T5964] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  602.638447][T13494] option 4-1:3.119: GSM modem (1-port) converter detected
[  602.665111][T13494] usb 4-1: USB disconnect, device number 13
[  602.679975][T13494] option 4-1:3.119: device disconnected
[  602.798051][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  602.822508][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.833751][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  602.844049][ T5964] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  602.853348][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.865008][ T5964] usb 1-1: config 0 descriptor??
[  603.287693][ T5964] usbhid 1-1:0.0: can't add hid device: -71
[  603.298142][ T5964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  603.315958][ T5964] usb 1-1: USB disconnect, device number 107
[  603.387175][T15639] loop2: detected capacity change from 0 to 7
[  603.396621][ T5867] Dev loop2: unable to read RDB block 7
[  603.402732][ T5867]  loop2: unable to read partition table
[  603.409224][ T5867] loop2: partition table beyond EOD, truncated
[  603.417859][T15639] Dev loop2: unable to read RDB block 7
[  603.424848][T15639]  loop2: unable to read partition table
[  603.431251][T15639] loop2: partition table beyond EOD, truncated
[  603.445015][T15639] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  603.504243][ T5916] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  603.638049][ T5916] usb 3-1: device descriptor read/64, error -71
[  603.754170][ T5916] usb usb3-port1: attempt power cycle
[  604.037486][ T5964] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  604.107246][ T5916] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  604.137757][   T43] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  604.143388][ T5916] usb 3-1: device descriptor read/8, error -71
[  604.187120][ T5964] usb 4-1: Using ep0 maxpacket: 32
[  604.194680][ T5964] usb 4-1: unable to get BOS descriptor or descriptor too short
[  604.203795][ T5964] usb 4-1: config 4 has an invalid interface number: 101 but max is 0
[  604.212066][ T5964] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  604.222916][ T5964] usb 4-1: config 4 has no interface number 0
[  604.229064][ T5964] usb 4-1: config 4 interface 101 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89
[  604.240764][ T5964] usb 4-1: config 4 interface 101 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0
[  604.250874][ T5964] usb 4-1: config 4 interface 101 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  604.265445][ T5964] usb 4-1: config 4 interface 101 has no altsetting 0
[  604.275204][ T5964] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52
[  604.284606][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.292803][ T5964] usb 4-1: Product: syz
[  604.297158][ T5964] usb 4-1: Manufacturer: syz
[  604.301994][ T5964] usb 4-1: SerialNumber: syz
[  604.307040][   T43] usb 1-1: Using ep0 maxpacket: 32
[  604.317485][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.328696][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.338936][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  604.348126][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.360826][   T43] usb 1-1: config 0 descriptor??
[  604.372012][   T43] hub 1-1:0.0: USB hub found
[  604.397107][ T5916] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  604.418102][ T5916] usb 3-1: device descriptor read/8, error -71
[  604.529375][ T5916] usb usb3-port1: unable to enumerate USB device
[  604.534301][ T5964] ttusbir 4-1:4.101: cannot find expected altsetting
[  604.550265][ T5964] usb 4-1: USB disconnect, device number 14
[  604.567948][   T43] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  604.769850][T15657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  604.784099][T15657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.997229][   T43] usbhid 1-1:0.0: can't add hid device: -71
[  605.003557][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  605.027653][   T43] usb 1-1: USB disconnect, device number 108
[  605.456524][   T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  605.610232][   T43] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  605.623655][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.641188][   T43] usb 4-1: config 0 descriptor??
[  605.658302][T15673] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3273'.
[  606.006335][  T984] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  606.141631][   T43] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  606.151888][   T43] [drm:udl_init] *ERROR* Selecting channel failed
[  606.170324][  T984] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.175242][   T43] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  606.190647][  T984] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.195204][   T43] [drm] Initialized udl on minor 2
[  606.205662][  T984] usb 1-1: config 0 interface 0 has no altsetting 0
[  606.216536][  T984] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  606.218627][   T43] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  606.232518][  T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.247091][   T43] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  606.253465][  T984] usb 1-1: config 0 descriptor??
[  606.264040][ T5964] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  606.276606][   T43] usb 4-1: USB disconnect, device number 15
[  606.282744][ T5964] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  606.366072][  T956] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  606.516010][  T956] usb 3-1: Using ep0 maxpacket: 32
[  606.524047][  T956] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  606.532836][  T956] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  606.544238][  T956] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  606.556301][  T956] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  606.569590][  T956] usb 3-1: config 0 interface 0 has no altsetting 0
[  606.578728][  T956] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  606.587870][  T956] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  606.596360][  T956] usb 3-1: Product: syz
[  606.600537][  T956] usb 3-1: Manufacturer: syz
[  606.605127][  T956] usb 3-1: SerialNumber: syz
[  606.614263][  T956] usb 3-1: config 0 descriptor??
[  606.622674][  T956] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  606.634711][  T956] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  606.680716][  T984] usbhid 1-1:0.0: can't add hid device: -71
[  606.697533][  T984] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  606.719195][  T984] usb 1-1: USB disconnect, device number 109
[  606.721846][T15686] netlink: 'syz.3.3277': attribute type 3 has an invalid length.
[  606.734451][T15686] netlink: 'syz.3.3277': attribute type 1 has an invalid length.
[  606.746971][T15686] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3277'.
[  606.756363][T15686] NCSI netlink: No device for ifindex 0
[  606.763592][T15686] netlink: 'syz.3.3277': attribute type 10 has an invalid length.
[  606.780693][T15686] team0: Port device macvlan1 added
[  606.821623][ T5916] usb 3-1: USB disconnect, device number 11
[  606.833070][ T5916] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  607.025883][  T956] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  607.175760][  T956] usb 4-1: Using ep0 maxpacket: 16
[  607.182133][  T956] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  607.190879][  T956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.201209][  T956] usb 4-1: config 0 has no interface number 0
[  607.213955][  T956] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  607.224033][  T956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.232338][  T956] usb 4-1: Product: syz
[  607.236925][  T956] usb 4-1: Manufacturer: syz
[  607.242055][  T956] usb 4-1: SerialNumber: syz
[  607.252368][  T956] usb 4-1: config 0 descriptor??
[  607.463958][  T956] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[  607.480223][  T956] usb 4-1: No valid video chain found.
[  607.489487][  T956] usb 4-1: USB disconnect, device number 16
[  607.665470][   T43] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  607.795845][   T43] usb 1-1: device descriptor read/64, error -71
[  607.906382][T13494] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  608.014951][T15705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.035266][   T43] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  608.055263][T13494] usb 3-1: Using ep0 maxpacket: 16
[  608.061902][T13494] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  608.073906][T13494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  608.088882][T15707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3285'.
[  608.093336][T13494] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  608.098709][T15705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3285'.
[  608.113689][T13494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.124610][T13494] usb 3-1: Product: syz
[  608.129120][T13494] usb 3-1: Manufacturer: syz
[  608.133729][T13494] usb 3-1: SerialNumber: syz
[  608.141923][T13494] usb 3-1: config 0 descriptor??
[  608.149994][T13494] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  608.159769][T13494] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  608.166929][   T43] usb 1-1: device descriptor read/64, error -71
[  608.277218][   T43] usb usb1-port1: attempt power cycle
[  608.403351][T15711] QAT: Invalid ioctl 44609
[  608.495396][T13494] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  608.503155][T13494] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  608.510764][T13494] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  608.518465][T13494] em28xx 3-1:0.0: No AC97 audio processor
[  608.548986][T13494] usb 3-1: USB disconnect, device number 12
[  608.576812][T13494] em28xx 3-1:0.0: Disconnecting em28xx
[  608.601212][T13494] em28xx 3-1:0.0: Freeing device
[  608.615480][   T43] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  608.618677][T15719] fuse: Unknown parameter '©·'
[  608.638514][T15717] delete_channel: no stack
[  608.666582][   T43] usb 1-1: device descriptor read/8, error -71
[  608.667713][T15716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  608.920289][   T43] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  608.955549][   T43] usb 1-1: device descriptor read/8, error -71
[  608.973280][T15734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.993660][T15734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.091668][   T43] usb usb1-port1: unable to enumerate USB device
[  609.184992][  T984] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  609.304622][  T956] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  609.456037][  T956] usb 3-1: Using ep0 maxpacket: 32
[  609.463938][  T956] usb 3-1: config 7 has an invalid interface number: 231 but max is 2
[  609.473135][  T956] usb 3-1: config 7 has an invalid interface number: 3 but max is 2
[  609.481235][  T956] usb 3-1: config 7 has an invalid interface number: 231 but max is 2
[  609.489863][  T956] usb 3-1: config 7 has an invalid interface number: 116 but max is 2
[  609.498254][  T956] usb 3-1: config 7 has an invalid interface number: 50 but max is 2
[  609.506578][  T956] usb 3-1: config 7 has 4 interfaces, different from the descriptor's value: 3
[  609.515617][  T956] usb 3-1: config 7 has no interface number 0
[  609.521688][  T956] usb 3-1: config 7 has no interface number 1
[  609.527819][  T956] usb 3-1: config 7 has no interface number 2
[  609.533921][  T956] usb 3-1: config 7 interface 231 altsetting 1 endpoint 0x5 has an invalid bInterval 60, changing to 7
[  609.534525][  T984] usb 4-1: device descriptor read/64, error -71
[  609.545104][  T956] usb 3-1: config 7 interface 231 altsetting 1 has a duplicate endpoint with address 0x84, skipping
[  609.545134][  T956] usb 3-1: config 7 interface 231 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  609.545161][  T956] usb 3-1: config 7 interface 231 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  609.545181][  T956] usb 3-1: config 7 interface 231 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  609.545202][  T956] usb 3-1: config 7 interface 231 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  609.545227][  T956] usb 3-1: config 7 interface 231 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[  609.545262][  T956] usb 3-1: config 7 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  609.631790][  T956] usb 3-1: too many endpoints for config 7 interface 231 altsetting 3: 40, using maximum allowed: 30
[  609.642886][  T956] usb 3-1: config 7 interface 231 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  609.653823][  T956] usb 3-1: config 7 interface 231 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  609.664822][  T956] usb 3-1: config 7 interface 231 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  609.678134][  T956] usb 3-1: config 7 interface 231 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  609.689077][  T956] usb 3-1: config 7 interface 231 altsetting 3 bulk endpoint 0x5 has invalid maxpacket 1023
[  609.699518][  T956] usb 3-1: config 7 interface 231 altsetting 3 has a duplicate endpoint with address 0x3, skipping
[  609.710460][  T956] usb 3-1: config 7 interface 231 altsetting 3 bulk endpoint 0xC has invalid maxpacket 1023
[  609.720593][  T956] usb 3-1: config 7 interface 231 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16
[  609.730566][  T956] usb 3-1: config 7 interface 231 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  609.741930][  T956] usb 3-1: config 7 interface 231 altsetting 3 has 14 endpoint descriptors, different from the interface descriptor's value: 40
[  609.755253][  T956] usb 3-1: config 7 interface 116 altsetting 129 has a duplicate endpoint with address 0x3, skipping
[  609.766219][  T956] usb 3-1: config 7 interface 116 altsetting 129 has a duplicate endpoint with address 0xF, skipping
[  609.777281][  T956] usb 3-1: config 7 interface 116 altsetting 129 has a duplicate endpoint with address 0xD, skipping
[  609.788610][  T956] usb 3-1: config 7 interface 116 altsetting 129 has an invalid descriptor for endpoint zero, skipping
[  609.800243][  T956] usb 3-1: config 7 interface 116 altsetting 129 has a duplicate endpoint with address 0x5, skipping
[  609.804381][  T984] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  609.811290][  T956] usb 3-1: config 7 interface 116 altsetting 129 has 6 endpoint descriptors, different from the interface descriptor's value: 9
[  609.811322][  T956] usb 3-1: too many endpoints for config 7 interface 50 altsetting 215: 207, using maximum allowed: 30
[  609.811360][  T956] usb 3-1: config 7 interface 50 altsetting 215 has a duplicate endpoint with address 0x4, skipping
[  609.811383][  T956] usb 3-1: config 7 interface 50 altsetting 215 has an endpoint descriptor with address 0x79, changing to 0x9
[  609.811409][  T956] usb 3-1: config 7 interface 50 altsetting 215 has a duplicate endpoint with address 0x9, skipping
[  609.811431][  T956] usb 3-1: config 7 interface 50 altsetting 215 has a duplicate endpoint with address 0x7, skipping
[  609.811459][  T956] usb 3-1: config 7 interface 50 altsetting 215 has 3 endpoint descriptors, different from the interface descriptor's value: 207
[  609.811485][  T956] usb 3-1: config 7 interface 231 has no altsetting 0
[  609.811503][  T956] usb 3-1: config 7 interface 3 has no altsetting 0
[  609.811520][  T956] usb 3-1: config 7 interface 116 has no altsetting 0
[  609.811538][  T956] usb 3-1: config 7 interface 50 has no altsetting 0
[  609.818696][  T956] usb 3-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=73.98
[  609.938762][  T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.946865][  T956] usb 3-1: Product: î‚¡
[  609.951022][  T956] usb 3-1: Manufacturer: ဇ
[  609.955694][  T956] usb 3-1: SerialNumber: Љ
[  609.968588][  T984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  609.978620][  T984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  609.991453][  T984] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  610.000974][  T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.009217][  T984] usb 4-1: Product: syz
[  610.014586][  T984] usb 4-1: Manufacturer: syz
[  610.019199][  T984] usb 4-1: SerialNumber: syz
[  610.027257][  T984] usb 4-1: config 0 descriptor??
[  610.032957][T15748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  610.040640][T15748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  610.234327][  T956] usb 3-1: USB disconnect, device number 13
[  610.258319][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.291484][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.312713][T15748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  610.320268][T15748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  610.554388][  T984] Error reading MAC address
[  610.574979][  T984] usb 4-1: USB disconnect, device number 18
[  610.928917][T15773] 9p filesystem being mounted at /100/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  611.149504][T15778] netlink: zone id is out of range
[  611.155027][T15778] netlink: zone id is out of range
[  611.160142][T15778] netlink: zone id is out of range
[  611.165389][T15778] netlink: zone id is out of range
[  611.170521][T15778] netlink: zone id is out of range
[  611.175993][T15778] netlink: zone id is out of range
[  611.181159][T15778] netlink: zone id is out of range
[  611.186612][T15778] netlink: zone id is out of range
[  611.191730][T15778] netlink: zone id is out of range
[  611.352065][T15785] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22)
[  611.363601][   T43] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  611.548149][   T43] usb 1-1: config index 0 descriptor too short (expected 20516, got 36)
[  611.729216][   T43] usb 1-1: config 0 has too many interfaces: 181, using maximum allowed: 32
[  611.743453][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 181
[  611.762719][   T43] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  611.773816][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  611.780465][   T43] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  611.800051][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.816125][   T43] usb 1-1: config 0 descriptor??
[  611.824296][T15780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  611.833535][T12216] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  611.999188][T12216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  612.017456][T12216] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  612.045382][T12216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.072790][T12216] usb 4-1: config 0 descriptor??
[  612.083993][T15790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  612.087977][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3307'.
[  612.321138][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.330681][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.506918][T15790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.526357][T15790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.559758][   T43] usbhid 1-1:0.0: can't add hid device: -71
[  612.566594][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  612.592432][T12216] usbhid 4-1:0.0: can't add hid device: -71
[  612.594166][   T43] usb 1-1: USB disconnect, device number 114
[  612.604343][T12216] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  612.636292][T12216] usb 4-1: USB disconnect, device number 19
[  613.225281][T15783] syz.2.3308 (15783): drop_caches: 1
[  613.311513][T15778] syz.2.3308 (15778): drop_caches: 1
[  613.512750][   T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  613.522521][T13494] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  613.662550][   T43] usb 4-1: Using ep0 maxpacket: 16
[  613.669726][   T43] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  613.681106][   T43] usb 4-1: config 1 interface 0 has no altsetting 0
[  613.688091][ T5964] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  613.697934][T13494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.709793][T13494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.719889][   T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  613.729028][T13494] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  613.738342][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.746425][T13494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.754559][   T43] usb 4-1: Product: syz
[  613.758722][   T43] usb 4-1: Manufacturer: syz
[  613.765738][   T43] usb 4-1: SerialNumber: syz
[  613.772908][T13494] usb 1-1: config 0 descriptor??
[  613.854263][ T5964] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[  613.862602][ T5964] usb 3-1: config 0 has no interface number 1
[  613.868711][ T5964] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  613.879286][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  613.895608][ T5964] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  613.904992][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  613.913249][ T5964] usb 3-1: SerialNumber: syz
[  613.920241][ T5964] usb 3-1: config 0 descriptor??
[  613.932117][ T5964] usb 3-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  613.939430][ T5964] usb 3-1: No valid video chain found.
[  614.001042][   T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input70
[  614.029175][   T43] usb 4-1: USB disconnect, device number 20
[  614.187643][T13494] hid-steam 0003:28DE:1142.0037: unknown main item tag 0x0
[  614.196007][T13494] hid-steam 0003:28DE:1142.0037: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  614.262166][T13494] hid-steam 0003:28DE:1142.0037: Steam wireless receiver connected
[  614.270467][T13494] hid-steam 0003:28DE:1142.0037: No HID_FEATURE_REPORT submitted -  nothing to read
[  614.287933][T13494] hid-steam 0003:28DE:1142.0038: unknown main item tag 0x0
[  614.302375][T13494] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  614.388918][T15803] comedi comedi3: comedi_config --init_data is deprecated
[  614.405314][T13494] usb 1-1: USB disconnect, device number 115
[  614.427390][T13494] hid-steam 0003:28DE:1142.0037: Steam wireless receiver disconnected
[  614.578930][T15806] fido_id[15806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  614.771988][ T5964] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  614.925047][ T5964] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  614.938409][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.957656][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  614.969184][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.981990][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  614.995300][ T5964] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  615.006600][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.022710][ T5964] usb 4-1: config 0 descriptor??
[  615.032531][T15809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  615.173931][T15814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3321'.
[  615.184548][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3321'.
[  616.046073][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.056364][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.119327][ T5964] usbhid 4-1:0.0: can't add hid device: -71
[  616.151357][ T5964] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  616.178028][ T5964] usb 4-1: USB disconnect, device number 21
[  616.457029][ T5947] usb 3-1: USB disconnect, device number 14
[  616.580213][T15843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3330'.
[  616.584135][T15840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.746785][T15840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.825172][T15856] comedi comedi0: Minor 48 is invalid!
[  616.829974][T15854] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  616.833754][T15856] netlink: 'syz.3.3333': attribute type 40 has an invalid length.
[  616.846734][T15853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  616.886275][T15840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.908781][T15862] comedi comedi0: Minor 48 is invalid!
[  616.915574][ T5964] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  616.924629][T15863] netlink: 'syz.3.3333': attribute type 40 has an invalid length.
[  617.006989][T15840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  617.124161][ T5964] usb 3-1: string descriptor 0 read error: -22
[  617.140594][ T5964] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  617.158162][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.197041][ T5964] usb 3-1: config 0 descriptor??
[  617.221770][ T5964] usbtest 3-1:0.0: FX2 device
[  617.226495][ T5964] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  617.244133][   T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.272738][ T1148] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.294878][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.308903][   T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.428603][   T43] usb 3-1: USB disconnect, device number 15
[  617.500573][  T984] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  617.661411][  T984] usb 1-1: Using ep0 maxpacket: 16
[  617.669681][  T984] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  617.679190][  T984] usb 1-1: config 0 has no interface number 0
[  617.685768][  T984] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  617.697817][  T984] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  617.709632][  T984] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  617.722368][  T984] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  617.731549][  T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.739613][  T984] usb 1-1: Product: syz
[  617.743856][  T984] usb 1-1: Manufacturer: syz
[  617.748800][  T984] usb 1-1: SerialNumber: syz
[  617.757852][  T984] usb 1-1: config 0 descriptor??
[  617.910295][T13494] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  617.998897][  T984] usb 1-1: USB disconnect, device number 116
[  618.061789][T13494] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  618.070965][T13494] usb 4-1: config 0 has no interface number 0
[  618.082007][T13494] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  618.091469][T13494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.099877][T13494] usb 4-1: Product: syz
[  618.104901][T13494] usb 4-1: Manufacturer: syz
[  618.109498][T13494] usb 4-1: SerialNumber: syz
[  618.116193][T13494] usb 4-1: config 0 descriptor??
[  618.230146][   T43] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  618.323533][T13494] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  618.334292][T13494] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  618.344929][T13494] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  618.353575][T13494] usb 4-1: media controller created
[  618.373094][T13494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.383685][   T43] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  618.395892][   T43] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15653, setting to 64
[  618.421505][   T43] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  618.430788][   T43] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  618.439095][   T43] usb 3-1: Manufacturer: syz
[  618.443902][   T43] usb 3-1: SerialNumber: syz
[  618.458907][T15892] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  618.517212][T15894] 9p: Unknown Cache mode or invalid value fs
[  618.526475][T13494] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  618.569678][T13494] usb 4-1: USB disconnect, device number 22
[  618.674086][   T43] yealink 3-1:36.0: invalid payload size 64, expected 16
[  618.699650][   T43] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input71
[  618.719413][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.726440][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.733694][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.740812][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.747764][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.754813][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.761862][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.768852][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.776028][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.782803][    C1] yealink 3-1:36.0: unexpected response 0
[  618.789902][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.797199][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.803983][    C1] yealink 3-1:36.0: unexpected response 0
[  618.810073][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.817084][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.823859][    C1] yealink 3-1:36.0: unexpected response 0
[  618.830739][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.837720][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.844499][    C1] yealink 3-1:36.0: unexpected response 0
[  618.850627][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.857628][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.864422][    C1] yealink 3-1:36.0: unexpected response 0
[  618.870505][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.877592][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.884371][    C1] yealink 3-1:36.0: unexpected response 0
[  618.893207][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.900616][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.907401][    C1] yealink 3-1:36.0: unexpected response 0
[  618.913490][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.922090][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.929057][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.936145][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.943171][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.949952][    C1] yealink 3-1:36.0: unexpected response 0
[  618.955911][    C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71
[  618.962824][   T43] usb 3-1: USB disconnect, device number 16
[  618.962904][    C1] yealink 3-1:36.0: urb_irq_callback - urb status -71
[  618.975552][    C1] yealink 3-1:36.0: unexpected response 0
[  618.981292][    C1] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19
[  619.074563][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'.
[  619.088634][T15903] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3349'.
[  619.210816][ T5916] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  619.320211][T15910] program syz.2.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  619.390957][ T5916] usb 1-1: Using ep0 maxpacket: 16
[  619.423861][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.442157][ T5916] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  619.451639][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.469593][ T5964] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  619.469621][ T5916] usb 1-1: Product: syz
[  619.489542][ T5916] usb 1-1: Manufacturer: syz
[  619.499434][ T5916] usb 1-1: SerialNumber: syz
[  619.512209][ T5916] usb 1-1: config 0 descriptor??
[  619.534050][ T5916] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22
[  619.549652][ T5916] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22
[  619.632276][ T5964] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  619.656401][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.677820][ T5964] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  619.678822][T15921] fuse: Bad value for 'fd'
[  619.689860][ T5964] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  619.710508][ T5964] usb 4-1: Manufacturer: syz
[  619.730312][ T5964] usb 4-1: config 0 descriptor??
[  619.759604][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3348'.
[  619.790620][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.811958][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.836601][ T5916] usb 1-1: USB disconnect, device number 117
[  619.919538][ T5964] rc_core: IR keymap rc-hauppauge not found
[  619.939359][ T5964] Registered IR keymap rc-empty
[  619.971695][ T5964] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  619.992250][ T5964] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72
[  620.034754][T15924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.081339][T15924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.204768][T15908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.351545][T15908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.521305][T15908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.733088][T15908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.931516][ T4527] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.957759][ T4527] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.985822][ T1148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.018081][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.039621][T13494] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  621.040050][T12216] usb 4-1: USB disconnect, device number 23
[  621.099800][ T5964] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  621.190581][T13494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.207257][T13494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.218194][T13494] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  621.229282][T13494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.241097][T13494] usb 3-1: config 0 descriptor??
[  621.261287][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  621.277466][ T5964] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  621.287812][ T5964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.305133][ T5964] usb 1-1: config 0 has no interface number 0
[  621.314760][ T5964] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  621.334384][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.345337][ T5964] usb 1-1: Product: syz
[  621.349860][ T5964] usb 1-1: Manufacturer: syz
[  621.354642][ T5964] usb 1-1: SerialNumber: syz
[  621.369683][ T5964] usb 1-1: config 0 descriptor??
[  621.495383][T13494] pyra 0003:1E7D:2CF6.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  621.527506][T13494] pyra 0003:1E7D:2CF6.0039: couldn't init struct pyra_device
[  621.536555][T13494] pyra 0003:1E7D:2CF6.0039: couldn't install mouse
[  621.546325][T13494] pyra 0003:1E7D:2CF6.0039: probe with driver pyra failed with error -32
[  621.583111][ T5964] usb 1-1: Found UVC 0.00 device syz (046d:08d3)
[  621.596399][ T5964] usb 1-1: No valid video chain found.
[  621.786622][T15940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.795665][T15940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.804623][T13494] usb 1-1: USB disconnect, device number 118
[  621.868316][ T5964] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  622.022396][ T5964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  622.033236][ T5964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  622.044467][ T5964] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  622.053763][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  622.062477][ T5964] usb 4-1: SerialNumber: syz
[  622.342696][T15947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.372120][T15947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.444151][ T5964] usb 4-1: 0:2 : does not exist
[  622.482582][ T5964] usb 4-1: USB disconnect, device number 24
[  622.516014][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  623.257792][ T5916] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  623.297687][ T5947] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  623.410096][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  623.420566][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  623.431807][ T5916] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  623.447315][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  623.455519][ T5947] usb 4-1: Using ep0 maxpacket: 32
[  623.460914][ T5916] usb 1-1: SerialNumber: syz
[  623.472023][ T5947] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  623.484818][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.494485][ T5947] usb 4-1: Product: syz
[  623.499071][ T5947] usb 4-1: Manufacturer: syz
[  623.503685][ T5947] usb 4-1: SerialNumber: syz
[  623.715811][ T5947] usb 4-1: palm_os_4_probe - error -71 getting connection info
[  623.736802][ T5916] usb 1-1: 0:2 : does not exist
[  623.752506][ T5947] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  623.775999][  T956] usb 3-1: USB disconnect, device number 17
[  623.779920][ T5947] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  623.801385][ T5916] usb 1-1: USB disconnect, device number 119
[  623.836838][ T5947] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  623.875296][T15964] overlayfs: missing 'lowerdir'
[  623.883189][ T5947] usb 4-1: USB disconnect, device number 25
[  623.894705][T15964] 9pnet_fd: Insufficient options for proto=fd
[  623.931443][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  623.931562][ T5947] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  623.995076][ T5947] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  624.009385][ T5947] visor 4-1:1.0: device disconnected
[  624.293109][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.300778][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  624.526026][ T5864] Bluetooth: hci1: link tx timeout
[  624.533348][ T5864] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  624.553636][   T52] Bluetooth: hci1: link tx timeout
[  624.559640][   T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  624.568083][   T52] Bluetooth: hci1: link tx timeout
[  624.573854][   T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  624.583073][T15991] sctp: [Deprecated]: syz.0.3375 (pid 15991) Use of struct sctp_assoc_value in delayed_ack socket option.
[  624.583073][T15991] Use struct sctp_sack_info instead
[  624.708363][   T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  624.867735][   T43] usb 3-1: Using ep0 maxpacket: 16
[  624.875011][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  624.888197][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  624.900490][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  624.909971][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.918340][   T43] usb 3-1: Product: syz
[  624.922623][   T43] usb 3-1: Manufacturer: syz
[  624.929500][   T43] usb 3-1: SerialNumber: syz
[  625.008897][   T49] Bluetooth: hci3: Frame reassembly failed (-84)
[  625.015939][T16006] Bluetooth: hci3: Frame reassembly failed (-84)
[  625.024433][ T5964] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  625.143807][   T43] usb 3-1: 0:2 : does not exist
[  625.164534][   T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  625.176794][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  625.189985][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short
[  625.201217][ T5964] usb 1-1: no configurations
[  625.206622][ T5964] usb 1-1: can't read configurations, error -22
[  625.216780][   T43] usb 3-1: USB disconnect, device number 18
[  625.244718][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  625.267316][ T5916] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  625.336803][ T5964] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  625.429208][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short
[  625.437891][ T5916] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  625.446068][ T5916] usb 4-1: config 7 has no interface number 0
[  625.459633][ T5916] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  625.469784][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.477812][ T5916] usb 4-1: Product: 㯑
[  625.486877][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  625.494462][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short
[  625.502594][ T5964] usb 1-1: no configurations
[  625.507288][ T5964] usb 1-1: can't read configurations, error -22
[  625.513898][ T5964] usb usb1-port1: attempt power cycle
[  625.685905][T16006] overlay: Bad value for 'workdir'
[  625.719219][ T5916] usb 4-1: USB disconnect, device number 26
[  625.858359][ T5964] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  625.910471][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  625.921899][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short
[  625.930058][ T5964] usb 1-1: no configurations
[  625.934645][ T5964] usb 1-1: can't read configurations, error -22
[  626.006252][  T956] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  626.066256][ T5964] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  626.086893][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  626.094332][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short
[  626.103990][ T5964] usb 1-1: no configurations
[  626.108624][ T5964] usb 1-1: can't read configurations, error -22
[  626.115117][ T5964] usb usb1-port1: unable to enumerate USB device
[  626.156211][  T956] usb 3-1: Using ep0 maxpacket: 16
[  626.162650][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.174272][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.184643][  T956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  626.197543][  T956] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  626.206711][  T956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.218165][  T956] usb 3-1: config 0 descriptor??
[  626.542671][T16014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.551914][T16014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.609248][T14219] Bluetooth: hci1: command 0x0406 tx timeout
[  626.801050][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.816156][  T956] microsoft 0003:045E:07DA.003A: ignoring exceeding usage max
[  626.825614][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.833049][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.841457][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.859966][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.867854][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.876232][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.883653][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.900474][  T956] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0
[  626.908333][  T956] microsoft 0003:045E:07DA.003A: unsupported Resolution Multiplier 0
[  627.006255][   T52] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  627.253071][  T956] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  627.264608][  T956] microsoft 0003:045E:07DA.003A: no inputs found
[  627.271281][  T956] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway
[  627.293132][  T956] usb 3-1: USB disconnect, device number 19
[  627.333653][T16015] fido_id[16015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  627.975333][T13494] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  628.055455][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  628.133127][T13494] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  628.143195][T13494] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  628.154228][T13494] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  628.164335][T13494] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  628.176663][T13494] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  628.191656][T13494] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  628.201833][T13494] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  628.210152][T13494] usb 4-1: Product: syz
[  628.214796][T13494] usb 4-1: Manufacturer: syz
[  628.215382][ T5947] usb 3-1: Using ep0 maxpacket: 8
[  628.230028][ T5947] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  628.247337][T13494] cdc_wdm 4-1:1.0: skipping garbage
[  628.247406][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.252558][T13494] cdc_wdm 4-1:1.0: skipping garbage
[  628.261702][ T5947] usb 3-1: Product: syz
[  628.271110][ T5947] usb 3-1: Manufacturer: syz
[  628.282196][ T5947] usb 3-1: SerialNumber: syz
[  628.291652][T13494] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  628.312071][T13494] cdc_wdm 4-1:1.0: Unknown control protocol
[  628.525547][  T956] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  628.530017][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.546653][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.637216][ T5947] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  628.649969][ T5947] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  628.660347][ T5947] mxuport 3-1:254.0: probe with driver mxuport failed with error -71
[  628.679643][ T5947] usb 3-1: USB disconnect, device number 20
[  628.685130][  T956] usb 1-1: device descriptor read/64, error -71
[  628.720582][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.730165][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.748317][T16042] syzkaller1: entered promiscuous mode
[  628.753888][T16042] syzkaller1: entered allmulticast mode
[  628.763668][    C1] cdc_wdm 4-1:1.0: Unexpected error -71
[  628.764112][ T5909] usb 4-1: USB disconnect, device number 27
[  628.772501][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  628.782814][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  628.788910][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  628.934902][  T956] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  628.960035][T16044] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3391'.
[  629.085177][  T956] usb 1-1: device descriptor read/64, error -71
[  629.196108][  T956] usb usb1-port1: attempt power cycle
[  629.303951][T16047] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.342211][T16053] lo speed is unknown, defaulting to 1000
[  629.351247][T16053] lo speed is unknown, defaulting to 1000
[  629.379691][T16047] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.449986][T16047] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.528657][T16047] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.544585][  T956] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  629.565774][  T956] usb 1-1: device descriptor read/8, error -71
[  629.640284][   T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.662064][   T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.684330][   T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.702801][ T3535] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.771063][T16060] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3396'.
[  629.782250][T16060] net_ratelimit: 160 callbacks suppressed
[  629.782260][T16060] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  629.804971][ T5947] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  629.807045][  T956] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  629.835246][  T956] usb 1-1: device descriptor read/8, error -71
[  629.944866][  T956] usb usb1-port1: unable to enumerate USB device
[  629.964732][ T5947] usb 3-1: Invalid ep0 maxpacket: 64
[  630.094242][ T5947] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  630.254271][ T5947] usb 3-1: Invalid ep0 maxpacket: 64
[  630.260592][ T5947] usb usb3-port1: attempt power cycle
[  630.504249][T16066] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3399'.
[  630.604678][ T5947] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  630.634740][ T5947] usb 3-1: Invalid ep0 maxpacket: 64
[  630.764194][ T5947] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[  630.784489][ T5947] usb 3-1: Invalid ep0 maxpacket: 64
[  630.791017][ T5947] usb usb3-port1: unable to enumerate USB device
[  631.308096][T16071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3401'.
[  631.317938][T16071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3401'.
[  631.329564][T16071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3401'.
[  631.963601][   T56] block nbd0: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 270 seconds
[  631.974638][   T56] block nbd0: Possible stuck request ffff8880255a01c0: control (read@1024,1024B). Runtime 270 seconds
[  631.986242][   T56] block nbd0: Possible stuck request ffff8880255a0380: control (read@2048,1024B). Runtime 270 seconds
[  631.993432][ T5947] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  631.998007][   T56] block nbd0: Possible stuck request ffff8880255a0540: control (read@3072,1024B). Runtime 270 seconds
[  632.073276][ T5964] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  632.178226][ T5947] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  632.187489][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.196214][ T5947] usb 1-1: Product: syz
[  632.200381][ T5947] usb 1-1: Manufacturer: syz
[  632.208510][ T5947] usb 1-1: SerialNumber: syz
[  632.223239][ T5964] usb 4-1: Using ep0 maxpacket: 16
[  632.230050][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  632.242637][ T5964] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  632.252360][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.260811][ T5964] usb 4-1: Product: syz
[  632.265313][ T5964] usb 4-1: Manufacturer: syz
[  632.269908][ T5964] usb 4-1: SerialNumber: syz
[  632.282525][ T5964] usb 4-1: config 0 descriptor??
[  632.290893][ T5964] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  632.301747][ T5964] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  632.695870][T16102] dvmrp0: entered allmulticast mode
[  632.920727][ T5964] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  633.003040][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  633.157010][ T5916] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  633.166262][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.175371][ T5916] usb 3-1: Product: syz
[  633.179538][ T5916] usb 3-1: Manufacturer: syz
[  633.184313][ T5916] usb 3-1: SerialNumber: syz
[  633.191675][ T5916] usb 3-1: config 0 descriptor??
[  633.199483][ T5916] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  633.338056][ T5964] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  633.348006][ T5964] em28xx 4-1:0.0: board has no eeprom
[  633.399195][T16104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.408217][T16104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.422520][ T5964] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  633.431071][ T5964] em28xx 4-1:0.0: dvb set to bulk mode.
[  633.441275][T13494] em28xx 4-1:0.0: Binding DVB extension
[  633.465519][ T5964] usb 4-1: USB disconnect, device number 28
[  633.492675][ T5964] em28xx 4-1:0.0: Disconnecting em28xx
[  633.513253][T13494] em28xx 4-1:0.0: Registering input extension
[  633.524773][ T5964] em28xx 4-1:0.0: Closing input extension
[  633.545557][ T5964] em28xx 4-1:0.0: Freeing device
[  633.618856][T16104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.629124][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.634342][ T5916] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74
[  633.640322][T16104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.657928][T16090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.659852][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.674463][T16090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.699822][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  633.749002][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  633.780204][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  633.816045][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  633.838353][ T5947] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  633.873325][ T5964] usb 3-1: USB disconnect, device number 25
[  633.894445][ T5947] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  633.950881][ T5947] usb 1-1: USB disconnect, device number 2
[  634.101466][   T30] audit: type=1326 audit(6049207203.997:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.3.3416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f390338eba9 code=0x0
[  634.552145][ T5964] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  634.675794][T16137] fuse: Unknown parameter 'all'
[  634.675794][T16136] fuse: Unknown parameter 'all'
[  634.704264][ T5964] usb 1-1: Using ep0 maxpacket: 32
[  634.716688][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.728791][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  634.741329][ T5964] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  634.750789][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.770453][ T5964] usb 1-1: config 0 descriptor??
[  634.785493][ T5964] hub 1-1:0.0: USB hub found
[  634.991834][ T5947] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  635.023640][ T5964] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  635.044060][ T5964] usbhid 1-1:0.0: can't add hid device: -71
[  635.050172][ T5964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  635.164288][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.183144][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  635.195397][ T5947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  635.208224][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.216389][ T5947] usb 3-1: Product: syz
[  635.220594][ T5947] usb 3-1: Manufacturer: syz
[  635.228651][ T5947] usb 3-1: SerialNumber: syz
[  635.269027][ T5964] usb 1-1: USB disconnect, device number 3
[  635.446962][ T5947] usb 3-1: 0:2 : does not exist
[  635.478632][ T5947] usb 3-1: USB disconnect, device number 26
[  635.516056][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  635.611662][ T5964] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  635.631477][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3429'.
[  635.741368][ T5964] usb 1-1: device descriptor read/64, error -71
[  635.981386][ T5964] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  636.111308][ T5964] usb 1-1: device descriptor read/64, error -71
[  636.221719][ T5964] usb usb1-port1: attempt power cycle
[  636.561084][ T5964] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  636.583744][ T5964] usb 1-1: device descriptor read/8, error -71
[  636.722023][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3435'.
[  636.820816][ T5964] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  636.841787][ T5964] usb 1-1: device descriptor read/8, error -71
[  636.951371][ T5964] usb usb1-port1: unable to enumerate USB device
[  637.140727][   T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  637.290627][   T43] usb 4-1: Using ep0 maxpacket: 16
[  637.297046][   T43] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  637.309578][   T43] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  637.319245][   T43] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  637.327507][   T43] usb 4-1: Product: syz
[  637.332088][   T43] usb 4-1: Manufacturer: syz
[  637.336682][   T43] usb 4-1: SerialNumber: syz
[  637.365603][   T43] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  637.549855][   T49] usb 4-1: Failed to submit usb control message: -71
[  637.550277][  T956] usb 4-1: USB disconnect, device number 29
[  637.557468][   T49] usb 4-1: unable to send the bmi data to the device: -71
[  637.557506][   T49] usb 4-1: unable to get target info from device
[  637.557534][   T49] usb 4-1: could not get target info (-71)
[  637.586537][   T49] usb 4-1: could not probe fw (-71)
[  637.967724][T16204] overlayfs: cannot append lower layer
[  638.059057][T16208] misc userio: No port type given on /dev/userio
[  638.144935][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3444'.
[  638.170480][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3444'.
[  638.489959][ T5909] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  638.530056][ T5947] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  638.640148][ T5909] usb 3-1: Using ep0 maxpacket: 16
[  638.647208][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  638.659863][ T5947] usb 4-1: device descriptor read/64, error -71
[  638.667504][ T5909] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  638.677313][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.685353][ T5909] usb 3-1: Product: syz
[  638.689509][ T5909] usb 3-1: Manufacturer: syz
[  638.694220][ T5909] usb 3-1: SerialNumber: syz
[  638.701986][ T5909] usb 3-1: config 0 descriptor??
[  638.717303][ T5909] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  638.726755][ T5909] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  638.908774][ T5947] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  639.090938][ T5947] usb 4-1: device descriptor read/64, error -71
[  639.195732][T16244] sctp: [Deprecated]: syz.0.3457 (pid 16244) Use of int in maxseg socket option.
[  639.195732][T16244] Use struct sctp_assoc_value instead
[  639.213135][ T5947] usb usb4-port1: attempt power cycle
[  639.227269][T16244] IPVS: set_ctl: invalid protocol: 4 172.20.20.54:20000
[  639.325164][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'.
[  639.336983][T16247] netlink: 'syz.0.3458': attribute type 3 has an invalid length.
[  639.384941][ T5909] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  639.549656][ T5947] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  639.570339][ T5947] usb 4-1: device descriptor read/8, error -71
[  639.589461][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  639.764258][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  639.774474][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  639.783551][ T5916] usb 1-1: config 1 has no interface number 0
[  639.790111][ T5916] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.804007][ T5916] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  639.817979][ T5916] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  639.832114][ T5947] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  639.840223][ T5909] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  639.848326][ T5909] em28xx 3-1:0.0: board has no eeprom
[  639.857449][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.869057][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.878454][ T5916] usb 1-1: Product: syz
[  639.884374][ T5947] usb 4-1: device descriptor read/8, error -71
[  639.891665][ T5916] usb 1-1: Manufacturer: syz
[  639.898524][ T5916] usb 1-1: SerialNumber: syz
[  639.949473][ T5909] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  639.957346][ T5909] em28xx 3-1:0.0: dvb set to bulk mode.
[  639.964527][  T984] em28xx 3-1:0.0: Binding DVB extension
[  639.987327][ T5909] usb 3-1: USB disconnect, device number 27
[  640.011963][ T5947] usb usb4-port1: unable to enumerate USB device
[  640.026445][ T5909] em28xx 3-1:0.0: Disconnecting em28xx
[  640.096279][  T984] em28xx 3-1:0.0: Registering input extension
[  640.114840][ T5909] em28xx 3-1:0.0: Closing input extension
[  640.150282][ T5909] em28xx 3-1:0.0: Freeing device
[  640.536017][ T5916] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS
[  640.555592][ T5916] cdc_ncm 1-1:1.1: bind() failure
[  640.579975][ T5916] usb 1-1: USB disconnect, device number 8
[  640.635533][T16269] 9pnet_fd: Insufficient options for proto=fd
[  640.878795][  T956] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  641.029008][  T956] usb 3-1: Using ep0 maxpacket: 16
[  641.035805][  T956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.046136][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  641.057206][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  641.068472][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  641.079837][  T956] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  641.103074][  T956] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  641.115986][  T956] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  641.127222][  T956] usb 3-1: Manufacturer: syz
[  641.138145][  T956] usb 3-1: config 0 descriptor??
[  641.428724][  T956] rc_core: IR keymap rc-hauppauge not found
[  641.438600][  T956] Registered IR keymap rc-empty
[  641.444088][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.470575][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.490846][  T956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  641.509414][  T956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input76
[  641.526979][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.528573][T12216] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  641.550074][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.570071][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.598780][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.618759][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.644204][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.668706][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.690201][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.690596][T12216] usb 1-1: config 1 has too many interfaces: 235, using maximum allowed: 32
[  641.708726][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.710922][T12216] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  641.725931][T12216] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 235
[  641.729213][  T956] mceusb 3-1:0.0: Error: mce write urb status = -71
[  641.738289][T12216] usb 1-1: config 1 has no interface number 0
[  641.748868][T12216] usb 1-1: config 1 has no interface number 1
[  641.754971][T12216] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  641.764131][  T956] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  641.768134][T12216] usb 1-1: config 1 interface 105 has no altsetting 0
[  641.783992][  T956] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  641.786108][T12216] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  641.801957][T12216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.808913][  T956] usb 3-1: USB disconnect, device number 28
[  641.810166][T12216] usb 1-1: Product: syz
[  641.825339][T12216] usb 1-1: Manufacturer: syz
[  641.830892][T12216] usb 1-1: SerialNumber: syz
[  641.838503][ T5916] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  641.942840][T16297] loop3: detected capacity change from 0 to 1
[  641.951610][T16297] Dev loop3: unable to read RDB block 1
[  641.957284][T16297]  loop3: AHDI p1
[  641.962077][T16297] loop3: partition table partially beyond EOD, truncated
[  641.990929][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short
[  642.009175][ T5916] usb 4-1: not running at top speed; connect to a high speed hub
[  642.028401][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  642.047358][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  642.052484][T16299] netlink: 'syz.2.3475': attribute type 21 has an invalid length.
[  642.074724][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  642.079447][T16283] cgroup: subsys name conflicts with all
[  642.089501][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.094054][T16283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.098023][ T5916] usb 4-1: Product: syz
[  642.112649][ T5916] usb 4-1: Manufacturer: syz
[  642.114326][T16283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.117292][ T5916] usb 4-1: SerialNumber: syz
[  642.135295][T12216] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22
[  642.308461][  T956] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  642.344410][T16283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.352706][ T5916] usb 4-1: 0:2 : does not exist
[  642.355071][T16283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.361323][ T5916] usb 4-1: unit 6 not found!
[  642.383382][ T5916] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  642.397545][T12216] usb 1-1: USB disconnect, device number 9
[  642.410540][ T5916] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  642.436281][ T5916] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5)
[  642.463112][  T956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  642.463736][ T5916] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  642.482720][  T956] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00
[  642.494207][  T956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.494365][ T5916] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5)
[  642.512881][  T956] usb 3-1: config 0 descriptor??
[  642.526201][ T5916] usb 4-1: USB disconnect, device number 34
[  642.540580][T16305] netlink: 'syz.0.3476': attribute type 3 has an invalid length.
[  642.553866][T16305] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3476'.
[  642.923541][  T956] usbhid 3-1:0.0: can't add hid device: -71
[  642.935938][  T956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  642.948830][  T956] usb 3-1: USB disconnect, device number 29
[  643.397632][T12216] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  643.555420][T12216] usb 4-1: config 0 interface 0 altsetting 214 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  643.567293][T12216] usb 4-1: config 0 interface 0 altsetting 214 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  643.586573][T12216] usb 4-1: config 0 interface 0 has no altsetting 0
[  643.594476][T12216] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  643.609552][T12216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.625798][T12216] usb 4-1: config 0 descriptor??
[  643.656044][T16313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  643.696829][T16321] syzkaller1: entered promiscuous mode
[  643.702916][T16321] syzkaller1: entered allmulticast mode
[  644.024488][   T52] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  644.025783][T16332] netlink: 'syz.2.3489': attribute type 2 has an invalid length.
[  644.073660][T16313] netlink: 'syz.3.3481': attribute type 10 has an invalid length.
[  644.081724][T16313] : left promiscuous mode
[  644.086471][T16313] bond_slave_0: left promiscuous mode
[  644.092604][T16313] bond_slave_1: left promiscuous mode
[  644.104042][T16313] 8021q: adding VLAN 0 to HW filter on device 
[  644.112403][T16313] team0: Port device  added
[  644.123893][T12216] usb 4-1: string descriptor 0 read error: -71
[  644.136475][T12216] usbhid 4-1:0.0: can't add hid device: -71
[  644.142679][T12216] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  644.159906][T12216] usb 4-1: USB disconnect, device number 35
[  644.277437][ T5916] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  644.430374][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  644.437350][ T5916] usb 3-1: config index 0 descriptor too short (expected 102, got 36)
[  644.445529][ T5916] usb 3-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[  644.456977][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 97, changing to 7
[  644.468017][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1573, setting to 1024
[  644.479019][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  644.494227][ T5916] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  644.503775][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.512267][ T5916] usb 3-1: Product: syz
[  644.516436][ T5916] usb 3-1: Manufacturer: syz
[  644.521197][ T5916] usb 3-1: SerialNumber: syz
[  644.527965][ T5916] usb 3-1: config 0 descriptor??
[  644.535176][ T5916] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  644.742061][T16339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.753831][ T5964] usb 3-1: USB disconnect, device number 30
[  644.755138][T16339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.835313][T16339] netlink: 'syz.5.3491': attribute type 29 has an invalid length.
[  644.843867][T16339] netlink: 'syz.5.3491': attribute type 29 has an invalid length.
[  644.852280][T16341] netlink: 'syz.5.3491': attribute type 29 has an invalid length.
[  644.860863][T16339] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3491'.
[  645.426937][T16360] sctp: [Deprecated]: syz.3.3495 (pid 16360) Use of struct sctp_assoc_value in delayed_ack socket option.
[  645.426937][T16360] Use struct sctp_sack_info instead
[  645.471116][T16360] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  645.481938][T16360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  645.647508][ T5909] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  645.846478][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  645.853964][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[  645.862897][ T5909] usb 3-1: config 14 has an invalid interface number: 115 but max is 0
[  645.871267][ T5909] usb 3-1: config 14 has no interface number 0
[  645.877862][ T5909] usb 3-1: config 14 interface 115 has no altsetting 0
[  645.887048][ T5909] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73
[  645.896283][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.904286][ T5909] usb 3-1: Product: syz
[  645.912175][ T5909] usb 3-1: Manufacturer: syz
[  645.917618][ T5909] usb 3-1: SerialNumber: syz
[  645.951842][   T49] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.048528][   T49] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.129022][   T49] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.193659][   T49] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.396885][   T49] bridge_slave_1: left allmulticast mode
[  646.402658][   T49] bridge_slave_1: left promiscuous mode
[  646.417151][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.435796][   T49] bridge_slave_0: left allmulticast mode
[  646.442146][   T49] bridge_slave_0: left promiscuous mode
[  646.448739][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.688591][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  646.702636][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  646.719752][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  646.734557][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  646.753297][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  647.029298][   T49] team0: Port device  removed
[  647.039464][   T49]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  647.051865][   T49]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  647.062010][   T49]  (unregistering): Released all slaves
[  647.109378][T16366] lo speed is unknown, defaulting to 1000
[  647.121442][T16366] lo speed is unknown, defaulting to 1000
[  647.311244][T16366] chnl_net:caif_netlink_parms(): no params data found
[  647.454472][T16366] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.462241][T16366] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.470848][T16366] bridge_slave_0: entered allmulticast mode
[  647.479650][T16366] bridge_slave_0: entered promiscuous mode
[  647.489335][T16366] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.496991][T16366] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.504249][T16366] bridge_slave_1: entered allmulticast mode
[  647.512424][T16366] bridge_slave_1: entered promiscuous mode
[  647.574510][T16366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.597017][T16366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  647.681760][T16366] team0: Port device team_slave_0 added
[  647.704512][T16366] team0: Port device team_slave_1 added
[  647.818485][T16366] batman_adv: batadv0: Adding interface: batadv_slave_0
[  647.827789][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.867785][T16366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  647.891714][T16366] batman_adv: batadv0: Adding interface: batadv_slave_1
[  647.902742][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.928767][    C0] vkms_vblank_simulate: vblank timer overrun
[  647.936886][T16366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.184094][T16366] hsr_slave_0: entered promiscuous mode
[  648.194570][T16366] hsr_slave_1: entered promiscuous mode
[  648.202393][T16366] debugfs: 'hsr0' already exists in 'hsr'
[  648.208392][T16366] Cannot create hsr debugfs directory
[  648.389251][ T5909] xr_serial 3-1:14.115: More than one union descriptor, skipping ...
[  648.425048][ T5909] usb 3-1: USB disconnect, device number 31
[  648.693141][T16366] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  648.708917][T16366] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  648.732657][T16366] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  648.761906][T16366] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  648.835700][ T5864] Bluetooth: hci0: command tx timeout
[  649.059622][   T49] hsr_slave_0: left promiscuous mode
[  649.067473][   T49] hsr_slave_1: left promiscuous mode
[  649.073440][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.083353][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.092140][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.099841][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  649.108323][   T49] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  649.116628][   T49] batman_adv: batadv0: Removing interface: virt_wifi0
[  649.133559][   T49] veth1_macvtap: left promiscuous mode
[  649.139334][   T49] veth0_macvtap: left promiscuous mode
[  649.145228][   T49] veth1_vlan: left promiscuous mode
[  649.150488][   T49] veth0_vlan: left promiscuous mode
[  649.401991][   T49] team0 (unregistering): Port device macvlan1 removed
[  649.429087][T16421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  649.558848][T16424] netlink: 'syz.2.3503': attribute type 2 has an invalid length.
[  649.561237][ T5864] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  649.798272][   T49] team0 (unregistering): Port device team_slave_1 removed
[  649.834592][  T984] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  649.851547][   T49] team0 (unregistering): Port device team_slave_0 removed
[  650.001168][  T984] usb 3-1: Using ep0 maxpacket: 16
[  650.026863][  T984] usb 3-1: config index 0 descriptor too short (expected 102, got 36)
[  650.037465][  T984] usb 3-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config
[  650.054730][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 97, changing to 7
[  650.066163][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1573, setting to 1024
[  650.079529][  T984] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  650.096559][  T984] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  650.109949][  T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.118584][  T984] usb 3-1: Product: syz
[  650.123102][  T984] usb 3-1: Manufacturer: syz
[  650.127881][  T984] usb 3-1: SerialNumber: syz
[  650.141339][  T984] usb 3-1: config 0 descriptor??
[  650.149711][  T984] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  650.442687][ T5909] usb 3-1: USB disconnect, device number 32
[  650.519168][T16366] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.583690][T16366] 8021q: adding VLAN 0 to HW filter on device team0
[  650.605563][T14411] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.612754][T14411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.641819][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.649021][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.841163][   T49] IPVS: stop unused estimator thread 0...
[  650.913900][ T5864] Bluetooth: hci0: command tx timeout
[  651.207453][T16366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.765793][T16366] veth0_vlan: entered promiscuous mode
[  651.800797][T16366] veth1_vlan: entered promiscuous mode
[  651.862291][T16366] veth0_macvtap: entered promiscuous mode
[  651.894633][T16366] veth1_macvtap: entered promiscuous mode
[  651.960169][ T5864] Bluetooth: hci5: command 0x0406 tx timeout
[  651.968369][T16366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.001274][T16366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.034912][ T4527] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.073255][T14411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.084905][ T4527] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.094725][ T4527] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.247496][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.276560][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.341048][ T4527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.354352][ T4527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.723523][  T984] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  652.884357][  T984] usb 7-1: Using ep0 maxpacket: 8
[  652.891819][  T984] usb 7-1: unable to get BOS descriptor or descriptor too short
[  652.901331][  T984] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  652.913943][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  652.924998][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  652.935702][  T984] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  652.945531][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  652.955430][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  652.967823][  T984] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  652.977774][  T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.985869][  T984] usb 7-1: Product: syz
[  652.990274][  T984] usb 7-1: Manufacturer: syz
[  652.995301][   T52] Bluetooth: hci0: command tx timeout
[  653.001278][  T984] usb 7-1: SerialNumber: syz
[  653.010518][  T984] usb 7-1: config 0 descriptor??
[  653.016624][T16476] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  653.027674][  T984] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  653.087705][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  653.232982][ T5916] usb 7-1: USB disconnect, device number 2
[  653.308881][T16485] syz_tun: entered allmulticast mode
[  653.782745][  T956] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  653.923302][  T956] usb 3-1: device descriptor read/64, error -71
[  654.042269][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  654.099424][T14219] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  654.100410][T16499] netlink: 'syz.5.3513': attribute type 2 has an invalid length.
[  654.132551][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  654.172348][  T956] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  654.284589][ T5916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  654.293642][ T5916] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  654.303212][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.313818][ T5916] usb 7-1: config 0 descriptor??
[  654.313839][  T956] usb 3-1: device descriptor read/64, error -71
[  654.435620][  T956] usb usb3-port1: attempt power cycle
[  654.772828][  T956] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  654.792450][  T956] usb 3-1: device descriptor read/8, error -71
[  654.897059][ T5916] usb 7-1: USB disconnect, device number 3
[  655.032367][  T956] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  655.052375][  T956] usb 3-1: device descriptor read/8, error -71
[  655.071726][T14219] Bluetooth: hci0: command tx timeout
[  655.162709][  T956] usb usb3-port1: unable to enumerate USB device
[  655.264843][ T5916] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  655.401533][ T5916] usb 7-1: device descriptor read/64, error -71
[  655.651378][ T5916] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  655.781462][ T5916] usb 7-1: device descriptor read/64, error -71
[  655.901821][ T5916] usb usb7-port1: attempt power cycle
[  656.241311][ T5916] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  656.282433][ T5916] usb 7-1: device descriptor read/8, error -71
[  656.532299][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  656.553149][ T5916] usb 7-1: device descriptor read/8, error -71
[  656.661187][ T5916] usb usb7-port1: unable to enumerate USB device
[  656.840939][T12216] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  657.004746][T12216] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  657.014033][T12216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.022377][T12216] usb 3-1: Product: syz
[  657.026546][T12216] usb 3-1: Manufacturer: syz
[  657.031189][T12216] usb 3-1: SerialNumber: syz
[  657.037441][T12216] usb 3-1: config 0 descriptor??
[  657.054013][T14219] Bluetooth: hci3: urb ffff888145777f00 submission failed (2)
[  657.248150][T12216] usb 3-1: USB disconnect, device number 37
[  658.185851][T16525] sit0: entered promiscuous mode
[  658.211182][T16525] netlink: 'syz.6.3520': attribute type 1 has an invalid length.
[  658.232778][T16525] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3520'.
[  658.477548][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  658.488134][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  658.504500][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  658.520860][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  658.541648][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  658.563802][T15876] bridge0: port 3(syz_tun) entered disabled state
[  658.628780][T15876] syz_tun (unregistering): left allmulticast mode
[  658.636118][T15876] syz_tun (unregistering): left promiscuous mode
[  658.650313][T15876] bridge0: port 3(syz_tun) entered disabled state
[  658.738939][T16531] lo speed is unknown, defaulting to 1000
[  658.749649][T16531] lo speed is unknown, defaulting to 1000
[  658.783418][T16529] syz.2.3521 (16529): drop_caches: 2
[  658.832583][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.933815][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.193044][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.328619][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.352398][T16531] chnl_net:caif_netlink_parms(): no params data found
[  659.449529][  T956] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  659.506224][T16531] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.513843][T16531] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.519677][   T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  659.522011][T16531] bridge_slave_0: entered allmulticast mode
[  659.537843][T16531] bridge_slave_0: entered promiscuous mode
[  659.546947][T16531] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.557214][T16531] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.564869][T16531] bridge_slave_1: entered allmulticast mode
[  659.573137][T16531] bridge_slave_1: entered promiscuous mode
[  659.613173][  T956] usb 3-1: Using ep0 maxpacket: 16
[  659.640508][  T956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  659.667337][  T956] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  659.679607][T16531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.689627][   T43] usb 7-1: Using ep0 maxpacket: 32
[  659.695354][  T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.698682][T16531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.704865][  T956] usb 3-1: Product: syz
[  659.718855][   T43] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  659.724364][   T49] bridge_slave_1: left allmulticast mode
[  659.729672][  T956] usb 3-1: Manufacturer: syz
[  659.738497][   T49] bridge_slave_1: left promiscuous mode
[  659.745258][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.747775][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.761182][  T956] usb 3-1: SerialNumber: syz
[  659.774995][   T49] bridge_slave_0: left promiscuous mode
[  659.776319][  T956] usb 3-1: config 0 descriptor??
[  659.787473][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.795338][   T43] usb 7-1: config 0 descriptor??
[  659.804822][  T956] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  659.815479][  T956] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  660.036440][   T43] usb 7-1: USB disconnect, device number 8
[  660.456455][  T956] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  660.589147][T14219] Bluetooth: hci3: command tx timeout
[  660.597341][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  660.617814][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.678308][   T49] bond0 (unregistering): Released all slaves
[  660.788360][T16531] team0: Port device team_slave_0 added
[  660.846365][T16531] team0: Port device team_slave_1 added
[  660.874999][  T956] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  660.884196][  T956] em28xx 3-1:0.0: board has no eeprom
[  660.936771][T16531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.950599][  T956] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  660.968778][   T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  660.976927][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.004320][  T956] em28xx 3-1:0.0: dvb set to bulk mode.
[  661.012560][ T5929] em28xx 3-1:0.0: Binding DVB extension
[  661.029939][  T956] usb 3-1: USB disconnect, device number 38
[  661.045608][  T956] em28xx 3-1:0.0: Disconnecting em28xx
[  661.065925][T16531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.114281][ T5929] em28xx 3-1:0.0: Registering input extension
[  661.133871][  T956] em28xx 3-1:0.0: Closing input extension
[  661.157322][T16531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.169065][   T43] usb 7-1: Using ep0 maxpacket: 8
[  661.181476][  T956] em28xx 3-1:0.0: Freeing device
[  661.192501][   T43] usb 7-1: config 148 has an invalid interface number: 46 but max is 0
[  661.201400][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.227943][   T43] usb 7-1: config 148 has no interface number 0
[  661.237804][   T43] usb 7-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d
[  661.254923][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.267738][T16531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.388184][   T49] hsr_slave_0: left promiscuous mode
[  661.397995][   T49] hsr_slave_1: left promiscuous mode
[  661.399013][   T31] INFO: task syz.1.2880:14169 blocked for more than 143 seconds.
[  661.414550][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.422931][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.430324][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  661.447308][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  661.479492][   T31] task:syz.1.2880      state:D stack:24408 pid:14169 tgid:14168 ppid:12360  task_flags:0x400040 flags:0x00004004
[  661.497457][   T43] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state.
[  661.521136][   T31] Call Trace:
[  661.524451][   T31]  <TASK>
[  661.527425][   T31]  __schedule+0x1798/0x4cc0
[  661.533066][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  661.548773][   T31]  ? __pfx___schedule+0x10/0x10
[  661.553817][   T31]  ? schedule+0x91/0x360
[  661.558086][   T31]  schedule+0x165/0x360
[  661.569088][   T43] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design)
[  661.577661][   T43] usb 7-1: media controller created
[  661.588458][   T31]  schedule_preempt_disabled+0x13/0x30
[  661.593954][   T31]  __mutex_lock+0x7e6/0x1350
[  661.618464][   T31]  ? __mutex_lock+0x5bb/0x1350
[  661.623286][   T31]  ? sync_bdevs+0x1ac/0x340
[  661.627826][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  661.658392][   T31]  ? iput+0x5d5/0xc40
[  661.662434][   T31]  sync_bdevs+0x1ac/0x340
[  661.666788][   T31]  ksys_sync+0xb9/0x150
[  661.671995][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  661.682715][   T31]  ? __pfx_ksys_sync+0x10/0x10
[  661.694502][   T31]  ? do_syscall_64+0xbe/0xfa0
[  661.732996][   T31]  __ia32_sys_sync+0xe/0x20
[  661.737554][   T31]  do_syscall_64+0xfa/0xfa0
[  661.743874][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.757024][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.763516][   T31]  ? clear_bhb_loop+0x60/0xb0
[  661.778349][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.784285][   T31] RIP: 0033:0x7f59abb8eba9
[  661.798328][   T31] RSP: 002b:00007f59acacc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  661.806916][   T31] RAX: ffffffffffffffda RBX: 00007f59abdd5fa0 RCX: 00007f59abb8eba9
[  661.831223][   T43] DVB: Unable to find symbol dib7000p_attach()
[  661.837404][   T43] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design'
[  661.846057][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  661.854099][   T31] RBP: 00007f59abdd5fa0 R08: 0000000000000000 R09: 0000000000000000
[  661.864275][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.878353][   T31] R13: 00007f59abdd6038 R14: 00007f59abdd5fa0 R15: 00007ffd2d5e3be8
[  661.886375][   T31]  </TASK>
[  661.908323][   T31] 
[  661.908323][   T31] Showing all locks held in the system:
[  661.916086][   T31] 2 locks held by kworker/u8:1/13:
[  661.922594][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.938237][   T31]  #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  661.960728][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.978349][   T31]  #1: ffffc90000127ba0 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  661.994594][   T31] 1 lock held by khungtaskd/31:
[  661.999930][   T31]  #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  662.018230][   T43] rc_core: IR keymap rc-dib0700-rc5 not found
[  662.024321][   T43] Registered IR keymap rc-empty
[  662.038701][   T31] 5 locks held by kworker/1:1/43:
[  662.043833][   T56] block nbd0: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 300 seconds
[  662.054863][   T56] block nbd0: Possible stuck request ffff8880255a01c0: control (read@1024,1024B). Runtime 300 seconds
[  662.066166][   T56] block nbd0: Possible stuck request ffff8880255a0380: control (read@2048,1024B). Runtime 300 seconds
[  662.077408][   T56] block nbd0: Possible stuck request ffff8880255a0540: control (read@3072,1024B). Runtime 300 seconds
[  662.089629][   T31] 5 locks held by kworker/u8:3/49:
[  662.095011][   T31]  #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  662.107955][   T43] dvb-usb: could not initialize remote control.
[  662.114903][   T43] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected.
[  662.124555][   T31]  #1: ffffc90000b97ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  662.140581][   T43] usb 7-1: USB disconnect, device number 9
[  662.148183][   T31]  #2: ffffffff8f948270 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  662.157536][   T31]  #3: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  662.173073][   T31]  #4: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  662.191679][   T31] 3 locks held by kworker/u8:4/65:
[  662.206321][   T31]  #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  662.219652][   T43] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected.
[  662.229619][   T31]  #1: ffffc9000215fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  662.242592][   T31]  #2: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  662.251966][   T31] 1 lock held by dhcpcd/5529:
[  662.256657][   T31]  #0: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50
[  662.267993][   T31] 2 locks held by getty/5626:
[  662.272688][   T31]  #0: ffff8880340f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  662.286403][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  662.296724][   T31] 1 lock held by udevd/5875:
[  662.301589][   T31]  #0: ffff888142f9a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  662.310956][   T31] 1 lock held by syz.1.2880/14169:
[  662.316141][   T31]  #0: ffff888142f9a358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  662.325623][   T31] 2 locks held by syz-executor/16531:
[  662.331026][   T31]  #0: ffffffff8f0c4220 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  662.340810][   T31]  #1: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  662.350137][   T31] 1 lock held by syz.5.3529/16566:
[  662.355255][   T31]  #0: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  662.366320][   T31] 1 lock held by syz.6.3530/16567:
[  662.371521][   T31]  #0: ffffffff8e542180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  662.381898][   T31] 
[  662.414688][   T31] =============================================
[  662.414688][   T31] 
[  662.439423][   T31] NMI backtrace for cpu 1
[  662.439445][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  662.439471][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  662.439483][   T31] Call Trace:
[  662.439491][   T31]  <TASK>
[  662.439500][   T31]  dump_stack_lvl+0x189/0x250
[  662.439526][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  662.439544][   T31]  ? __pfx__printk+0x10/0x10
[  662.439581][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  662.439610][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  662.439637][   T31]  ? __pfx__printk+0x10/0x10
[  662.439665][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  662.439686][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  662.439714][   T31]  watchdog+0xf60/0xfa0
[  662.439738][   T31]  ? watchdog+0x1e2/0xfa0
[  662.439762][   T31]  kthread+0x711/0x8a0
[  662.439790][   T31]  ? __pfx_watchdog+0x10/0x10
[  662.439807][   T31]  ? __pfx_kthread+0x10/0x10
[  662.439834][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  662.439852][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.439871][   T31]  ? __pfx_kthread+0x10/0x10
[  662.439896][   T31]  ret_from_fork+0x4bc/0x870
[  662.439919][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  662.439947][   T31]  ? __switch_to_asm+0x39/0x70
[  662.439964][   T31]  ? __switch_to_asm+0x33/0x70
[  662.439981][   T31]  ? __pfx_kthread+0x10/0x10
[  662.440006][   T31]  ret_from_fork_asm+0x1a/0x30
[  662.440041][   T31]  </TASK>
[  662.440049][   T31] Sending NMI from CPU 1 to CPUs 0:
[  662.523855][   T49] veth1_macvtap: left promiscuous mode
[  662.525227][    C0] NMI backtrace for cpu 0
[  662.525240][    C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  662.525258][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  662.525269][    C0] Workqueue: netns cleanup_net
[  662.525291][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  662.525315][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 ab 54 a5 f5 cc
[  662.525330][    C0] RSP: 0018:ffffc90000b965d8 EFLAGS: 00000293
[  662.525343][    C0] RAX: ffffffff8b87a35c RBX: 0000000000000036 RCX: ffff888021ae5ac0
[  662.525355][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000018
[  662.525364][    C0] RBP: ffffc90000b96700 R08: ffffc90000b96677 R09: 0000000000000000
[  662.525376][    C0] R10: ffffc90000b96660 R11: fffff52000172ccf R12: ffffc90000b969e5
[  662.525387][    C0] R13: dffffc0000000000 R14: ffffc90000b969e5 R15: 0000000000000000
[  662.525399][    C0] FS:  0000000000000000(0000) GS:ffff8881257a7000(0000) knlGS:0000000000000000
[  662.525413][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  662.525424][    C0] CR2: 000056421bb26000 CR3: 0000000033342000 CR4: 00000000003526f0
[  662.525438][    C0] Call Trace:
[  662.525445][    C0]  <TASK>
[  662.525451][    C0]  number+0xbbc/0xf60
[  662.525476][    C0]  ? number+0x61/0xf60
[  662.525496][    C0]  ? __pfx_number+0x10/0x10
[  662.525518][    C0]  ? format_decode+0x5a3/0xe30
[  662.525540][    C0]  vsnprintf+0x91b/0xf00
[  662.525565][    C0]  sprintf+0xd9/0x120
[  662.525587][    C0]  ? __pfx_sprintf+0x10/0x10
[  662.525608][    C0]  ? desc_read+0x208/0x3f0
[  662.525629][    C0]  info_print_prefix+0x155/0x310
[  662.525646][    C0]  ? __pfx_info_print_prefix+0x10/0x10
[  662.525659][    C0]  ? _prb_read_valid+0xa7b/0xa90
[  662.525676][    C0]  ? desc_read+0x1b8/0x3f0
[  662.525696][    C0]  record_print_text+0x154/0x420
[  662.525727][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  662.525745][    C0]  ? __pfx_record_print_text+0x10/0x10
[  662.525767][    C0]  ? panic_on_this_cpu+0x32/0x40
[  662.525785][    C0]  printk_get_next_message+0x26d/0x7b0
[  662.525810][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  662.525831][    C0]  ? __lock_acquire+0xab9/0xd20
[  662.525853][    C0]  ? console_flush_all+0x13a/0xb10
[  662.525875][    C0]  ? console_flush_all+0x476/0xb10
[  662.525896][    C0]  console_flush_all+0x4ca/0xb10
[  662.525917][    C0]  ? console_flush_all+0x13a/0xb10
[  662.525939][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  662.525964][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  662.525980][    C0]  console_unlock+0xbb/0x190
[  662.525998][    C0]  ? vprintk_emit+0x2ee/0x590
[  662.526017][    C0]  ? __pfx_console_unlock+0x10/0x10
[  662.526036][    C0]  ? vprintk_emit+0x2ee/0x590
[  662.526053][    C0]  ? vprintk_emit+0x2ee/0x590
[  662.526072][    C0]  vprintk_emit+0x4c5/0x590
[  662.526091][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  662.526108][    C0]  ? stack_trace_save+0x9c/0xe0
[  662.526129][    C0]  ? stack_depot_save_flags+0x40/0x860
[  662.526151][    C0]  ? kasan_save_stack+0x3e/0x60
[  662.526168][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[  662.526193][    C0]  _printk+0xcf/0x120
[  662.526212][    C0]  ? unregister_netdevice_many_notify+0x7b9/0x1ff0
[  662.526228][    C0]  ? ops_undo_list+0x525/0x990
[  662.526247][    C0]  ? __pfx__printk+0x10/0x10
[  662.526268][    C0]  ? __netdev_printk+0x365/0x4d0
[  662.526284][    C0]  netdev_info+0x10a/0x160
[  662.526305][    C0]  ? __pfx_netdev_info+0x10/0x10
[  662.526323][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  662.526345][    C0]  __dev_set_promiscuity+0x307/0x740
[  662.526368][    C0]  __dev_set_rx_mode+0x17c/0x260
[  662.526388][    C0]  dev_uc_del+0xc0/0x110
[  662.526408][    C0]  macsec_dev_stop+0x2b6/0x380
[  662.526424][    C0]  ? __pfx_macsec_dev_stop+0x10/0x10
[  662.526440][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  662.526459][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  662.526479][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  662.526499][    C0]  ? dev_deactivate_many+0xb82/0xd40
[  662.526519][    C0]  ? dev_deactivate_many+0xd03/0xd40
[  662.526538][    C0]  ? dev_deactivate_many+0x258/0xd40
[  662.526555][    C0]  ? __pfx_macsec_dev_stop+0x10/0x10
[  662.526572][    C0]  __dev_close_many+0x364/0x6f0
[  662.526591][    C0]  ? __pfx___dev_close_many+0x10/0x10
[  662.526609][    C0]  ? __lock_acquire+0xab9/0xd20
[  662.526628][    C0]  netif_close_many+0x225/0x410
[  662.526647][    C0]  ? __pfx_netif_close_many+0x10/0x10
[  662.526663][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  662.526687][    C0]  unregister_netdevice_many_notify+0x7b9/0x1ff0
[  662.526708][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  662.526726][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  662.526746][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  662.526763][    C0]  ? unregister_netdevice_queue+0x1b3/0x380
[  662.526786][    C0]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  662.526807][    C0]  ? batadv_meshif_destroy_netlink+0x1b0/0x250
[  662.526830][    C0]  default_device_exit_batch+0x819/0x890
[  662.526850][    C0]  ? __pfx___might_resched+0x10/0x10
[  662.526868][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  662.526886][    C0]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  662.526906][    C0]  ? net_generic+0x1e/0x240
[  662.526924][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  662.526941][    C0]  ops_undo_list+0x525/0x990
[  662.526961][    C0]  ? __pfx_ops_undo_list+0x10/0x10
[  662.526980][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  662.527002][    C0]  cleanup_net+0x4c5/0x800
[  662.527020][    C0]  ? __pfx_cleanup_net+0x10/0x10
[  662.527039][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  662.527057][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  662.527076][    C0]  process_scheduled_works+0xae1/0x17b0
[  662.527105][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  662.527130][    C0]  worker_thread+0x8a0/0xda0
[  662.527159][    C0]  kthread+0x711/0x8a0
[  662.527180][    C0]  ? __pfx_worker_thread+0x10/0x10
[  662.527198][    C0]  ? __pfx_kthread+0x10/0x10
[  662.527218][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  662.527234][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.527250][    C0]  ? __pfx_kthread+0x10/0x10
[  662.527271][    C0]  ret_from_fork+0x4bc/0x870
[  662.527289][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  662.527309][    C0]  ? __switch_to_asm+0x39/0x70
[  662.527324][    C0]  ? __switch_to_asm+0x33/0x70
[  662.527340][    C0]  ? __pfx_kthread+0x10/0x10
[  662.527360][    C0]  ret_from_fork_asm+0x1a/0x30
[  662.527383][    C0]  </TASK>
[  662.687885][T14219] Bluetooth: hci3: command tx timeout
[  662.867752][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  662.867774][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  662.867795][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  662.867807][   T31] Call Trace:
[  662.867816][   T31]  <TASK>
[  662.867824][   T31]  dump_stack_lvl+0x99/0x250
[  662.867848][   T31]  ? __asan_memcpy+0x40/0x70
[  662.867868][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  662.867887][   T31]  ? __pfx__printk+0x10/0x10
[  662.867923][   T31]  vpanic+0x237/0x6d0
[  662.867944][   T31]  ? __pfx_vpanic+0x10/0x10
[  662.867966][   T31]  ? preempt_schedule_common+0x83/0xd0
[  662.867994][   T31]  panic+0xb9/0xc0
[  662.868014][   T31]  ? __pfx_panic+0x10/0x10
[  662.868036][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  662.868065][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  662.868094][   T31]  watchdog+0xf9f/0xfa0
[  662.868119][   T31]  ? watchdog+0x1e2/0xfa0
[  662.868143][   T31]  kthread+0x711/0x8a0
[  662.868172][   T31]  ? __pfx_watchdog+0x10/0x10
[  662.868191][   T31]  ? __pfx_kthread+0x10/0x10
[  662.868217][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  662.868237][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  662.868257][   T31]  ? __pfx_kthread+0x10/0x10
[  662.868283][   T31]  ret_from_fork+0x4bc/0x870
[  662.868307][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  662.868334][   T31]  ? __switch_to_asm+0x39/0x70
[  662.868353][   T31]  ? __switch_to_asm+0x33/0x70
[  662.868371][   T31]  ? __pfx_kthread+0x10/0x10
[  662.868397][   T31]  ret_from_fork_asm+0x1a/0x30
[  662.868441][   T31]  </TASK>
[  662.870880][   T31] Kernel Offset: disabled