last executing test programs:

4m56.425372339s ago: executing program 3 (id=61):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f724d28b57"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x11, {0x11, 0x21, "ec9a12dcbe25bac03a63af924b6f41"}}, &(0x7f0000000040)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "16021233b566a2715f7bb639cd5a8808925be09f205d345a06760c712fc60a74e1d8790a8bc3e539636a04c49673a22329a4b92155138c6f245808f5b18b21524cb6923c2fb92101d52f1892b7108e54272ed66402dd417f0e1baee2315074ebf61bc411c49ea8eda7f5f9cce6412b5b900d3e4caa0fd6d36022824bb089ff2688c9e9b43521770632562d41993d3f21eb54755ded46215f1c88b009157f311ed742023d35d3e37fff654dfaf1bd2e5e5f9532ce9a7c7950fcfe86661cc12dc27aa9fb9837f36123e65e798a8928f1d55a"}}, &(0x7f0000000140)={0x0, 0xf, 0x133, {0x5, 0xf, 0x133, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x3254b8d, 0xf, 0x0, [0x1fe000f, 0x3fc0, 0x50, 0x3f, 0xc0c0, 0x30]}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf00, 0x3, [0xf, 0x0, 0x0, 0x30, 0xff000f, 0xff]}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "2b45806a09abd8ddbedb9836d3cf7bd4"}, @generic={0x7f, 0x10, 0xb, "dd21e1bcb1de05db54af3e6407c22ac526331713b11cb16ea28d56dad0774564cc6525154c46a46a061a34ead52e2377624819baf5d5a870f91a8ce11e35bfa8558a977a63b116dd328692b61abbb07828222c4408e7a10904c4e0f33ab447ba835100dd517e2cc279fd4d053748d0297867a82c6c673751950d8a9a"}, @generic={0x4c, 0x10, 0xb, "de1818b1dd7a22d48a9ff8acf842688e08db95f2db5674b974bf280c5d8ca3970a446b29647168353cd3e5285ffd008f05a82cbc50c588b2113c23dd9e59545977a3467acf7332594e"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0xc, 0x40}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0xd5, 0x2, "d4d49137", "9b1c1844"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x7, 0x9b, 0x1, 0xf, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x5e, "2b47a373e503435956d629a38064a96a79d67e86b185784baab96038fdde286d177ac8ff11cff0b4f015b0ed7e12a59c7c40066e0825c5f1a36de3b0dff176b224c4aff8b74ca2ef225f17b46b001887f8d9473489444340d84f2a8f8367"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2ae7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, ']Z'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "18d0"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x34}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7b}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}})

4m53.248027272s ago: executing program 3 (id=66):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1, 0x492}, 0x8)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x6, 0x2, 0x1)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, 0x84)
syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

4m51.344239221s ago: executing program 3 (id=75):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x88b0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0xfffe, 0x9}, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd000011000008000000006000000000000000000000000000aaff0200000000000000000000002f0100000000000000000002009078"], 0x8a)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d0001000000000904000003"], 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
fsync(0xffffffffffffffff)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r5, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000008})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r5, r5, 0x3, 0xfffffffffffffffa, 0x3fff})
close(0x3)
sendto$inet6(r1, 0x0, 0xfffffffffffffd70, 0xc00c095, &(0x7f0000000140)={0xa, 0x4e20, 0xfffc, @empty, 0xfffffffd}, 0x1c)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810426984b17ea907a5017f8aafff5cdc401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c0080000000000000683f5aeb4edbb55d5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0)

4m50.012809241s ago: executing program 3 (id=77):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x89, 0x49}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x2}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

4m47.488112586s ago: executing program 3 (id=85):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/snmp6\x00')
read$FUSE(r1, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @local}) (async)
setresuid(0xee00, 0xee00, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x0) (async)
r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r4, 0x5, 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000080)={{0x1000, 0x54000, 0x4, 0x8, 0xf6, 0x6, 0xfe, 0xfc, 0xc, 0x1, 0x0, 0x2}, {0x1dddc0000, 0xffff1000, 0x10, 0xa0, 0xdd, 0x4, 0x9, 0xc, 0x4, 0x61, 0xb, 0x7}, {0x1, 0xd000, 0xb, 0x4e, 0x4, 0x2, 0x3, 0xa, 0x3, 0x2, 0x5, 0x7}, {0xeeee0000, 0xfec00000, 0x3, 0xb4, 0xff, 0xc0, 0x9c, 0x9, 0x6, 0xcd, 0x10, 0x9c}, {0xb000, 0xc000, 0x4, 0xe7, 0x8, 0x6, 0x2, 0x3, 0xf, 0x4, 0x6, 0xb}, {0x30000, 0xfb07e3d72f43f239, 0x8, 0x1, 0x0, 0x7, 0xfe, 0x2, 0x9, 0x2, 0xf2, 0x5}, {0x54000, 0xfff8ffff, 0xf, 0x8, 0xf9, 0x7, 0x63, 0x4, 0x7, 0x5, 0x7f, 0x6c}, {0xffff1000, 0xffffffff, 0xb, 0x6, 0x9, 0x6, 0x5, 0x6, 0xb, 0x6c, 0x4, 0xa}, {0x10000, 0x8}, {0x2, 0x6}, 0x20040005, 0x0, 0x7000, 0x42004, 0xf, 0x400, 0xb000, [0xfffffffffffff360, 0x5, 0x2, 0x9]}) (async)
r8 = syz_open_dev$loop(&(0x7f00000006c0), 0x87, 0x101000)
ioctl$BLKIOOPT(r8, 0x1279, &(0x7f0000000700)) (async)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000200)={0x22260000, 0x4000}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x80, 0x10, 0x2}, 0x18) (async)
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast})

4m47.168422532s ago: executing program 3 (id=88):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$clear(0x7, r0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1fe, 0xa, 0x1, 0x0, 0xfd})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xc8f, {0x0, 0xea60}, {0x5, 0xd, 0x6, 0x8, 0x9, 0x4d}, 0x1000, 0x3, {0x0}, 0x6})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async)
keyctl$clear(0x7, r0) (async)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1fe, 0xa, 0x1, 0x0, 0xfd}) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xc8f, {0x0, 0xea60}, {0x5, 0xd, 0x6, 0x8, 0x9, 0x4d}, 0x1000, 0x3, {0x0}, 0x6}) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async)

4m32.036682108s ago: executing program 32 (id=88):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$clear(0x7, r0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1fe, 0xa, 0x1, 0x0, 0xfd})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xc8f, {0x0, 0xea60}, {0x5, 0xd, 0x6, 0x8, 0x9, 0x4d}, 0x1000, 0x3, {0x0}, 0x6})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async)
keyctl$clear(0x7, r0) (async)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1fe, 0xa, 0x1, 0x0, 0xfd}) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x1, 0x2, 0x4, 0x400, 0xc8f, {0x0, 0xea60}, {0x5, 0xd, 0x6, 0x8, 0x9, 0x4d}, 0x1000, 0x3, {0x0}, 0x6}) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) (async)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async)

2m26.416216154s ago: executing program 0 (id=755):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x0, 0x105, 0xf0bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200010d4}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000025c0)={0x0, 0xfffffffffffffde5, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x0, 0x8, "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"}]}, 0x20}}, 0x4000000)

2m26.263362716s ago: executing program 0 (id=757):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x2000c0) (async)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x2000c0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000540)={0x30008000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x7}, &(0x7f00000003c0)=""/172, 0xac, &(0x7f0000000480)=""/102, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) (async)
syz_clone3(&(0x7f0000000540)={0x30008000, &(0x7f00000000c0), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180), {0x7}, &(0x7f00000003c0)=""/172, 0xac, &(0x7f0000000480)=""/102, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r1}}, 0x58)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000600)={'\x00', 0x9, 0x8001, 0x6, 0x9, 0xb4a, r3})
ioctl$IOC_PR_PREEMPT(r1, 0x1262, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20000, 0x10c)
getdents(r4, &(0x7f0000000680)=""/4096, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x4000)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000001c0)={0x40, 0x15, 0x4, "2e101dce"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000001c0)={0x40, 0x15, 0x4, "2e101dce"}, 0x0, 0x0, 0x0, 0x0})

2m23.174623731s ago: executing program 0 (id=765):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000180)=""/140) (async)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

2m23.15726148s ago: executing program 0 (id=766):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000001c0)="8b25000200475400f6a13bb10070", 0xe, 0x4004050, &(0x7f0000000140)={0x11, 0x6558, r3, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01082cbd7000fedbdf250c00000020000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14c, r6, 0xc01, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa4e3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
userfaultfd(0x80801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000100)=ANY=[], 0x0)

2m22.442780631s ago: executing program 0 (id=773):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) (async, rerun: 32)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (rerun: 32)

2m21.977548878s ago: executing program 0 (id=777):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r2) (async)
write$vhost_msg(r2, &(0x7f00000006c0)={0x1, {&(0x7f0000000500)=""/192, 0xc0, &(0x7f00000005c0)=""/224, 0x1, 0x2}}, 0x48)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x5, 0xfffffffc, 0x32344d59, 0x2, 0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200))
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14)
r6 = socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
close(r6) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="1400040073797a6b616c6c6572300000000000000800050008000000a032a6ba600993a55b455bb50b965bf1fd76435fd9d3c253c8c1f9001b305ff07aaca22147122e44df3cb5a00d19ea3bf92534f205096501f92751bd6728407893e0b4ca4da474a147918cf9f5bea0b8aa9ebc25ba79f2cc4f62e356672cdcf685a348f292ae5249157d8e"], 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

2m21.676811494s ago: executing program 33 (id=777):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r2) (async)
write$vhost_msg(r2, &(0x7f00000006c0)={0x1, {&(0x7f0000000500)=""/192, 0xc0, &(0x7f00000005c0)=""/224, 0x1, 0x2}}, 0x48)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x5, 0xfffffffc, 0x32344d59, 0x2, 0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200))
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14)
r6 = socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
close(r6) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="1400040073797a6b616c6c6572300000000000000800050008000000a032a6ba600993a55b455bb50b965bf1fd76435fd9d3c253c8c1f9001b305ff07aaca22147122e44df3cb5a00d19ea3bf92534f205096501f92751bd6728407893e0b4ca4da474a147918cf9f5bea0b8aa9ebc25ba79f2cc4f62e356672cdcf685a348f292ae5249157d8e"], 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

12.134034993s ago: executing program 2 (id=1353):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0xff7e, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x9, 0xf7}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020004}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x188, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7c, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x5, 0x0, {0xdf, 0x3, 0x0, 0x81, 0x0, 0x1, 0x1}, 0x1, 0x10001, 0x80}}, @mesh_chsw={0x76, 0x6, {0x0, 0x10, 0x3a, 0x2}}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "1e471603e0956aaeea80a6fe85a0156a", "a3b67b6ce2b8ec2db55c6b50fbb3a5e35f59d8268f7da01860fdc915bef93049", "3e549d43b96cc900516c152816c13f403638f48b15b3cd9bccb54b535ff91b73"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c20100f45c11"}, @NL80211_ATTR_IE={0xd4, 0x2a, [@cf={0x4, 0x6, {0x6, 0x5, 0x400, 0x3}}, @peer_mgmt={0x75, 0x16, {0x0, 0x1, @void, @val=0x11, @val="b694ce52d5b4195ebc65cc8405f622a0"}}, @measure_req={0x26, 0xae, {0x8, 0x0, 0x6, "9803ca0056f290846ff0631d10335e78ec310efdd90618a1353ab468b4211675e7fa3f98844a0f7535e623da6d62c3f3d8ea75c322c0e3da1ea100269cf3f47558b1113bddea0aec4a86eb87f481d326660253e90fa863db76c93620508978201262577e95bda24813a177c70a0bf96cf9d91d978c511aa26c60e2b1a1f374a346f0f4b1ac4c3b0ccbdabcbc1cf8379c5b82115e4db09a4254a5afeeac8849f74ee5ccdfc6af97fb418f12"}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c240304020301030d0700800904010000010220000904010101010219000905010920"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r13=>0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r14, 0x0, 0x80)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '@:++]'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x40000)
r16 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r16, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c880}, 0x8914)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)

8.958190063s ago: executing program 2 (id=1365):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}], 0x1}, 0x2004c880)
write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x43, 0x10000000}}, 0x120)
writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffff00000000)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x10000)
fstatfs(r3, &(0x7f0000000300))
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x28, 0x1409, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4800)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0045543, 0x0)

8.692112651s ago: executing program 2 (id=1366):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab50200000000000a", @ANYRES32, @ANYRES8=r0], 0xfe33)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800)
setresuid(0xee01, 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c186a1296aeade754cb9873ebcbdbae"])
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x600, 0x60)
fanotify_mark(r3, 0x20, 0x40001008, r4, &(0x7f0000000080)='./file0\x00')
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r6 = userfaultfd(0x801)
setresuid(0xee01, 0x0, 0x0)
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
prlimit64(r7, 0x3, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000180)={0x8, r8})
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000c37000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000e24000/0x1000)=nil)
ioctl$UFFDIO_MOVE(r6, 0xc028aa05, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0xfffffffffffffffe)

5.404028787s ago: executing program 2 (id=1376):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect$midi(0x3, 0xfa, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff30144b474000010203010902e80001010490000904000007010300001924030207090406090f7f050109050b08d50206060f09020506240201030707240100800700192403014c0908b5d602090009d301070477040906c70404090b240301070206080840040905090800043406000b250107387d52d48ffd0a63708000ff030304000425010009050800000227f8061125010dcac87ab539ebf39a767cd29a740905020c20000801fa042501000905031008000005000d250109e9046c2c132519ca9b090509080002055a070d25010997c474427148a20ad70905800008000108070f25010b14d5d1ae6377179772f2af"], &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x4, 0x1, 0xe, 0x8, 0xf9}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xac, &(0x7f0000000240)=@string={0xac, 0x3, "2409957e695d909adb469f1238bb125e13c0e8e22100a3bd64415ab4bc44b81e28a22c53adf6c024278f639b2b6974d62a12ef18124ccf7e36b8ec0f7cd8030720751e32135ae64b4859ad22ccad2ae8491fba762830172060dcf52a6bb7f4efad64d4f37f41b453c6dafc46608589b43c808d8e881148f7dbc7dc9c3ecffc8b49ac1a3c25251d60f42d9ab4eca61206e1bb4b5e528574125f719d1ac79c33928fd3be7ecfada13b3898"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r5, 0x4)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe)
r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000003c0)={0x3, 0xffffffff, 0x101, 0x1, 0xe, 0x7})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000000), 0x4)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10)
close(0x3)

4.621293585s ago: executing program 1 (id=1378):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500})

4.384091816s ago: executing program 1 (id=1379):
r0 = userfaultfd(0x80001)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000b85000/0x2000)=nil, &(0x7f0000c8b000/0x1000)=nil, 0x2000})

4.246737507s ago: executing program 1 (id=1380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c0000080001006adf"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x2, {0x2, 0x21}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x5, 0x9d, "ccb440ad6227afce0bd015f912aa731ebe87ea8e696e484845bf1d0407f8ba4aca6852285d3c55d5853ea2d0fb349d9d9fdd0c40f323a969d08223fa6120b2240d0b2877ada33f583376cd089339916b7a70be43b92ada3c17405f035ac2517923f87ac193ab30085ebed2610e9fdb2b1ee458c5a9109ea1362edf3e0945ecfab76a8a4ff942a20dbd702a5298d4779703486c8de65b7ac5b3d965a776"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xaf}, &(0x7f0000000380)=ANY=[@ANYBLOB="20810100000007"], &(0x7f00000003c0)={0x20, 0x82, 0x1, 'h'}, &(0x7f0000000400)=ANY=[@ANYBLOB="2083010000005d"], &(0x7f0000000440)={0x20, 0x84, 0x2, "6b1c"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "fbef40"}})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
r3 = socket$phonet(0x23, 0x2, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2e4, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x29b, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @from_mac, {0x7, 0xff8}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @void, @void, @val={0x3, 0x1, 0x38}, @void, @val={0x72, 0x6}, [{0xdd, 0x77, "f8485dea3a8cb1bc45532854fddbe6dad90c68d96f33e5866fb9358c2e9dabcfa61b89912f73c923f55e07ad2512706264d05750e8c8d4f407b5a1eb0bd6b5dca403c97ae2c40ea4b751be76f1f2f3e3fb07f8984544ed481833a3173388be1e2f1ff2faabd9c146cd0d91c2fcf1f8d382457d38136ee3"}, {0xdd, 0x71, "d8e539667bcb360d9ecd9c4b5a4cf51866ef07a8c6fe6d7a3d12946397a1e5a3155b6c7ba92674abc0431eaeb4d0c8354e0a627d7d64a110e7a0cdf0e36463a751bdb2618f70693c37c77c9225bf5e126901d01054372d1675e489cd91722df78d2f9831c75e9f3e06efc189469efe120e"}, {0xdd, 0xab, "5242d2cf2db69bc8f8765f586e527c565cb28965273c0a6b426714b8abde61ebf4983edbdf5efcdf6c88baf31d92b69c742aab981adba36eaf0cc0d8fdcea6bd847cb3dd86401a23a7bfc3097c323cd99eb6b73c0ca15e2300368077a714eff85b7064a017672482cf4936c8c3c0882d5ba7021ff32bf4f624ed1b886d9525389128c8a33b43dbb00307fc1aed82a71ca82212d7a3152aef0cabff004db47a9595b4684c385922d8a3d4e5"}, {0xdd, 0xd5, "9de52f1b293e803fea0c57a7a8e1940a6a06c2f389e01d3fba18161d76a5c392c9bf92d08c8b8a50252a9344ccd72e0ac6a995ee3d4ee32a7a4487eac09f532fad76ed7319e347e1f72ea648a85fbf7250879919ed88cf65928116c7bdcaa96bf2778dbbd1c0810a3f4ffbe6b08a08dfd12d20b9b51913ae92ecdb56cc9e6e7fcdbe8575737a317449d5f7310bc0faf21e1ef11d0f6fe3612d4a6956c792c2afb9ed75c5c692eba424967a7a6b39debf2a1e83ba91cd1c79696c9853d41f2d8bafb38b53b8c28a51f3d63e159d5f1cc09b6f0735b4"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x44084}, 0x20008000)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x2e9aa845)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040)=0x80, 0x4)
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000))
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000040)={0x40, 0xf, 0x60, "00bb873f878c03da1c5f4c2f7016ddafa9a74f60dd61f22e371b38344344e4d728c0893c935caf15e3a92fd98e4b850600874df0bb0d2e92b125cf363ab577036031a402294a1178f3408858b1b6b2f70458b35cba2fbc76e7bf4e0000000000"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x9, 0x5f, {0x5f, 0x9, "84e7d6908f385a4a4b65a4ebe56dae39766df3554e99055ea3d2626f71b3ae71d401aed1e8f557a785005465aec6e21a58905b5b5b63f784fd0cecdf29a49589380c59315a8d4e10103bb32f3fcc20521b13a758b21a135aaf31b91791"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x40, 0x8, 0xc6, "04761a3b66da92959aa83338a6991431092a915c3bf64a95212a7642f4f7036c53f6444d68fa1b8de4d78eab14fa0785c2dca71264d0e0484c262afd7a599f660d3fab0759d4aae3970011a5e0d6feaec96a629f9943d0be0d72c9ff7c273a684498198fe7d1e3376bb689f333f6a0131e2a8fb38b4655d73b4a0d3b38628b6ff27303ec84ba88fb139da99f0b3b92117102113b69b31f23eb325cb1dfffd36f3af20e040969a9731b50e0052a46b54de0f0e420b6293f555d97f1db9dc8fe8a8adc955c2e39"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x34}})

4.139555419s ago: executing program 5 (id=1381):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f00000003c0)={0x0, 0x2, 0xefff, 0xfa66})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000001e80)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000040)="deb9008838a85abe1b6dba1e45f1ad83143dfa8e8ac4078c74821477779f02f304fa4db6842dac8b9c85898db50eb60c940f7b0af9110d7ded76d76fc93664d43f8456cfa8d613ecf19546aef17abb93566d111db2007c0bb5cef5bef09e315c0f2806ca3aeda4a472171b9f4f1284d55e394dd146266e34077f63f0928fb9453668514d51220554f6d89e89c464fcd87de2e214fc96f9a90f6af6642d3dd96eec15fbc3c06a99730f9cf9140f9daa4f", 0xb0}, {&(0x7f0000000240)="bfcd2f17bcdaa72f0b42e2bccb44009064d3709915b4fbbb6d8cf13a36e62301d53c4f982dd561d379083846813350bb5455bbd9626045dc6e10b167abce398968ca559e3c955c8941061708cf0a2d7cc9fb724f053e2fd2d26c14cbd1e6dc7d47f538b84a0e5656452896", 0x6b}, {&(0x7f00000002c0)="30713dcb2688e73e2ad68650bd2912a94080a502920dca0b9f5c27254049d4e86ebf9d1c1c143ad7957d9220683a4e731f79b87fef05de25c7efedae0f50d79ca3f4f935f8549fff2efebc5175013997613d588e47c7cd4778a540a1f08984b76a1c400723e98f6cb03f8bc07833f7848dda8ca4eaf4cbb0d790da40ba9d6660652575a07a7bf297cef730b08945b3ab15b7c162c69039ba1c9215efedb81cb16f8d6bedccbc02859d2b101fb52b5ff1486985a4e2f1c631bcd46631a93d24df74fb250031932003b91061fe17cacaf631dbfc25d399a3d7483591711610d73aa914", 0xe2}, {&(0x7f00000004c0)="13dff85b0f2c1e19f6550150b9916ee040c0b4f7d74cd349846c698bd54c9552233ffd2a43c168e27dda3de7e7321695bb766ee557c9fbf34d970e87cd7994537ed42200e4bb5e60e39ff0b4cd233c0bc1a2f1fc59446f6018180874a7b160daad214cdfe635de5c92651497317ebe3d85c82214a6765b54680633e518c2853ad26452d0065a4e57fc1d943275165214a0d605431f09c2254c737cdb5c8362b8d7e560f6858254fc4df3d47282d7761d8531c08c8de7", 0xb6}, {&(0x7f0000001c80)="55dbb2e0f2af066a0250d6bbe12874c31756fe41d3925b00c482e88ebe9fd8fb61c84295bba8a937e79ecf4699cb2e81ba06c289f7bcf9daa28bf91d3d9fd785b7dff1f49b67be46a940d15c442f1b66f3fba569e23c5f73ed872867520edbe43b5591b58d0108f6f5bb6f65633d0d806a906a60119c2d7ff9a0d1a34cfaae63b12bf93b3dedf0f71bbc4a54687a629e1bd197f098ce328f1430ab41ebd36730eecc6d7ec9968c1000d1c4cec6593a32fef486bc9cea1925bc77a3250ecb4d1b749586d4fca44724c3f3f89af63385661246b48b1a559305de03aff82b9a982ce48c54d091", 0xe5}, {&(0x7f0000000680)="786b82d63f71fc74c092f593dc726896fdad50e33491a5d3ea96c86cb8cfcabc855fbf49de5dd01b7db7190a6f3977d4b27bf6175dd2b1f97a81733f48f77beb6d74c1744f36d2d07fefa3ce3aa5", 0x4e}, {&(0x7f0000000700)="be2fa986536895e21f2b37297137eb7271822acec6e48b31cc96b35762f7f801c5d2e74c32e8381763881156aef961f88bb2388608393bd683bf175970f2cf27b190d6960c7a315fde8b9060432f4d83b2b132a163c5795ae206f660108794cf64f1dcc57e8a39d8c5e5a4384ee111887040d86004cabc313e86feecaad64cc5f7a810a10fdda79c89cad251ef0d5822e6bb648ef14928595c7db8eb925fbd92a94bc195ea801c749a142d1f6dd36728dee76a568c7e371d995a770d9df5094074c5c745a089157d3439a7f4b7208ae3dd9385c290240ae781c8472af55593de990535a432c6d6", 0xe7}, {&(0x7f0000000900)="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", 0x1000}], 0x8, &(0x7f0000001980)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}], 0x30, 0x10}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000019c0)="261dec78c88c3a869f599b1077d3438ea5daa97fb3fe6f4e34ce467432d9df9f46d3ba1b2ea91a64d8a2a108bd17b5977412762718cd94482a8e095e8152656f0c0f4b7044e765af6a924927e5fe456ccea1acdd99bfc976ffc7e20742c43fdfc15f8459d7171f6adc3961771d26d8a3ab9f81df1fda05f5aa1d744fa49f01bcb34ae5e7ac", 0x85}, {&(0x7f0000001b40)="fb68083a03415203bd002d94ecca67521b29297ad0669989a2a902b72cb2d197390efd88bc89a0a0af189d8898e0cb18a75da83e151a03514e7ffb1c4fb16291935d975e6f326c630920963ca5c8e9592b8124e9e3583046fc2183feb5d8a2b372036b66acb9bc4c737336f59d6c213ba18dc2a3f77cad0191f2a51c670f46d389ccdc", 0x83}], 0x2, 0x0, 0x0, 0x20000840}, {0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001c40)=ANY=[@ANYRES32=r0], 0x1a8, 0xadb1071fe992fff2}], 0x3, 0x40)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 32)
r3 = accept$alg(r0, 0x0, 0x0) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000006c0), 0x87, 0x101000)
ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000700)) (async)
landlock_restrict_self(r5, 0x0) (async, rerun: 64)
r7 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) (rerun: 64)
fcntl$notify(r7, 0x402, 0x8000003d) (async)
landlock_restrict_self(r5, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r8, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4) (async)
landlock_restrict_self(r5, 0x0) (async)
landlock_restrict_self(r4, 0x0)
clock_gettime(0x0, &(0x7f0000000440)={<r9=>0x0, <r10=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x77359400}, {r9, r10+60000000}}, &(0x7f0000000840))
landlock_restrict_self(r4, 0x0) (async)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0) (async)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmmsg$alg(r3, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140)

3.948675029s ago: executing program 5 (id=1382):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xd9, 0xb2, 0xe8, 0x8, 0x61d, 0xc160, 0x8216, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x11, 0x7f, 0x0, 0xf0, 0x7e, 0xd4, 0xc}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
fchown(r0, 0x0, 0xee01) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xd9, 0xb2, 0xe8, 0x8, 0x61d, 0xc160, 0x8216, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x11, 0x7f, 0x0, 0xf0, 0x7e, 0xd4, 0xc}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) (async)

3.52475545s ago: executing program 4 (id=1383):
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x0})
ioctl$I2C_PEC(r0, 0x708, 0x1) (async)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x8, &(0x7f00000000c0)={0x4, "d1d92e1a7f1c7a2768b8b58282bf6e0ce4a0d16cd837fa5955ead8812e5b54ea20"}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES16=r0, @ANYBLOB="e9fdf101318ec1fcd6092a9aea4dccb29379f916be6fe4a7fa8e2f7245ecdea6e48f074d3b11ee2c5732f35cedc50e22670b08bfb94fc90858bdd8691b5ef9b82e54102142c248e6b6d7c86c60ce94c496795ee866aaaf38fe25d6f913c100d0e1b78977339773da2ef00c36f2ac7c5028893bea988e98d3f7cf3362e0125b914ad1bd0f91785df757ae58d0d229ad526a5e28221d51d0d889f97a128cf4bd1d5e62d5e0835e79eca5d18aa69e70769ba8a5dbfd8441d6c32936bde52d3e7939bfb7", @ANYRESOCT=r2, @ANYRESOCT=r1], 0x9) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r3, &(0x7f0000011440)=""/4103, 0x1007) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {}, 0xa1, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)="69ec9925ed4164b7144faa27aedb184ee11fbd844bfeffa11b0eb8583c85a26d89de57780a02a7fd0200b5ef7857d6dd4056619b1c2b7165a7bc5eef75cb1741703adb797e2e6a5d261f4fd90ecf9dde318aa17c38e07396c20c2964a491834237433731119e1decbf84bccd6ccafccd47957aac4a45756cab22f1bec12b2f8fea29070af7acad6b82c6b725de0ade265c7a0b657160712bb844ba9c622a06a3264a5c9f5aa328f81d24efc6a3ec05b90bfe3b793d966efde1131b8795c8cdc126d538f543daa49f461e7004d6c8d0fd0982a1d5c7027b4f71fb8ea717cbf2818e41acd6500640b8e5813a337f2913d29ffb59b8d4d10db6b2d52f4fc64d2c33ca31fd63eff9ec4cf78533c51146a25364d9d1411f7c70d6fc002d500c3de2668af20eeadc7ef25b8fe11ddabf488d6126d9a760d1c8db101960f96e1dcc67f820039e4852f4f4ddc575512386ef2a00a81aea1377a4046470e81f20bac6581412c8fd7bab29edaa896f88798d2ecd6edac5db0a28e1d27fccd1df4d173d870b5ebff37204f99e453ed5d043291f5452ad3bf9df93f027bff87783d58440dfbea9bbf3f80a43ea18c928ba56450705042867201fc890600d255c9d29855ada05a20027dc871ec90b2fde8059ee9e4a4972af3ca598c4d30b91efac7bb8dd3c21100239c493153ddefa34371f9ab558fa318bc146eb00", 0x1f6, 0x0, &(0x7f0000000500)={0x2, 0xfa, {0x1, 0xc, 0xc, "ad4393ee1a22c17089549075", 0xe1, "13f097b9056ac48a534ec77a1ba74c6f530c15ef41e9b96d2f5725a684560a334c19251ded6c46c87a4cef39da0925f1cdbd7213741c5f0ea23d6708cfefa63d49a94e650935871b8e0a03012c44d8f31dcbc39594ec4140d855db5c18b31b0fcefbd3153a33d04d497aaacb09b941c8c5fe2f9b564c323ee60ccfded47f82c058a5ee1bc862c05b109e755e45019cc4450f4161c48d88b5780dfd4e4edf485092a4211f11484b382cd97ed9ad24f28d5fe7c9493c475f9832bee57d2091e22a09f38228219b1dad7221fd8a742e219d41841e2d357379b93352453055d148148a"}, 0x96, "04999c1c67ab250541f622b5d19949a1597e458e2a1bea13f8237b736288f811674f912a946058df8736a491a877dcbd59e0dba3bacd2ef267c1391851451cdd12f9c48a8f3532d3751880e5b24a180ca6ac2e181d18818da81e5c445871f7d144b3707517e3744b1dbba51ff50496d6822f3b33ea0a88f74ff9b1789e04636e16fa6ebd836054c5b15819e16b1b0bde399f2d41ba29"}, 0x19c})

3.313524764s ago: executing program 4 (id=1384):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000b80)=[@in6={0xa, 0x4e20, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe1}], 0x1c) (async, rerun: 32)
sendto$inet6(r1, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) (async, rerun: 32)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000001) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1fa)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) (async)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000bc0)={0x1, "872db45f52ba5a4eef343b582644352ae147ea385746514efbcd40aab4c9d39c607608afaa6f6daafee447c327ea7e49d75df17543ea54a44c4abb45a2823b51", {0x3ff}}) (async, rerun: 64)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async, rerun: 64)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x40], [0x7f]], '\x00', [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], '\x00', 0x1000})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000002c0)={<r8=>0x0, 0x8000000000000001, 0x1, [0x401, 0x3, 0xf208, 0x4, 0x9], [0x7, 0x48a, 0x247, 0x0, 0x664, 0x6b, 0x5726, 0x52, 0xa0, 0x4, 0x5, 0x7fffffff, 0x101, 0x2, 0x80000001, 0xb42, 0x3, 0xb, 0x8001, 0xf, 0x5, 0x8, 0x0, 0x9, 0x4, 0x9, 0x9b, 0x0, 0x9, 0x7, 0x53, 0xfffffffffffffffc, 0xe, 0x4ac2, 0xd, 0xffffffffffffff52, 0x5, 0x8, 0x9, 0x0, 0x100, 0xa774, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x4598, 0x6, 0x9, 0x5, 0x8d6, 0x0, 0x2, 0x1ff, 0x4, 0x5, 0x3, 0x0, 0x200, 0xc64, 0x7f, 0x10000, 0x0, 0x8c, 0x100000000, 0x5, 0xd6f, 0x7, 0x6, 0x8, 0x2, 0x6, 0x7fff, 0xc, 0x2, 0x0, 0x1, 0xe980, 0xd950, 0xd3cf, 0x32d7, 0x8, 0x9, 0x4, 0x5, 0x2, 0x9cab, 0x2, 0x4, 0x0, 0x9, 0x9, 0x17, 0x80000001, 0x57, 0x800000000, 0x9, 0xc, 0x8815, 0xdf54, 0x3, 0x4, 0x7fff, 0x4, 0x8, 0xeb1, 0x1, 0x7, 0x602f, 0x0, 0x2, 0x7, 0xfffffffffffffffb, 0x9, 0x8000000000000001, 0x200, 0xffffffff, 0x2, 0x40, 0x6, 0x80]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000700)={r8, 0x400, 0x1, [0xf, 0x0, 0x5, 0x753, 0x1], [0x8, 0xea, 0x9, 0x7, 0x0, 0x3, 0x2, 0x7, 0x2, 0x80, 0xffff, 0x5, 0x8, 0x2, 0x5, 0x3, 0x80, 0x80000001, 0x881, 0x4, 0x1, 0xfffffffffffffff9, 0x5, 0x7ff, 0x2, 0xc8, 0x5f, 0x4, 0x8, 0x10, 0xfffffffffffffff8, 0x3ff, 0x1, 0x0, 0xe0, 0x732, 0x7, 0xffffffffffffffff, 0x5, 0x400, 0x8000, 0x3, 0x400, 0x8, 0x7, 0x1a06df98, 0x7, 0xc07, 0x1, 0x80000001, 0x7, 0x5, 0xfffffffffffffff7, 0xe05, 0x79, 0x800, 0x1, 0x80, 0x10000, 0x3ff, 0x6, 0x8000000000000000, 0x4, 0x7, 0x10001, 0x5, 0x6, 0x7, 0x7fffffffffffffff, 0x2, 0x9, 0x8db7, 0xffffffffffffffff, 0x1, 0xfec, 0x8, 0x0, 0x0, 0xffffffffffff8001, 0xc, 0xfffffffeffffffff, 0x8001, 0x6, 0x4, 0x5a3fe66c, 0x0, 0x3, 0xa3, 0x7, 0x6, 0x6, 0x80000000, 0x2, 0x0, 0xfffffffffffffc01, 0x8, 0x2b, 0xdc, 0x3, 0xfffffffffffffffa, 0x8, 0x6, 0x4, 0x8, 0x7, 0xc, 0x3ff, 0x5, 0xfffffffffffffffe, 0xb340, 0x5, 0x8, 0x4, 0x3, 0x101, 0x200, 0xffffffff, 0xdfc, 0x8, 0x1400, 0x100000000]})

3.079965567s ago: executing program 4 (id=1385):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, <r1=>0x0, 0x9, 0x2f3b0b, 0x214e3d})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x6, 0x0, 0x0, r1})
r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000140)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000180)={0x18, r3})
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=<r6=>0x0)
r7 = fcntl$getown(r0, 0x9)
r8 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000240)={0x1, 0x5, [{r2, 0x0, 0x1000, 0x1000000008000}, {r5, 0x0, 0x100000000, 0x4000}, {r5, 0x0, 0xfffff000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffff000, 0x8000}]})
kcmp(r6, r7, 0x3, r8, r5)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x44000)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r3, r3, 0xe, 0x1bf5, 0x88})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r3, 0x0, &(0x7f0000000340)="36679627607192e90e008a69cd92a9e297b14707d6d50aa71caa8e7091f414ef8ca05bc617cbcb329e08cdca670fa6ff954cdd03f910fbee5db956596946585a07b7ad2682379cc66ae86f792068e022ed0fbb10ae5ed21acd69b1df4d7d35688051bb00a531bd200836f848bc2f4ffa8507a3d780d2ff6cba18057f04c219f52d67701d4a86b453b39dfba4233a5db2d5cf9639b3281a5bd5c85f1f1e4a318b27282966f784dd22402180c9a5e1ec391ad68038af0119942741e224bf7e1e44fb323d8af7277d9d26cbc67b37429294354c37637e3bda6b9534c84d03d721081f877fd211180faacc967af0", 0xec, 0xccb2})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r3, 0x0, r1})
r10 = syz_clone(0x80, &(0x7f00000006c0)="e431904cccedd8cb63a239d2961ee3d57f5b32470e12a6f90965bdd28ab3acb32224582f19794196915a0ad42610d7d3807ac322032ea0d68ab78262d95246a2e7eefdf184bbfa824e7a24dbaa453cabe5d18c811a3083d0b0347fd3ab25fc61a3c8948cf6c26fc5bfdd5765ade5e0de886d8c5daff6afaea3d071a82be0c0a4682cf6583673f43596e127fd183e4ef624b07c2e74a448936b1faa7bf17ca05b305d56c2e508a8218a4b6861ba56354525846610aaaa4ebe8a0be7510982cd765fb9d9eb3f6ea2d842cf7be98b4553c0f0446e10d4853205d9b37d91793473599d2007e90e46a72ee32def04", 0xec, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="42e35f956f63c061f76f5728ea9e225d8692c1f6b4991f8bc6e3edf63546699f852cac36d8b393fd341a036965bb7ac4712bc16b1f73979aa6dfa9de716b395654d6bebb1babf2fcca8e8f704cf821aed03570147daa7cd9fb6d92ba1aa0de10621308883c2bdd19b70694c19eb0d570c40d745f4df5457c89a186abea27d8429e924941edf8dd00b26f097c389c0be25d8ed8446213fef034892d0c99c900700e5948f06b5a")
statx(r5, &(0x7f0000000900)='./file0\x00', 0x2800, 0x2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
stat(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000c00)=0xe8)
fstat(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = fcntl$getown(r4, 0x9)
getgroups(0x2, &(0x7f0000000cc0)=[0x0, <r16=>0xffffffffffffffff])
r17 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000d40)={0x2020, 0x0, 0x0, <r18=>0x0}, 0x2020)
r19 = getegid()
sendmsg$unix(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="afd50cae67cba1290a98f752c3e3514df8dff1ed4c88c05e9c9302e659d6cdccbb30621d7c360fcc65a04d2deb94fb0c1172248cfac67ed0c9", 0x39}, {&(0x7f0000000540)="c362581db5fbb5a805967895e79d2464510af0ff44bd5b45a53578adf9bbf487a0403dda7f69c95758452d98a4883e63a07b96ccfe5872a87541fc621261b15061e2a1796f254c52e2933917b53e788c07456e2156c07b28c0d6527543a080a6b5299b2d9a2759e154", 0x69}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="59ff072f700ab29189fa4287b4d70a3a4696bd9b8970c7c962448567fd36a39ad71df96121016a3579130404049c6bc9be14a4b48baea10768394f1dd6b42cc04f5edd0f92f0f263c8b699247df2d892f29ed08d7b1a123e5907c46957bae536249f0f5cae1cf3a6979816c81a7f770893921d", 0x73}], 0x4, &(0x7f0000002d80)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r7, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee01, r16}}}, @rights={{0x34, 0x1, 0x1, [r17, r5, r9, r5, r8, r2, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xe8, 0x20000080}, 0x811)
write$tun(r17, &(0x7f0000002ec0)={@void, @val={0x2, 0x4, 0x6, 0x7, 0x101, 0x4}, @llc={@llc={0x4e, 0xf0, "98", "bf4d09d0cbe6db09d8c623a08d054a39d5a5e8da1620d9f6729ad5dd284f"}}}, 0x2b)
getresgid(&(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80))
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002fc0)=0xffffffffffffffff, 0x4)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000003000)="7e771f8fc8a9817ce862b093636d345b1b1cb17d470cd7c02ba97d1d4d68054dd0e7830f890ef940e407af871a3ff6afcb207178af")

3.015206643s ago: executing program 4 (id=1386):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00') (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) (async, rerun: 32)
socket(0x1, 0x1, 0x1) (rerun: 32)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf7, 0x0, 0xffff}]}, 0x35) (async, rerun: 64)
sendto$inet(r1, 0x0, 0x0, 0x2000c779, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 64)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b83", 0xdf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026", 0xde}], 0x1}}], 0x2, 0x2090) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000b, 0x28011, r1, 0x0) (async, rerun: 64)
r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64)
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) (async)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0xb80, 0x3, 0x7ff, 0x102, 0x1, 0x100ffe})

2.857062167s ago: executing program 4 (id=1387):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) (async, rerun: 64)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) (rerun: 64)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x2, {0x0, 0x1}, {0x61, 0x2}, @cond=[{0x5, 0xffff, 0x6, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x4, 0x1ab1, 0xe00}]}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f) (async)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x80000024)
r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x148)
fcntl$notify(r3, 0x402, 0x36) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x502, 0x90) (async)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async, rerun: 32)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@inode32}]})

2.627921445s ago: executing program 4 (id=1388):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x59, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x4}, 0x2)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$kcm(0x29, 0x5, 0x0)
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r4, r5, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x5402, &(0x7f00000010c0)={0x8, 0xffffffff, 0x0, 0xb, 0x5, "c187b3c1e5c979b0d064d45eb27803ea28bc0c"})
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010102404d5be9e1d88d4f0124275656cfeed06e408876dd738610c79051000010000000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x24, 0x0, 0x0, [{0x0, &(0x7f00000005c0)=@lang_id={0x0, 0x3, 0xf4ff}}]})
syz_usb_connect$uac2(0x2, 0xdd, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x3, 0x10, 0x1, {0x8, 0xb, 0x0, 0x0, 0x1, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff, 0x1, 0x20, 0x42}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x2324ae9efdd11208, 0x1, 0x1, 0x6, 0x7, 0xff}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x6, [0x9, 0x4, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x3, 0x2, 0x6, "f696f73c6e7ca2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x9, 0x8c, {0x8, 0x25, 0x1, 0x2, 0x30, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x66, 0x9, 0x0, 0x2, 0x0, 0xbc5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0xf2, 0x8}, @as_header={0x10, 0x24, 0x1, 0xfb, 0x6, 0x3, 0x4, 0x81, 0x7, 0xf9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0xbdf, 0x80, "a5ca1cfb2d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x2, 0x3, {0x8, 0x25, 0x1, 0x1, 0x30, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x35dd19c5e71b554a, 0xd9, 0x5, 0x5, 0xaf, 0xf}, 0xaf, &(0x7f0000000140)={0x5, 0xf, 0xaf, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x1, 0xa}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x70, 0x1, 0x76, 0x7f}, @generic={0x18, 0x10, 0xb, "dd74021b83e450a1f794883ae1033023c77e47bc11"}, @generic={0x73, 0x10, 0x2, "759be07af96f08974555142fd967a9dd59b9c2f711cceb2eb421ce887feef9a21c679e987c6a6a4dc539b022b983c2a83ecc16dbf231081dc65d947c33eb4d236c9322357209530fa768fb27678dc3610aea07497471a7d29a48215e23291813264ffd2411154651e82fe11d0d79d6f1"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xc1, 0x6, 0x8}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x93, &(0x7f0000000240)=@string={0x93, 0x3, "7ef60d7ebfe04fd4f1f3f1d0e6a50a3753a5ed48514d45502cb0120f78f7d70d5448add3f80af6660bed04a7766a2dfb53780d7fd584e6d7baf5ba57c17fb70ad20819cebffeaf845ce38b21b4331a0fa8aaf7291acfcef7d80524dd9b14b72d2daff88d9ee8c393ae0c40d7fddb7ac3af6c5482faa42920157fd93df45e292184604219bd134d2383a002859d99a53003"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x455}}, {0x33, &(0x7f0000000340)=@string={0x33, 0x3, "d73efb058fa7fde682532195644e55808ab391e11810fa2edbaa4460d2b7cb8a54bfb6417c2572478585c3df65e05fb4c0"}}, {0xbe, &(0x7f0000000380)=@string={0xbe, 0x3, "def3420fb417f06f997d79739504feb213a447918f8cac863805422e7db2f8042c4361c97f12d5d97f0da4849d1dae82f503ac9077edbe576d1102a44f076965b094959c1032a8e6146c23ec205b3605cd14fa0adc490be075834119237efab6d604695e286d62d117ee68b695b6ec06d9f813ba2e719765029a784cdbfd463f1ede8e9629e1683edee03b6578f4a8fdf77e391ed326dcbd4cc154b54cb288eede51f8d847d505c842cb0f6237b762b19f0a223f3fc3178704978ef0"}}, {0x28, &(0x7f0000000440)=@string={0x28, 0x3, "fded07952459f916f459d7ff85eb6e907ba61deed4ebac536344cfd3834070aa2e094ad16852"}}, {0x7a, &(0x7f0000000480)=@string={0x7a, 0x3, "0e3e922085950f55a4b3696afc219f83991eea5a7e2b0a7c978fcb94948083489924d24a424691da8b1f813e34d32e9b2d19c7a6f0dfba2284c094c94c9699bf6169ff1b70c065973b8865e581e808ccec2be10f8ce00af604e99591f1b63260c778207d8cff91baad2678f9cf434e40fa9a31274bbaa364"}}]})

1.35723152s ago: executing program 2 (id=1389):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="75c1ccd07a5210306c94e254649640be1983f79c5bfe88cd6a730000606759578db363f48925080034d4ee1384db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5829", 0x47}], 0x1}, 0x8000) (async)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/254, 0xfe}], 0x1}, 0x0) (async)
r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="00020000000052d50c0cb18be54ddb60d57283d9624ed85700"/34], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r3, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000f40)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.135720216s ago: executing program 1 (id=1390):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x4, 0x20, 0x7, 0x63b6}, &(0x7f00000001c0)=0x18)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0xfffffd0d, <r3=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000100)=""/100)

1.032653911s ago: executing program 1 (id=1391):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x1, 0x80000000})
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000080)=[@nested_load_code={0x12e, 0x6a, {0x0, "66b89b000f00d066baf80cb8a083bd8eef66bafc0c66edc4e3a96a3d21000000f3b9800000c00f3235000800000f302666410f1c09c402a938e466ba2100b80c000000ef0f01c342d8c1f30fc7b100000000"}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x3e, 0x5, 0x9, 0x3}}, @wrmsr={0x65, 0x20, {0x915, 0xe}}, @out_dx={0x6a, 0x28, {0xe3db, 0x2, 0x400}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c01, 0x8, 0x7ac2aba0}}, @set_irq_handler={0xc8, 0x20, {0x84, 0x1}}, @wrmsr={0x65, 0x20, {0x8f9, 0x100000000}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0xc1e1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0xc9af}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x232})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="60baf80c66b8e32e238566efbafc0cecba400066ed0f01c4baf80c66b84045ba8b66efbafc0c66ed66b9800000c00f326635001000000f30baf80c66b8bcbd108666efbafc0ced3e26d1d8f3811f6f80f30f2de3", 0x54}], 0x1, 0xc, &(0x7f00000003c0), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000440)}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/118, 0x76}], 0x3)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x200}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
readv(r5, &(0x7f0000001d80)=[{&(0x7f0000000900)=""/137, 0x89}, {&(0x7f00000009c0)=""/216, 0xd8}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/135, 0x87}, {&(0x7f0000001b80)=""/42, 0x2a}, {&(0x7f0000001bc0)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/166, 0xa6}], 0x7)
fcntl$addseals(r2, 0x409, 0x8)
r6 = socket$inet(0x2, 0xa, 0x6)
setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000001e00)="c3bcc7fe4a2a7cd71bb792a30940adf3fb70f41e23dc89dd581d919ecb6e550d7413c6a553ced6be357aa05bc5bda81767d6fd81b741ce8ea35734252535bbe34d8de5b6a44fb15f0bf1c42f700edce767dbe9ad3417cc8190a16bb89b419b10eebeb1d08a6d5cfca89c1ec31dfbc8cc5ea5f61edf17e143e6cc04ae599aa798e493343a00f3edaf0c7878c5cfe355ad780710aa28a4624d4d2e3154587781a7e2c7c3a649537f82663549473aa201623ef5", 0xb2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x74bf}]}, 0x20}}, 0x24004881)
ioctl$KVM_TDX_INIT_VCPU(r1, 0xc008aeba, &(0x7f0000001fc0)={0x2, 0x0, 0xff})
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002000), 0x200200, 0x0)
ioctl$KIOCSOUND(r8, 0x4b2f, 0x46)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000002040)={0x74, 0x0, 0x68})
readv(r2, &(0x7f00000040c0)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2)
r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000004140))
mount_setattr(0xffffffffffffffff, &(0x7f0000004100)='./file0\x00', 0x800, &(0x7f0000004180)={0xb, 0x8, 0x0, {r9}}, 0x20)
ioctl$OCFS2_IOC_UNRESVSP(r4, 0x40305829, &(0x7f00000041c0)={0x0, 0x0, 0x459, 0x20a4, 0xa4, 0x2})
ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000004200)=0x80)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r7, 0x40106e8c, &(0x7f0000004240)=[0x40, 0x7fbd])
fchmodat(r8, &(0x7f0000004280)='./file0\x00', 0x2c)

882.809706ms ago: executing program 5 (id=1392):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x8}, &(0x7f0000000040)=0x18)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0))
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003d00)={0x0, 0x6})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x1}}})
syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383)

598.585608ms ago: executing program 5 (id=1393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async)
umount2(0x0, 0x8c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x2000040, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff}) (async, rerun: 64)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async, rerun: 64)
write$P9_RVERSION(r2, &(0x7f0000000500)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) (async, rerun: 64)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0}) (async, rerun: 64)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 64)
io_setup(0x3fc, &(0x7f0000000500)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0xffffffff, 0xffffffff, [0xb, 0x14f, 0xa, 0xa, 0x2, 0xffffffff, 0xd, 0x1, 0xb]}}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r4, {0x4}}, './bus\x00'})
name_to_handle_at(r8, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2000000061000000ad0000000000001a0400000000000000090000000500000000c0ffffff1f0000"], &(0x7f0000000300), 0x1400) (async, rerun: 32)
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000000)={0xc, r5}) (rerun: 32)
ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r5, 0x0, &(0x7f0000001300)="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", 0x1000, 0x800000008000})
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (rerun: 32)

436.802974ms ago: executing program 5 (id=1394):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x180, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

412.681608ms ago: executing program 5 (id=1395):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'ghash-clmulni\x00'}}, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x27, 0xd, 0xffffffffffffffff)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x100, 0x0, 0x8000], [0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x7, 0x4]], '\x00', [{0x36}, {0x3, 0xfffffffb}, {0x0, 0x5}, {0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0xffffffff}, {0x0, 0x12}, {0xfffffffd}], '\x00', 0x1000})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="93", 0x1}], 0x1}}], 0x1, 0x20008084)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000000)="83f4476c9ddc51aad5c540132f91a1c093868eef15d061ed")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000100)={0x0, 0x0, [0xff, 0x7, 0x0, 0x3, 0x4, 0x0, 0x0, 0x8]})
syz_usb_connect(0x2, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x42, 0xd, 0xb0, 0x20, 0x55aa, 0xa103, 0x8630, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xff, 0xc0, 0x7, "", [{{0x9, 0x4, 0x1, 0x7, 0x0, 0x51, 0x75, 0x5b, 0x2}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x201, 0x5, 0x7, 0x0, 0x8, 0x2}, 0x5, &(0x7f0000001040)={0x5, 0xf, 0x5}})

185.077588ms ago: executing program 1 (id=1396):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x10, 0x62, {0x62, 0xd, "e6b167a197f5ae9c5e271a260094e31774983e2f2031b00938c9456fde1a02e8e871bf197c8fb2f027a748207edbe49cbecc65e71dccbcb5dbe908f779c9e1dcf1fcab59020aec3c4b397da602c16694883989960d9602c6fd7b8bd9356f5473"}}, &(0x7f00000000c0)={0x0, 0x3, 0x40, @string={0x40, 0x3, "efea1c2585ba330b7498d3d25c821b56aa1022b8ab47e6110278f6f8c6673de373127c1d552389db5ed58f7537f928f6a118a19cd92c1f9029208cd7f015"}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0x92, "daf5406d40269baabd391272eadeb8d8c540b53f21d228f90da1367278eeed133f765dd5bb794ca659137d60ba11053396629968c9cbb26ec8ce2a6af83ede60dfbd70bac718bd7da175caeb3f423168e5fa6d23057978c4758d62bf557a82cb86184c28fc68a971b5fa4047e8ba56d9f6e16a24d489ce56bd26868a0e513f3e9d7964dad98024be71ee805daaed26df58bb"}, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x2, "bce5"}})
syz_open_dev$char_usb(0xc, 0xb4, 0xfffc)
r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x44e900)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) (async)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x10, 0x62, {0x62, 0xd, "e6b167a197f5ae9c5e271a260094e31774983e2f2031b00938c9456fde1a02e8e871bf197c8fb2f027a748207edbe49cbecc65e71dccbcb5dbe908f779c9e1dcf1fcab59020aec3c4b397da602c16694883989960d9602c6fd7b8bd9356f5473"}}, &(0x7f00000000c0)={0x0, 0x3, 0x40, @string={0x40, 0x3, "efea1c2585ba330b7498d3d25c821b56aa1022b8ab47e6110278f6f8c6673de373127c1d552389db5ed58f7537f928f6a118a19cd92c1f9029208cd7f015"}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0x92, "daf5406d40269baabd391272eadeb8d8c540b53f21d228f90da1367278eeed133f765dd5bb794ca659137d60ba11053396629968c9cbb26ec8ce2a6af83ede60dfbd70bac718bd7da175caeb3f423168e5fa6d23057978c4758d62bf557a82cb86184c28fc68a971b5fa4047e8ba56d9f6e16a24d489ce56bd26868a0e513f3e9d7964dad98024be71ee805daaed26df58bb"}, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x2, "bce5"}}) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0xfffc) (async)
syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x44e900) (async)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async)

0s ago: executing program 2 (id=1397):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000b40), 0x0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x7ff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xc)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x3b, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x50)
fcntl$setpipe(r2, 0x407, 0xc000)

kernel console output (not intermixed with test programs):

a_sn9c20x: Device initialization failed
[  330.973463][  T808] gspca_sn9c20x 3-1:14.0: probe with driver gspca_sn9c20x failed with error -71
[  330.987478][ T5901] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  330.998154][   T10] usb 2-1: USB disconnect, device number 126
[  331.017593][  T808] usb 3-1: USB disconnect, device number 8
[  331.112741][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  331.168296][ T5901] usb 6-1: Using ep0 maxpacket: 16
[  331.184134][ T5901] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  331.197893][ T5901] usb 6-1: config 1 has no interface number 0
[  331.206996][ T5901] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  331.217538][ T5901] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  331.228362][ T5901] usb 6-1: config 1 interface 105 has no altsetting 0
[  331.239292][ T5901] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  331.249152][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  331.258483][ T5901] usb 6-1: Product: syz
[  331.262715][ T5901] usb 6-1: Manufacturer: syz
[  331.267518][ T5901] usb 6-1: SerialNumber: syz
[  331.285028][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  331.296564][T10045] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  331.454291][T10063] ieee802154 phy1 wpan1: encryption failed: -22
[  331.535348][T10063] kvm: kvm [10062]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00
[  331.539629][T10065] random: crng reseeded on system resumption
[  331.545065][T10063] kvm: kvm [10062]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00
[  331.554370][T10063] kvm: kvm [10062]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00
[  331.594070][ T5901] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  331.619269][T10063] kvm: kvm [10062]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00
[  331.664679][ T5901] usb 6-1: USB disconnect, device number 43
[  331.676998][T10063] kvm: kvm [10062]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00
[  331.814431][ T5162] Bluetooth: hci3: unexpected subevent 0x01 length: 77 > 18
[  331.820742][T10076] tmpfs: Too small a size for current use
[  331.836515][    T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  332.007955][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.018595][    T9] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  332.029373][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.040775][    T9] usb 5-1: config 0 descriptor??
[  332.048969][    T9] rndis_host 5-1:0.0: missing cdc header ether descriptor
[  332.077770][ T5901] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  332.126280][ T2175] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  332.236258][ T5901] usb 6-1: Using ep0 maxpacket: 32
[  332.243158][ T5901] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  332.251638][ T5901] usb 6-1: config 0 has no interface number 0
[  332.253807][    T9] usb 5-1: USB disconnect, device number 95
[  332.257942][ T5901] usb 6-1: config 0 interface 12 has no altsetting 0
[  332.281650][ T5901] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  332.291768][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.300796][ T5901] usb 6-1: Product: syz
[  332.305877][ T2175] usb 2-1: unable to get BOS descriptor or descriptor too short
[  332.314282][ T5901] usb 6-1: Manufacturer: syz
[  332.319704][ T5901] usb 6-1: SerialNumber: syz
[  332.325275][ T2175] usb 2-1: config index 0 descriptor too short (expected 1554, got 18)
[  332.335868][ T2175] usb 2-1: config 250 has an invalid interface number: 5 but max is 0
[  332.345353][ T2175] usb 2-1: config 250 has no interface number 0
[  332.352331][ T5901] usb 6-1: config 0 descriptor??
[  332.362031][ T2175] usb 2-1: New USB device found, idVendor=48e1, idProduct=5121, bcdDevice=9c.5f
[  332.371537][ T2175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.379683][ T2175] usb 2-1: Product: syz
[  332.383908][ T2175] usb 2-1: Manufacturer: syz
[  332.388649][ T2175] usb 2-1: SerialNumber: syz
[  332.619020][ T2175] usb 2-1: USB disconnect, device number 127
[  332.771303][T10074] NILFS (nullb0): couldn't find nilfs on the device
[  333.267052][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  333.396469][   T10] usb 3-1: device descriptor read/64, error -71
[  333.405067][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  333.417901][ T5901] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  333.426672][ T5901] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  333.434465][ T5901] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  333.442276][ T5901] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  333.457786][ T5901] usb 6-1: USB disconnect, device number 44
[  333.639344][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  333.786241][   T10] usb 3-1: device descriptor read/64, error -71
[  333.896492][   T10] usb usb3-port1: attempt power cycle
[  334.246168][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  334.246168][   T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  334.266713][   T10] usb 3-1: device descriptor read/8, error -71
[  334.406162][   T24] usb 6-1: Using ep0 maxpacket: 8
[  334.413341][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.424031][   T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  334.433261][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.443762][   T24] usb 6-1: config 0 descriptor??
[  334.452817][   T24] iowarrior 6-1:0.0: no interrupt-in endpoint found
[  334.506834][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  334.527913][   T10] usb 3-1: device descriptor read/8, error -71
[  334.637177][   T10] usb usb3-port1: unable to enumerate USB device
[  334.727927][   T10] usb 6-1: USB disconnect, device number 45
[  335.596288][    T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  335.756258][    T9] usb 6-1: Using ep0 maxpacket: 32
[  335.763233][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  335.773281][    T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  335.783413][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  335.792467][    T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  335.801710][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.811086][    T9] usb 6-1: Product: syz
[  335.815319][    T9] usb 6-1: Manufacturer: syz
[  335.820137][    T9] usb 6-1: SerialNumber: syz
[  335.827041][    T9] usb 6-1: config 0 descriptor??
[  335.894791][T10083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.037672][    T9] gs_usb 6-1:0.0: Configuring for 26 interfaces
[  336.056528][    T9] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE)
[  336.096920][    T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32
[  336.226852][  T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  336.388720][  T808] usb 2-1: Using ep0 maxpacket: 8
[  336.399689][  T808] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  336.410439][  T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  336.422253][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  336.435171][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  336.449317][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 55, changing to 9
[  336.462658][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 8496, setting to 1024
[  336.474340][  T808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.493679][  T808] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  336.504634][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.512938][  T808] usb 2-1: Product: syz
[  336.517605][  T808] usb 2-1: Manufacturer: syz
[  336.522254][  T808] usb 2-1: SerialNumber: syz
[  336.533744][  T808] usb 2-1: config 0 descriptor??
[  336.541107][T10112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  336.556180][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  336.727917][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  336.740969][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  336.754577][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  336.766553][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  336.784216][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  336.801852][   T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  336.825070][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.845697][   T24] usb 3-1: Product: syz
[  336.851935][   T24] usb 3-1: Manufacturer: syz
[  336.857690][   T24] usb 3-1: SerialNumber: syz
[  336.868497][   T24] usb 3-1: config 0 descriptor??
[  336.874458][T10133] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  336.884738][   T24] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  337.086193][    T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  337.127924][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.141641][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.246737][    T9] usb 5-1: Using ep0 maxpacket: 32
[  337.253939][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  337.263265][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.276418][    T9] usb 5-1: config 0 descriptor??
[  337.292571][    T9] gspca_main: sunplus-2.14.0 probing 041e:400b
[  337.351695][T10151] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1127'.
[  337.371421][   T24] usb 3-1: USB disconnect, device number 13
[  337.746778][    T9] gspca_sunplus: reg_w_riv err -71
[  337.763924][    T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  337.783340][    T9] usb 5-1: USB disconnect, device number 96
[  338.414711][   T24] usb 6-1: USB disconnect, device number 46
[  338.646564][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  338.748867][  T808] rc_core: IR keymap rc-snapstream-firefly not found
[  338.765605][  T808] Registered IR keymap rc-empty
[  338.772982][  T808] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  338.783869][   T10] usb 3-1: device descriptor read/64, error -71
[  338.800718][  T808] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55
[  338.840197][  T808] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input57
[  338.896660][  T808] usb 2-1: USB disconnect, device number 2
[  338.902707][    C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  339.046274][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  339.176364][   T10] usb 3-1: device descriptor read/64, error -71
[  339.206186][    T9] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[  339.286724][   T10] usb usb3-port1: attempt power cycle
[  339.336167][    T9] usb 6-1: device descriptor read/64, error -71
[  339.576390][    T9] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  339.636944][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  339.657850][   T10] usb 3-1: device descriptor read/8, error -71
[  339.717817][    T9] usb 6-1: device descriptor read/64, error -71
[  339.828047][    T9] usb usb6-port1: attempt power cycle
[  339.906276][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  339.926879][   T10] usb 3-1: device descriptor read/8, error -71
[  339.946261][ T8622] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  340.036587][   T10] usb usb3-port1: unable to enumerate USB device
[  340.096152][ T8622] usb 2-1: Using ep0 maxpacket: 8
[  340.105249][ T8622] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  340.116474][ T8622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.124540][ T8622] usb 2-1: Product: syz
[  340.129862][ T8622] usb 2-1: Manufacturer: syz
[  340.134542][ T8622] usb 2-1: SerialNumber: syz
[  340.142437][ T8622] usb 2-1: config 0 descriptor??
[  340.150576][ T8622] gspca_main: sq930x-2.14.0 probing 2770:930c
[  340.176370][    T9] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  340.196826][    T9] usb 6-1: device descriptor read/8, error -71
[  340.411793][ T8622] gspca_sq930x: reg_r 001f failed -71
[  340.419724][ T8622] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  340.431714][ T8622] usb 2-1: USB disconnect, device number 3
[  340.446469][    T9] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  340.476796][    T9] usb 6-1: device descriptor read/8, error -71
[  340.586909][    T9] usb usb6-port1: unable to enumerate USB device
[  341.175225][T10213] netlink: 'syz.1.1145': attribute type 41 has an invalid length.
[  341.416626][ T8622] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  341.586238][ T8622] usb 2-1: Using ep0 maxpacket: 32
[  341.594766][ T8622] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  341.605573][ T8622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.613847][ T8622] usb 2-1: Product: syz
[  341.618259][ T8622] usb 2-1: Manufacturer: syz
[  341.623177][ T8622] usb 2-1: SerialNumber: syz
[  341.631913][ T8622] usb 2-1: config 0 descriptor??
[  341.642005][ T8622] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  341.806244][  T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  341.806244][ T2175] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  341.956208][ T2175] usb 5-1: Using ep0 maxpacket: 8
[  341.980087][  T808] usb 3-1: unable to get BOS descriptor or descriptor too short
[  341.980947][ T2175] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  341.993549][  T808] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  342.007136][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.009374][ T2175] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  342.016158][  T808] usb 3-1: Product: syz
[  342.028689][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  342.042625][  T808] usb 3-1: Manufacturer: syz
[  342.042651][  T808] usb 3-1: SerialNumber: syz
[  342.053860][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.072221][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  342.084057][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  342.098202][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  342.113668][ T2175] usb 5-1: config 168 interface 0 has no altsetting 0
[  342.122658][ T2175] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  342.145934][ T2175] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  342.158431][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  342.170499][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.183321][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  342.205638][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  342.220240][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  342.239820][ T2175] usb 5-1: config 168 interface 0 has no altsetting 0
[  342.273387][ T2175] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  342.274676][  T808] usb 3-1: unit 4 not found!
[  342.287837][ T2175] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  342.287888][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  342.287918][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.287974][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  342.288002][ T2175] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  342.288038][ T2175] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  342.300044][  T808] usb 3-1: unit 5 not found!
[  342.341590][ T2175] usb 5-1: config 168 interface 0 has no altsetting 0
[  342.420773][ T2175] usb 5-1: string descriptor 0 read error: -22
[  342.432530][  T808] usb 3-1: USB disconnect, device number 18
[  342.435318][ T2175] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  342.459781][ T2175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.514222][ T2175] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  342.551052][T10228] VFS: Mount too revealing
[  342.621991][ T9708] udevd[9708]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.780636][ T2175] usb 5-1: USB disconnect, device number 97
[  343.111914][T10213] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1145'.
[  343.122338][T10213] bridge_slave_1: default FDB implementation only supports local addresses
[  343.277628][ T2175] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  343.363009][ T8622] gspca_ov534_9: reg_r err -71
[  343.406586][  T808] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  343.416134][ T2175] usb 3-1: device descriptor read/64, error -71
[  343.420581][T10245] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[10245]
[  343.495559][T10247] vivid-000: disconnect
[  343.538430][T10246] vivid-000: reconnect
[  343.571343][  T808] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  343.603415][  T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.626171][ T8622] gspca_ov534_9: Unknown sensor 0000
[  343.626268][  T808] usb 6-1: Product: syz
[  343.626279][ T8622] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  343.630054][ T8622] usb 2-1: USB disconnect, device number 4
[  343.646140][  T808] usb 6-1: Manufacturer: syz
[  343.659771][  T808] usb 6-1: SerialNumber: syz
[  343.668958][ T2175] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[  343.691161][  T808] usb 6-1: config 0 descriptor??
[  343.725590][  T808] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  343.774226][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'.
[  343.826873][ T2175] usb 3-1: device descriptor read/64, error -71
[  343.871505][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'.
[  343.946695][ T2175] usb usb3-port1: attempt power cycle
[  344.022166][T10240] 9p: Could not find request transport: rd���[mM
[  344.046361][  T808] gspca_sunplus: reg_r err -71
[  344.069427][  T808] usb 6-1: USB disconnect, device number 51
[  344.296115][ T2175] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  344.326951][ T2175] usb 3-1: device descriptor read/8, error -71
[  344.486159][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  344.576158][ T2175] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  344.601878][ T2175] usb 3-1: device descriptor read/8, error -71
[  344.678428][   T10] usb 2-1: config 94 has an invalid interface number: 187 but max is 0
[  344.696106][   T10] usb 2-1: config 94 has no interface number 0
[  344.702454][   T10] usb 2-1: config 94 interface 187 has no altsetting 0
[  344.715045][   T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=a0bc, bcdDevice=5d.f6
[  344.726838][ T2175] usb usb3-port1: unable to enumerate USB device
[  344.733335][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.746130][   T10] usb 2-1: Product: syz
[  344.751899][   T10] usb 2-1: Manufacturer: syz
[  344.767579][   T10] usb 2-1: SerialNumber: syz
[  344.997262][   T10] option 2-1:94.187: GSM modem (1-port) converter detected
[  345.042449][   T10] usb 2-1: USB disconnect, device number 5
[  345.081018][   T10] option 2-1:94.187: device disconnected
[  345.089649][T10277] fuse: Bad value for 'fd'
[  345.277375][T10286] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1167'.
[  345.291920][T10286] ufs: You didn't specify the type of your ufs filesystem
[  345.291920][T10286] 
[  345.291920][T10286] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  345.291920][T10286] 
[  345.291920][T10286] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  345.329674][T10286] ufs: ufs_fill_super(): bad magic number
[  345.343640][T10288] ufs: You didn't specify the type of your ufs filesystem
[  345.343640][T10288] 
[  345.343640][T10288] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  345.343640][T10288] 
[  345.343640][T10288] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  345.376560][T10288] ufs: ufs_fill_super(): bad magic number
[  345.456114][ T8622] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  345.569895][T10290] netlink: 'syz.5.1168': attribute type 7 has an invalid length.
[  345.596173][T10290] netlink: 'syz.5.1168': attribute type 8 has an invalid length.
[  345.616167][T10290] netlink: 'syz.5.1168': attribute type 7 has an invalid length.
[  345.626327][ T8622] usb 5-1: Using ep0 maxpacket: 8
[  345.637304][T10290] netlink: 208804 bytes leftover after parsing attributes in process `syz.5.1168'.
[  345.663002][ T8622] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  345.678506][ T8622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.696439][ T8622] usb 5-1: Product: syz
[  345.706459][ T8622] usb 5-1: Manufacturer: syz
[  345.712647][ T8622] usb 5-1: SerialNumber: syz
[  345.732114][ T8622] usb 5-1: config 0 descriptor??
[  345.750447][ T8622] gspca_main: sq930x-2.14.0 probing 2770:930c
[  345.826629][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  345.966139][   T10] usb 2-1: device descriptor read/64, error -71
[  346.015493][ T8622] gspca_sq930x: reg_r 001f failed -71
[  346.026539][ T8622] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  346.046962][ T5845] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  346.051304][ T8622] usb 5-1: USB disconnect, device number 98
[  346.207008][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  346.214864][T10300] ubi31: attaching mtd0
[  346.220706][T10300] ubi31: scanning is finished
[  346.225484][T10300] ubi31: empty MTD device detected
[  346.236221][ T5845] usb 6-1: Using ep0 maxpacket: 32
[  346.243725][ T5845] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  346.254647][ T5845] usb 6-1: config 0 has no interface number 0
[  346.263140][ T5845] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  346.280652][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.299202][ T5845] usb 6-1: Product: syz
[  346.308603][ T5845] usb 6-1: Manufacturer: syz
[  346.317949][ T5845] usb 6-1: SerialNumber: syz
[  346.327857][ T5845] usb 6-1: config 0 descriptor??
[  346.345951][ T5845] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  346.358003][   T10] usb 2-1: device descriptor read/64, error -71
[  346.369701][T10301] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.380689][T10300] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  346.388990][T10300] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  346.398611][T10300] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  346.409859][T10300] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  346.418313][T10300] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  346.425603][T10300] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  346.436850][T10300] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2797406241
[  346.447608][T10300] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  346.462631][T10303] ubi31: background thread "ubi_bgt31d" started, PID 10303
[  346.487825][   T10] usb usb2-port1: attempt power cycle
[  346.542877][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.556597][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.683660][T10305] netlink: 'syz.4.1172': attribute type 39 has an invalid length.
[  346.780070][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.789676][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.801037][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.810008][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.821106][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.830702][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.846258][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  346.869693][   T10] usb 2-1: device descriptor read/8, error -71
[  346.926223][    T9] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[  347.043297][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.054362][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.076859][ T5845] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  347.091875][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  347.102910][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.112311][ T5845] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  347.124369][    T9] usb 5-1: Product: syz
[  347.128819][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  347.137414][    T9] usb 5-1: Manufacturer: syz
[  347.143721][    T9] usb 5-1: SerialNumber: syz
[  347.159628][   T10] usb 2-1: device descriptor read/8, error -71
[  347.176891][    T9] usb 5-1: config 0 descriptor??
[  347.276899][   T10] usb usb2-port1: unable to enumerate USB device
[  347.286277][ T8626] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  347.385640][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  347.438212][ T8626] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  347.447508][ T8626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.458658][ T8626] usb 3-1: config 0 descriptor??
[  347.473467][ T8626] cp210x 3-1:0.0: cp210x converter detected
[  347.484115][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  347.492698][   T10] usb 6-1: USB disconnect, device number 52
[  347.509618][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  347.529113][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  347.542331][   T10] quatech2 6-1:0.51: device disconnected
[  347.590993][    T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  347.605552][    T9] usb 5-1: USB disconnect, device number 99
[  347.877950][ T8626] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  348.138031][ T8626] usb 3-1: cp210x converter now attached to ttyUSB0
[  348.294689][    T9] usb 3-1: USB disconnect, device number 23
[  348.310130][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  348.323818][    T9] cp210x 3-1:0.0: device disconnected
[  348.476268][ T8626] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  348.649250][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.661318][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.672089][ T8626] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  348.675918][T10319] netlink: 'syz.1.1177': attribute type 83 has an invalid length.
[  348.685537][ T8626] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  348.694393][T10320] netlink: 'syz.1.1177': attribute type 83 has an invalid length.
[  348.702421][ T8626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.730076][ T8626] usb 5-1: config 0 descriptor??
[  348.966260][ T8622] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  349.252476][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.273267][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.296400][ T8622] usb 2-1: device descriptor read/64, error -71
[  349.305714][ T8626] usbhid 5-1:0.0: can't add hid device: -71
[  349.312154][ T8626] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  349.326230][ T8626] usb 5-1: USB disconnect, device number 100
[  349.546292][ T8622] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  349.596291][ T2175] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  349.626191][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  349.676532][ T8622] usb 2-1: device descriptor read/64, error -71
[  349.756250][ T2175] usb 6-1: Using ep0 maxpacket: 8
[  349.763428][ T2175] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  349.775115][ T2175] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  349.785362][ T2175] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  349.786329][    T9] usb 3-1: Using ep0 maxpacket: 8
[  349.795866][ T8622] usb usb2-port1: attempt power cycle
[  349.804848][    T9] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  349.806203][ T2175] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  349.820628][    T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29
[  349.830961][ T2175] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  349.843357][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.849964][ T2175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.877631][    T9] usb 3-1: Product: syz
[  349.885544][    T9] usb 3-1: Manufacturer: syz
[  349.895674][    T9] usb 3-1: SerialNumber: syz
[  350.051956][T10342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  350.058632][T10342] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  350.069585][T10342] vhci_hcd vhci_hcd.0: Device attached
[  350.085210][T10342] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8)
[  350.091805][T10342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  350.116291][T10342] vhci_hcd vhci_hcd.0: Device attached
[  350.143830][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.187105][ T8622] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  350.208591][ T8622] usb 2-1: device descriptor read/8, error -71
[  350.225003][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.242717][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.252382][ T5901] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  350.264299][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.317277][ T5901] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  350.436253][ T8626] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  350.466223][ T8622] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  350.487231][ T8622] usb 2-1: device descriptor read/8, error -71
[  350.596986][ T8622] usb usb2-port1: unable to enumerate USB device
[  350.616158][ T8626] usb 5-1: Using ep0 maxpacket: 16
[  350.634708][ T8626] usb 5-1: unable to get BOS descriptor or descriptor too short
[  350.647082][T10345] vhci_hcd: connection closed
[  350.657171][   T48] vhci_hcd vhci_hcd.4: stop threads
[  350.668160][T10343] vhci_hcd: connection reset by peer
[  350.684929][ T8626] usb 5-1: unable to read config index 0 descriptor/start: -71
[  350.693542][   T48] vhci_hcd vhci_hcd.4: release socket
[  350.701292][ T8626] usb 5-1: can't read configurations, error -71
[  350.713232][   T48] vhci_hcd vhci_hcd.4: disconnect device
[  350.720895][   T48] vhci_hcd vhci_hcd.4: stop threads
[  350.726734][   T48] vhci_hcd vhci_hcd.4: release socket
[  350.732776][   T48] vhci_hcd vhci_hcd.4: disconnect device
[  351.057417][    T9] usbserial_generic 3-1:3.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  351.064221][T10351] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  351.070322][    T9] usbserial_generic 3-1:3.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  351.088179][    T9] usbserial_generic 3-1:3.0: device has no bulk endpoints
[  351.345210][    T9] usb 3-1: USB disconnect, device number 24
[  351.642066][T10366] openvswitch: netlink: IP tunnel TTL not specified.
[  351.700956][T10368] tmpfs: Bad value for 'nr_blocks'
[  351.933665][T10377] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  351.940650][T10377] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  351.966652][  T808] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  351.982258][T10377] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  351.997254][T10377] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  352.003667][T10377] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  352.010169][T10377] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  352.022765][T10377] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  352.092207][ T2175] usb 6-1: usb_control_msg returned -71
[  352.098119][ T2175] usbtmc 6-1:16.0: can't read capabilities
[  352.131115][ T2175] usb 6-1: USB disconnect, device number 53
[  352.169813][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  352.257026][  T808] usb 3-1: Using ep0 maxpacket: 16
[  352.268429][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.289311][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.306114][  T808] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  352.315338][  T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.334916][  T808] usb 3-1: config 0 descriptor??
[  352.346220][    T9] usb 2-1: Using ep0 maxpacket: 16
[  352.361166][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  352.380418][    T9] usb 2-1: config 0 has no interface number 0
[  352.387228][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'.
[  352.410725][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.425260][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.440204][    T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  352.450243][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.475268][    T9] usb 2-1: config 0 descriptor??
[  352.768234][  T808] apple 0003:05AC:024B.0023: unknown global tag 0xe
[  352.786111][  T808] apple 0003:05AC:024B.0023: item 0 1 1 14 parsing failed
[  352.808902][  T808] apple 0003:05AC:024B.0023: parse failed
[  352.825078][  T808] apple 0003:05AC:024B.0023: probe with driver apple failed with error -22
[  352.966557][T10379] tmpfs: Bad value for 'nr_blocks'
[  352.967774][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.005727][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.086701][  T808] usb 3-1: USB disconnect, device number 25
[  353.134145][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.162933][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.188671][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.223378][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.577294][ T2175] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[  353.718255][   T30] audit: type=1326 audit(1775343916.017:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.1.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3f4d9c819 code=0x0
[  353.758552][ T2175] usb 6-1: config 5 has an invalid interface number: 230 but max is 0
[  353.766873][ T2175] usb 6-1: config 5 has no interface number 0
[  353.773137][ T2175] usb 6-1: config 5 interface 230 altsetting 60 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  353.784655][ T2175] usb 6-1: config 5 interface 230 has no altsetting 0
[  353.794254][ T2175] usb 6-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=e0.9e
[  353.804516][ T2175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.813286][ T2175] usb 6-1: Product: syz
[  353.817710][ T2175] usb 6-1: Manufacturer: syz
[  353.822441][ T2175] usb 6-1: SerialNumber: syz
[  353.833798][T10385] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  353.848976][    T9] uclogic 0003:28BD:0071.0024: failed retrieving string descriptor #100: -71
[  353.860462][    T9] uclogic 0003:28BD:0071.0024: failed retrieving pen parameters: -71
[  353.868854][    T9] uclogic 0003:28BD:0071.0024: pen probing failed: -71
[  353.876349][   T29] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  353.877353][    T9] uclogic 0003:28BD:0071.0024: failed probing parameters: -71
[  353.893322][    T9] uclogic 0003:28BD:0071.0024: probe with driver uclogic failed with error -71
[  353.911363][    T9] usb 2-1: USB disconnect, device number 14
[  353.956558][ T5162] Bluetooth: hci3: command 0x0c1a tx timeout
[  354.026190][ T5162] Bluetooth: hci1: command 0x0c1a tx timeout
[  354.026215][ T5855] Bluetooth: hci4: command 0x0406 tx timeout
[  354.026233][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  354.067685][   T29] usb 5-1: Using ep0 maxpacket: 32
[  354.089398][   T29] usb 5-1: config 81 has an invalid interface number: 92 but max is 1
[  354.097980][   T29] usb 5-1: config 81 has an invalid interface number: 94 but max is 1
[  354.106455][   T29] usb 5-1: config 81 has no interface number 0
[  354.113668][   T29] usb 5-1: config 81 has no interface number 1
[  354.121061][   T29] usb 5-1: config 81 interface 92 altsetting 252 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  354.132673][   T29] usb 5-1: config 81 interface 92 altsetting 252 endpoint 0xF has invalid wMaxPacketSize 0
[  354.143973][   T29] usb 5-1: config 81 interface 92 altsetting 252 has an invalid descriptor for endpoint zero, skipping
[  354.155426][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0xF, skipping
[  354.166548][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0x3, skipping
[  354.177566][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0xF, skipping
[  354.188561][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0xD, skipping
[  354.199570][   T29] usb 5-1: config 81 interface 92 altsetting 252 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  354.213850][T10394] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1193'.
[  354.216146][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0x9, skipping
[  354.246124][   T29] usb 5-1: config 81 interface 92 altsetting 252 has a duplicate endpoint with address 0xD, skipping
[  354.257642][   T29] usb 5-1: config 81 interface 94 altsetting 13 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  354.269312][   T29] usb 5-1: config 81 interface 92 has no altsetting 0
[  354.276571][   T29] usb 5-1: config 81 interface 94 has no altsetting 0
[  354.288033][   T29] usb 5-1: Dual-Role OTG device on HNP port
[  354.294620][   T29] usb 5-1: New USB device found, idVendor=1391, idProduct=1000, bcdDevice= 9.e0
[  354.304125][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.312544][   T29] usb 5-1: Product: ꘅ潛ឌ꨾忘옺䦾ﵲ撪䆆憴ᕷ湨躵꼰령렫Ɩ⏡ࡌﲀ횻䚍Ⲓ酥ᬿ㊢磮쟍Ⱪ籿
[  354.326989][   T29] usb 5-1: Manufacturer: 慵』ᑕ⠡፬藤㻻䭼潅䩛磃睍㥦㤩辟淥曣͈㤇㲛⍉ꔕ觛퐄眲诲綢齒䕕䊍먓㚙绗恴゚큡ⵍ탤⛨ࢢ晸쵮ד戳ᬺﵵꈕ⧝╰땆ڶ⠳ᠸꑔᩞ鋸Ɋ笾㘀禾
[  354.350296][   T29] usb 5-1: SerialNumber: ࠄ
[  354.362788][T10392] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  354.371662][T10392] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  354.399409][ T2175] usb 6-1: USB disconnect, device number 54
[  354.696133][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  354.805019][   T29] usb 5-1: USB disconnect, device number 103
[  354.850450][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[  354.862308][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.882481][    T9] usb 3-1: Product: syz
[  354.898481][    T9] usb 3-1: Manufacturer: syz
[  354.925440][    T9] usb 3-1: SerialNumber: syz
[  355.182942][T10401] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  355.185080][T10398] netlink: 'syz.5.1197': attribute type 23 has an invalid length.
[  355.207575][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  355.227247][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[  355.444215][    T9] usb 3-1: USB disconnect, device number 26
[  355.457363][ T5901] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  355.552763][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.565163][T10405] ������: renamed from vlan0 (while UP)
[  355.714827][T10401] deleting an unspecified loop device is not supported.
[  355.876164][ T5845] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  355.936167][ T8622] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  356.036260][ T5845] usb 5-1: Using ep0 maxpacket: 8
[  356.036348][ T5162] Bluetooth: hci3: command 0x0c1a tx timeout
[  356.043292][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.060154][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  356.079177][ T5845] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  356.091176][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.106220][ T5162] Bluetooth: hci1: command 0x0c1a tx timeout
[  356.108197][ T5845] usb 5-1: config 0 descriptor??
[  356.116375][ T8622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  356.146116][ T8622] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  356.156927][ T8622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  356.169347][ T8622] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  356.183238][ T8622] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  356.195326][ T8622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.203681][ T8622] usb 6-1: Product: syz
[  356.207916][ T8622] usb 6-1: Manufacturer: syz
[  356.212945][ T8622] usb 6-1: SerialNumber: syz
[  356.218202][   T29] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  356.230437][ T8622] usb 6-1: config 0 descriptor??
[  356.249291][ T8622] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  356.270166][T10428] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  356.287146][T10428] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  356.356569][   T29] usb 3-1: device descriptor read/64, error -71
[  356.499315][ T8622] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22
[  356.532888][ T5845] hid_parser_main: 265 callbacks suppressed
[  356.532913][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.546975][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.554107][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.561333][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.568500][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.575568][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.582779][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.590238][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.599189][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.606819][ T5845] uclogic 0003:5543:0781.0025: unknown main item tag 0x0
[  356.614026][ T5845] uclogic 0003:5543:0781.0025: unbalanced collection at end of report description
[  356.616334][   T29] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  356.624405][ T5845] uclogic 0003:5543:0781.0025: parse failed
[  356.637863][ T5845] uclogic 0003:5543:0781.0025: probe with driver uclogic failed with error -22
[  356.654723][ T8622] usb 6-1: USB disconnect, device number 55
[  356.716471][ T2175] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  356.733434][ T5901] usb 5-1: USB disconnect, device number 104
[  356.776236][   T29] usb 3-1: device descriptor read/64, error -71
[  356.847361][ T2175] usb 2-1: device descriptor read/64, error -71
[  356.886466][   T29] usb usb3-port1: attempt power cycle
[  357.096142][ T2175] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  357.236552][   T29] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  357.244904][ T2175] usb 2-1: device descriptor read/64, error -71
[  357.288209][   T29] usb 3-1: device descriptor read/8, error -71
[  357.347596][T10446] tmpfs: Unexpected value for 'grpquota'
[  357.354809][T10446] syzkaller1: entered promiscuous mode
[  357.360534][T10446] syzkaller1: entered allmulticast mode
[  357.395816][ T2175] usb usb2-port1: attempt power cycle
[  357.411083][T10444] program syz.5.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  357.538055][   T29] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  357.569446][   T29] usb 3-1: device descriptor read/8, error -71
[  357.676482][   T29] usb usb3-port1: unable to enumerate USB device
[  357.746270][ T2175] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  357.768849][ T2175] usb 2-1: device descriptor read/8, error -71
[  357.786160][  T808] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  357.876195][ T5845] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  357.936280][  T808] usb 5-1: Using ep0 maxpacket: 16
[  357.943901][  T808] usb 5-1: unable to get BOS descriptor or descriptor too short
[  357.953777][  T808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  357.969023][  T808] usb 5-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40
[  357.978589][  T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.987149][  T808] usb 5-1: Product: syz
[  357.991372][  T808] usb 5-1: Manufacturer: syz
[  357.996199][  T808] usb 5-1: SerialNumber: syz
[  358.006233][ T2175] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  358.026290][ T5845] usb 6-1: Using ep0 maxpacket: 16
[  358.034067][ T5845] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  358.045487][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0
[  358.047091][ T2175] usb 2-1: device descriptor read/8, error -71
[  358.056199][ T5845] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  358.067674][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.075706][ T5845] usb 6-1: Product: syz
[  358.080047][ T5845] usb 6-1: Manufacturer: syz
[  358.084792][ T5845] usb 6-1: SerialNumber: syz
[  358.092442][ T5845] usb 6-1: config 0 descriptor??
[  358.166949][ T2175] usb usb2-port1: unable to enumerate USB device
[  358.186314][ T5162] Bluetooth: hci1: command 0x0c1a tx timeout
[  358.207114][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.217014][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.233670][  T808] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch
[  358.273283][  T808] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  358.292290][  T808] usb 5-1: USB disconnect, device number 105
[  358.316111][    C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  358.344457][ T5845] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input59
[  358.345001][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  358.383755][ T5845] imon:send_packet: packet tx failed (-71)
[  358.408314][ T5845] imon 6-1:0.0: panel buttons/knobs setup failed
[  358.466475][ T5845] rc_core: IR keymap rc-imon-pad not found
[  358.472553][ T5845] Registered IR keymap rc-empty
[  358.479275][ T5845] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  358.489670][ T5845] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  358.499334][ T5845] imon:send_packet: packet tx failed (-71)
[  358.516322][ T5845] imon 6-1:0.0: remote input dev register failed
[  358.522892][ T5845] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  358.543438][ T5845] imon 6-1:0.0: unable to initialize intf0, err 0
[  358.550314][ T5845] imon:imon_probe: failed to initialize context!
[  358.557310][ T5845] imon 6-1:0.0: unable to register, err -19
[  358.566413][ T5845] usb 6-1: USB disconnect, device number 56
[  358.866174][ T5845] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  359.016212][ T5845] usb 6-1: Using ep0 maxpacket: 16
[  359.023278][ T5845] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  359.023311][T10460] Invalid ELF header magic: != ELF
[  359.034579][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0
[  359.044020][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'.
[  359.051811][ T5845] usb 6-1: string descriptor 0 read error: -22
[  359.058515][ T2175] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  359.065320][ T5845] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  359.084649][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.097380][ T5845] usb 6-1: config 0 descriptor??
[  359.120070][ T5845] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input61
[  359.197332][ T2175] usb 5-1: device descriptor read/64, error -71
[  359.407956][ T5845] rc_core: IR keymap rc-imon-pad not found
[  359.413999][ T5845] Registered IR keymap rc-empty
[  359.420984][ T5845] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  359.431571][ T5845] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  359.456357][ T2175] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  359.533068][ T5845] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  359.554083][ T5845] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input62
[  359.578093][ T5845] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:57> initialized
[  359.606152][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  359.606152][ T2175] usb 5-1: device descriptor read/64, error -71
[  359.726575][ T2175] usb usb5-port1: attempt power cycle
[  359.756152][    T9] usb 3-1: Using ep0 maxpacket: 16
[  359.763688][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.775925][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.786064][ T5850] psmouse serio2: Failed to reset mouse on : -5
[  359.792431][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  359.805382][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  359.815351][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.828850][    T9] usb 3-1: config 0 descriptor??
[  359.846221][   T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  359.933543][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.942822][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.989950][    C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  360.001454][  T808] usb 6-1: USB disconnect, device number 57
[  360.007281][   T29] usb 2-1: Using ep0 maxpacket: 16
[  360.018686][   T29] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  360.031305][   T29] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  360.069878][   T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.088154][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.099941][ T2175] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  360.107954][   T29] usb 2-1: Product: syz
[  360.112377][   T29] usb 2-1: Manufacturer: syz
[  360.117662][   T29] usb 2-1: SerialNumber: syz
[  360.146917][ T2175] usb 5-1: device descriptor read/8, error -71
[  360.258713][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.268203][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.280494][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  360.288490][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  360.299883][    T9] usb 3-1: USB disconnect, device number 31
[  360.337475][   T29] cdc_ncm 2-1:1.0: bind() failure
[  360.348855][   T29] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  360.355900][   T29] cdc_ncm 2-1:1.1: bind() failure
[  360.366296][   T29] usb 2-1: USB disconnect, device number 19
[  360.396234][ T2175] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  360.418055][ T2175] usb 5-1: device descriptor read/8, error -71
[  360.529820][ T2175] usb usb5-port1: unable to enumerate USB device
[  360.838414][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.855131][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.096210][   T29] usb 6-1: new low-speed USB device number 58 using dummy_hcd
[  361.256259][   T29] usb 6-1: device descriptor read/64, error -71
[  361.506239][   T29] usb 6-1: new low-speed USB device number 59 using dummy_hcd
[  361.646959][   T29] usb 6-1: device descriptor read/64, error -71
[  361.676182][ T8622] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  361.757002][   T29] usb usb6-port1: attempt power cycle
[  361.837417][ T8622] usb 3-1: Invalid ep0 maxpacket: 64
[  361.853208][T10509] netlink: 'syz.4.1231': attribute type 2 has an invalid length.
[  361.861316][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1231'.
[  361.913575][T10514] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  361.930240][T10514] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  361.966130][ T8622] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  361.988226][ T5162] Bluetooth: hci4: unexpected event for opcode 0x203b
[  362.096288][   T29] usb 6-1: new low-speed USB device number 60 using dummy_hcd
[  362.126584][ T8622] usb 3-1: Invalid ep0 maxpacket: 64
[  362.132645][   T29] usb 6-1: device descriptor read/8, error -71
[  362.139154][ T8622] usb usb3-port1: attempt power cycle
[  362.326179][ T2175] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[  362.386266][   T29] usb 6-1: new low-speed USB device number 61 using dummy_hcd
[  362.416874][   T29] usb 6-1: device descriptor read/8, error -71
[  362.476133][ T8622] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[  362.485391][ T2175] usb 5-1: not running at top speed; connect to a high speed hub
[  362.494930][ T2175] usb 5-1: config 2 has an invalid interface number: 56 but max is 0
[  362.503297][ T2175] usb 5-1: config 2 has no interface number 0
[  362.510221][ T8622] usb 3-1: Invalid ep0 maxpacket: 64
[  362.523668][ T2175] usb 5-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice= 8.2a
[  362.533144][ T2175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.541924][   T29] usb usb6-port1: unable to enumerate USB device
[  362.549303][ T2175] usb 5-1: Product: syz
[  362.553518][ T2175] usb 5-1: Manufacturer: syz
[  362.558185][ T2175] usb 5-1: SerialNumber: syz
[  362.646265][ T8622] usb 3-1: new low-speed USB device number 35 using dummy_hcd
[  362.676835][ T8622] usb 3-1: Invalid ep0 maxpacket: 64
[  362.682516][ T8622] usb usb3-port1: unable to enumerate USB device
[  362.771122][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.780147][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.793075][ T2175] sisusb 5-1:2.56: Invalid USB2VGA device
[  362.799884][ T2175] sisusb 5-1:2.56: probe with driver sisusb failed with error -22
[  362.811607][ T2175] usb 5-1: USB disconnect, device number 110
[  363.389524][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.566156][ T5850] misc userio: Buffer overflowed, userio client isn't keeping up
[  363.646234][ T2175] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[  363.798146][ T2175] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.810096][ T2175] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  363.827343][ T2175] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  363.845724][ T2175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  363.854939][ T2175] usb 5-1: SerialNumber: syz
[  363.879794][ T2175] cdc_ether 5-1:1.0: skipping garbage
[  363.891234][ T2175] usb 5-1: No union descriptors
[  363.901682][ T2175] usb-storage 5-1:1.0: USB Mass Storage device detected
[  363.919622][ T2175] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  364.073674][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.088921][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.110505][  T808] usb 5-1: USB disconnect, device number 111
[  364.311602][T10550] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1243'.
[  364.337477][T10550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.352382][T10550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.369449][T10550] bond0 (unregistering): Released all slaves
[  364.492334][T10555] netlink: 'syz.5.1245': attribute type 15 has an invalid length.
[  364.502096][T10555] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1245'.
[  364.554351][T10557] random: crng reseeded on system resumption
[  364.624142][ T5850] input: PS/2 Generic Mouse as /devices/serio2/input/input63
[  364.796227][  T808] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  364.833492][ T1170] nci: nci_ntf_packet: unsupported ntf opcode 0xf21
[  364.856242][T10563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.856844][T10564] overlayfs: failed lookup in lower (newroot/269, name='bus', err=-40): overlapping layers
[  364.876125][ T5850] psmouse serio2: Failed to enable mouse on 
[  364.958479][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  364.978355][  T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 123, setting to 64
[  364.990054][  T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  365.005062][  T808] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  365.014463][  T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.057675][  T808] usb 3-1: config 0 descriptor??
[  365.067277][T10553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  365.330104][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.344639][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.566186][ T5850] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  365.706465][ T5850] usb 5-1: device descriptor read/64, error -71
[  365.798176][  T808] usbhid 3-1:0.0: can't add hid device: -71
[  365.813128][  T808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  365.825462][  T808] usb 3-1: USB disconnect, device number 36
[  365.960736][ T5850] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  366.092202][T10588] cgroup: Invalid name
[  366.106652][ T5850] usb 5-1: device descriptor read/64, error -71
[  366.239072][ T5850] usb usb5-port1: attempt power cycle
[  366.337310][ T2175] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  366.479129][T10594] : entered promiscuous mode
[  366.518719][ T2175] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  366.536170][ T8622] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  366.543860][ T2175] usb 6-1: config 0 has no interface number 0
[  366.566313][ T2175] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  366.581359][ T2175] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.592179][ T2175] usb 6-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  366.606083][ T2175] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  366.615801][ T2175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.618020][ T5850] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  366.645149][ T2175] usb 6-1: config 0 descriptor??
[  366.678164][ T5850] usb 5-1: device descriptor read/8, error -71
[  366.681579][ T2175] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[  366.728170][ T8622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.753670][ T8622] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  366.776102][ T8622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.798346][ T8622] usb 2-1: config 0 descriptor??
[  366.936104][ T5850] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  366.968539][ T5850] usb 5-1: device descriptor read/8, error -71
[  367.032175][ T8622] usbhid 2-1:0.0: can't add hid device: -71
[  367.051704][ T8622] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  367.076547][ T8622] usb 2-1: USB disconnect, device number 20
[  367.090725][ T5850] usb usb5-port1: unable to enumerate USB device
[  367.273308][T10582] syz.4.1251 (10582): drop_caches: 2
[  367.373979][T10582] syz.4.1251 (10582): drop_caches: 2
[  367.446182][ T5850] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  367.547048][ T8622] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  367.596155][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  367.603582][ T5850] usb 3-1: unable to get BOS descriptor or descriptor too short
[  367.612927][ T5850] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  367.627428][ T5850] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  367.637352][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.645543][ T5850] usb 3-1: Product: syz
[  367.650058][ T5850] usb 3-1: Manufacturer: syz
[  367.655508][ T5850] usb 3-1: SerialNumber: syz
[  367.716153][ T8622] usb 2-1: Using ep0 maxpacket: 32
[  367.723407][ T8622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.734864][ T8622] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  367.744538][ T8622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.756634][ T8622] usb 2-1: config 0 descriptor??
[  367.774670][ T8622] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  367.788410][ T8622] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  367.870724][ T5850] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  367.881400][ T5850] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  367.983539][T10592] input: syz1 as /devices/virtual/input/input64
[  368.000875][T10592] sg_write: data in/out 458975/136 bytes for SCSI command 0xc7-- guessing data in;
[  368.000875][T10592]    program syz.1.1255 not setting count and/or reply_len properly
[  368.042360][  T808] usb 2-1: USB disconnect, device number 21
[  368.052565][  T808] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  368.073597][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.088128][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.139572][ T5850] usb 3-1: USB disconnect, device number 37
[  368.177866][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  368.462211][T10615] +
: renamed from syzkaller0
[  368.678471][T10619] netlink: 'syz.2.1265': attribute type 3 has an invalid length.
[  368.866312][ T5850] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  369.019612][T10624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1267'.
[  369.026122][ T5850] usb 2-1: device descriptor read/64, error -71
[  369.093354][   T24] usb 6-1: USB disconnect, device number 62
[  369.166348][ T5845] usb 5-1: new full-speed USB device number 116 using dummy_hcd
[  369.276286][ T5850] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  369.308574][ T8622] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  369.358599][ T5845] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  369.367527][ T5845] usb 5-1: config 0 has no interface number 0
[  369.373777][ T5845] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  369.387285][ T5845] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  369.398183][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.406648][ T5845] usb 5-1: Product: syz
[  369.411041][ T5845] usb 5-1: Manufacturer: syz
[  369.415789][ T5845] usb 5-1: SerialNumber: syz
[  369.420597][ T5850] usb 2-1: device descriptor read/64, error -71
[  369.429347][ T5845] usb 5-1: config 0 descriptor??
[  369.435101][T10622] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  369.454876][ T5845] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:3a:58:42:f9:2b
[  369.477944][ T8622] usb 3-1: Using ep0 maxpacket: 32
[  369.497152][ T8622] usb 3-1: unable to get BOS descriptor or descriptor too short
[  369.517732][ T8622] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7
[  369.531913][ T8622] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  369.536473][ T5850] usb usb2-port1: attempt power cycle
[  369.541769][ T8622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.560389][ T8622] usb 3-1: Product: syz
[  369.564656][ T8622] usb 3-1: Manufacturer: syz
[  369.569643][ T8622] usb 3-1: SerialNumber: syz
[  369.588872][ T8622] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  369.896529][ T5850] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  369.927870][ T5850] usb 2-1: device descriptor read/8, error -71
[  370.176307][ T5850] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  370.216962][ T5850] usb 2-1: device descriptor read/8, error -71
[  370.233550][ T8622] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  370.284846][ T8622] usb 3-1: USB disconnect, device number 38
[  370.311575][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  370.330324][ T5850] usb usb2-port1: unable to enumerate USB device
[  370.449071][T10663] syzkaller1: entered promiscuous mode
[  370.454808][T10663] syzkaller1: entered allmulticast mode
[  370.477275][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1273'.
[  370.753777][ T2175] usb 5-1: USB disconnect, device number 116
[  370.776105][ T5850] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  370.787731][ T2175] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  370.937220][ T5850] usb 3-1: Using ep0 maxpacket: 32
[  370.960514][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  370.984042][ T5850] usb 3-1: can't read configurations, error -61
[  370.991839][ T5845] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  371.137261][ T5850] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  371.170173][ T5845] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  371.179728][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.188149][ T5845] usb 6-1: Product: syz
[  371.192749][ T5845] usb 6-1: Manufacturer: syz
[  371.197913][ T5845] usb 6-1: SerialNumber: syz
[  371.296375][ T5850] usb 3-1: Using ep0 maxpacket: 32
[  371.328865][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  371.356661][ T5850] usb 3-1: can't read configurations, error -61
[  371.372214][ T5850] usb usb3-port1: attempt power cycle
[  371.609346][T10693] x_tables: unsorted entry at hook 1
[  371.622422][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  371.660403][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  371.736444][ T5850] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  371.766960][ T5850] usb 3-1: Using ep0 maxpacket: 32
[  371.778598][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  371.789273][ T5850] usb 3-1: can't read configurations, error -61
[  371.936271][ T5850] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  371.957599][ T5850] usb 3-1: Using ep0 maxpacket: 32
[  371.969513][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  371.977815][ T5850] usb 3-1: can't read configurations, error -61
[  371.984790][ T5850] usb usb3-port1: unable to enumerate USB device
[  372.056683][ T2175] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  372.219720][ T2175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.252818][ T2175] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  372.266295][ T2175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.275151][ T2175] usb 2-1: Product: syz
[  372.279665][ T2175] usb 2-1: Manufacturer: syz
[  372.284326][ T2175] usb 2-1: SerialNumber: syz
[  372.292744][ T2175] usb 2-1: config 0 descriptor??
[  372.310677][ T2175] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  372.319686][ T2175] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  372.332891][ T2175] usb-storage 2-1:0.0: USB Mass Storage device detected
[  372.362897][ T2175] usb-storage 2-1:0.0: device ignored
[  372.514018][ T5850] usb 2-1: USB disconnect, device number 26
[  372.561437][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  372.604297][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  372.628668][ T5845] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  372.655657][ T5845] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  372.705588][ T5845] usb 6-1: USB disconnect, device number 63
[  372.758788][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1281'.
[  372.768135][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1281'.
[  373.246141][ T5845] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  373.406470][ T5845] usb 5-1: Using ep0 maxpacket: 16
[  373.417922][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.440831][ T5845] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  373.451029][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.456147][ T2175] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  373.468322][ T5845] usb 5-1: Product: syz
[  373.475524][ T5845] usb 5-1: Manufacturer: syz
[  373.486135][ T5845] usb 5-1: SerialNumber: syz
[  373.498845][ T5845] usb 5-1: config 0 descriptor??
[  373.515296][ T5845] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  373.638848][ T2175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.650610][ T2175] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  373.659904][ T2175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.670233][ T2175] usb 6-1: config 0 descriptor??
[  373.708727][ T8622] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  373.723232][   T29] usb 5-1: USB disconnect, device number 117
[  373.896076][ T8622] usb 2-1: Using ep0 maxpacket: 32
[  373.906194][ T8622] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice= 0.40
[  373.915979][ T8622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.924418][   T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  373.933626][ T8622] usb 2-1: Product: syz
[  373.938062][ T8622] usb 2-1: Manufacturer: syz
[  373.943215][ T8622] usb 2-1: SerialNumber: syz
[  373.959223][ T8622] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  373.997878][ T8622] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  374.082732][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.095589][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.096217][   T24] usb 3-1: Using ep0 maxpacket: 8
[  374.111644][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.121464][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.131454][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  374.154710][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  374.179117][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  374.204425][ T8622] usb 2-1: USB disconnect, device number 27
[  374.210793][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  374.238014][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  374.265306][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.442780][ T9708] udevd[9708]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  374.490678][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  374.496147][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  374.548176][   T24] usb 3-1: usb_control_msg returned -71
[  374.554514][   T24] usbtmc 3-1:16.0: can't read capabilities
[  374.605464][   T24] usb 3-1: USB disconnect, device number 43
[  374.658994][T10774] Invalid argument reading file caps for ./file0
[  374.669269][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'.
[  374.680408][T10774] netlink: 'syz.4.1290': attribute type 21 has an invalid length.
[  374.689211][T10774] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1290'.
[  374.701528][T10774] netlink: 'syz.4.1290': attribute type 4 has an invalid length.
[  374.710997][T10774] netlink: 'syz.4.1290': attribute type 3 has an invalid length.
[  374.718904][T10774] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1290'.
[  375.096250][   T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  375.246235][   T24] usb 5-1: device descriptor read/64, error -71
[  375.296174][ T8622] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  375.426137][ T8622] usb 2-1: device descriptor read/64, error -71
[  375.496175][   T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  375.626876][   T24] usb 5-1: device descriptor read/64, error -71
[  375.666244][ T8622] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  375.737556][   T24] usb usb5-port1: attempt power cycle
[  375.796255][ T8622] usb 2-1: device descriptor read/64, error -71
[  375.910781][ T8622] usb usb2-port1: attempt power cycle
[  376.076142][   T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  376.097370][   T24] usb 5-1: device descriptor read/8, error -71
[  376.217610][ T2175] usbhid 6-1:0.0: can't add hid device: -71
[  376.231628][ T2175] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  376.258862][ T8622] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  376.269808][ T2175] usb 6-1: USB disconnect, device number 64
[  376.286115][ T8626] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  376.297719][ T8622] usb 2-1: device descriptor read/8, error -71
[  376.299355][T10790] team_slave_0: entered promiscuous mode
[  376.313171][T10790] team_slave_1: entered promiscuous mode
[  376.320439][T10790] netlink: 'syz.5.1296': attribute type 10 has an invalid length.
[  376.330081][T10790] team_slave_0: left promiscuous mode
[  376.336573][   T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  376.345305][T10790] team_slave_1: left promiscuous mode
[  376.356916][   T24] usb 5-1: device descriptor read/8, error -71
[  376.382005][T10790] team0 (unregistering): Port device team_slave_0 removed
[  376.398157][T10790] team0 (unregistering): Port device team_slave_1 removed
[  376.446220][ T8626] usb 3-1: Using ep0 maxpacket: 32
[  376.453769][ T8626] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.467951][   T24] usb usb5-port1: unable to enumerate USB device
[  376.480281][ T8626] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  376.490779][ T8626] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  376.500533][ T8626] usb 3-1: Product: syz
[  376.504912][ T8626] usb 3-1: Manufacturer: syz
[  376.511312][ T8626] usb 3-1: SerialNumber: syz
[  376.529436][ T8626] usb 3-1: config 0 descriptor??
[  376.546301][ T8622] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  376.587620][ T8622] usb 2-1: device descriptor read/8, error -71
[  376.697816][ T8622] usb usb2-port1: unable to enumerate USB device
[  376.749365][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.759508][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.771533][ T5845] usb 3-1: USB disconnect, device number 44
[  376.796312][ T5850] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  376.946272][ T5850] usb 6-1: Using ep0 maxpacket: 16
[  376.954260][ T5850] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7
[  376.967698][ T5850] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  376.977358][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.985411][ T5850] usb 6-1: Product: syz
[  376.989831][ T5850] usb 6-1: Manufacturer: syz
[  376.994483][ T5850] usb 6-1: SerialNumber: syz
[  377.215764][ T5850] usb 6-1: 1:1 : bogus bTerminalLink 2
[  377.248389][ T5850] usb 6-1: USB disconnect, device number 65
[  377.287409][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.346258][ T5850] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  378.511562][ T5850] usb 5-1: Using ep0 maxpacket: 16
[  378.518244][  T808] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  378.532246][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.549388][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  378.561573][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  378.572047][ T5850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  378.584343][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.602088][ T5850] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  378.612931][ T5850] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  378.626027][ T5850] usb 5-1: Manufacturer: syz
[  378.635018][ T5850] usb 5-1: config 0 descriptor??
[  378.698521][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.710623][  T808] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  378.721382][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.735532][  T808] usb 2-1: config 0 descriptor??
[  378.833167][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.936205][ T5850] rc_core: IR keymap rc-hauppauge not found
[  378.942371][ T5850] Registered IR keymap rc-empty
[  378.949791][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  378.976260][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  378.999945][ T5850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  379.014368][ T5850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input65
[  379.030336][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.056308][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.096255][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.116234][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.136154][ T5845] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[  379.143968][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.155693][  T808] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor
[  379.172735][  T808] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0026/input/input66
[  379.196164][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.231211][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.266270][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.297518][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.317116][  T808] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  379.334023][ T5845] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  379.346255][ T5850] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  379.379179][ T5845] usb 6-1: config 0 has no interface number 0
[  379.393596][ T5845] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  379.412689][ T5850] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  379.422524][ T5850] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  379.434926][ T5845] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  379.447116][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.455632][ T5845] usb 6-1: Product: syz
[  379.470694][ T5850] usb 5-1: USB disconnect, device number 122
[  379.477197][ T5845] usb 6-1: Manufacturer: syz
[  379.483033][ T5845] usb 6-1: SerialNumber: syz
[  379.500707][ T5845] usb 6-1: config 0 descriptor??
[  379.519304][T10834] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  379.552109][ T5845] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:26:6f:68:8b:c5
[  379.556707][T10826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.583784][T10826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.617395][ T8626] usb 2-1: USB disconnect, device number 32
[  379.831829][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'.
[  379.975706][T10860] netlink: 'syz.1.1310': attribute type 10 has an invalid length.
[  379.996406][T10860] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.003941][T10860] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.376132][ T8626] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  380.486190][ T5845] usb 5-1: new low-speed USB device number 123 using dummy_hcd
[  380.507670][ T8626] usb 2-1: device descriptor read/64, error -71
[  380.638532][ T5845] usb 5-1: No LPM exit latency info found, disabling LPM.
[  380.647324][ T5845] usb 5-1: config 172 has an invalid interface number: 182 but max is 1
[  380.656180][ T5845] usb 5-1: config 172 has an invalid interface number: 190 but max is 1
[  380.665457][ T5845] usb 5-1: config 172 has no interface number 0
[  380.672214][ T5845] usb 5-1: config 172 has no interface number 1
[  380.678852][ T5845] usb 5-1: config 172 interface 182 altsetting 3 endpoint 0x3 has invalid maxpacket 64, setting to 8
[  380.689891][ T5845] usb 5-1: config 172 interface 182 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 8
[  380.701089][ T5845] usb 5-1: config 172 interface 182 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  380.712663][ T5845] usb 5-1: config 172 interface 190 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE
[  380.724591][ T5845] usb 5-1: config 172 interface 190 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 8
[  380.736415][ T5845] usb 5-1: config 172 interface 182 has no altsetting 0
[  380.743447][ T5845] usb 5-1: config 172 interface 190 has no altsetting 0
[  380.754136][ T5845] usb 5-1: string descriptor 0 read error: -22
[  380.760614][ T5845] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  380.766143][ T8626] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  380.770341][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.788796][ T5845] usb 5-1: Interface #182 referenced by multiple IADs
[  380.906300][ T8626] usb 2-1: device descriptor read/64, error -71
[  381.010203][ T8622] usb 5-1: USB disconnect, device number 123
[  381.016721][ T8626] usb usb2-port1: attempt power cycle
[  381.377081][ T8626] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  381.407779][ T8626] usb 2-1: device descriptor read/8, error -71
[  381.646779][ T8626] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  381.679213][ T8626] usb 2-1: device descriptor read/8, error -71
[  381.796605][ T8626] usb usb2-port1: unable to enumerate USB device
[  381.902067][    T9] usb 6-1: USB disconnect, device number 66
[  381.913666][    T9] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  382.006883][ T5845] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[  382.199302][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short
[  382.210170][ T5845] usb 5-1: not running at top speed; connect to a high speed hub
[  382.224757][ T5845] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  382.237355][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.251408][ T5845] usb 5-1: Product: syz
[  382.259058][ T5845] usb 5-1: Manufacturer: syz
[  382.265021][ T5845] usb 5-1: SerialNumber: syz
[  382.322668][T10894] nvme_fabrics: missing parameter 'transport=%s'
[  382.332647][T10894] nvme_fabrics: missing parameter 'nqn=%s'
[  382.501908][ T5845] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  382.516586][ T5845] usb 5-1: MIDIStreaming interface descriptor not found
[  382.650318][ T5845] usb 5-1: USB disconnect, device number 124
[  383.406147][ T5845] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  383.516175][ T8626] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  383.526135][    T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  383.569236][ T5845] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  383.577357][ T5845] usb 6-1: config 1 has no interface number 0
[  383.583801][ T5845] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  383.594486][ T5845] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32
[  383.606934][ T5845] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  383.616139][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.624128][ T5845] usb 6-1: Product: syz
[  383.628578][ T5845] usb 6-1: Manufacturer: syz
[  383.634175][ T5845] usb 6-1: SerialNumber: syz
[  383.642703][T10923] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  383.650468][T10923] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  383.660032][ T5845] usb 6-1: Error in usbnet_get_endpoints (-22)
[  383.668349][ T8626] usb 2-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config
[  383.687550][ T8626] usb 2-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c
[  383.697953][    T9] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  383.697966][ T8626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.697990][ T8626] usb 2-1: Product: syz
[  383.707676][    T9] usb 5-1: config 0 has no interface number 0
[  383.715638][ T8626] usb 2-1: Manufacturer: syz
[  383.720176][    T9] usb 5-1: config 0 interface 3 altsetting 213 endpoint 0xD has invalid maxpacket 512, setting to 64
[  383.725161][ T8626] usb 2-1: SerialNumber: syz
[  383.730013][    T9] usb 5-1: config 0 interface 3 has no altsetting 0
[  383.757402][    T9] usb 5-1: New USB device found, idVendor=05c6, idProduct=9078, bcdDevice=21.53
[  383.766738][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.775059][    T9] usb 5-1: Product: syz
[  383.779474][    T9] usb 5-1: Manufacturer: syz
[  383.784230][    T9] usb 5-1: SerialNumber: syz
[  383.792627][    T9] usb 5-1: config 0 descriptor??
[  383.958362][T10927] netlink: 'syz.1.1319': attribute type 1 has an invalid length.
[  383.966460][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'.
[  383.989237][ T8626] gspca_main: kinect-2.14.0 probing 045e:02ae
[  384.012182][ T8626] usb 2-1: USB disconnect, device number 37
[  384.034254][    T9] usb 5-1: USB disconnect, device number 125
[  384.221526][   T24] usb 6-1: USB disconnect, device number 67
[  384.676266][   T24] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  384.846163][   T24] usb 6-1: Using ep0 maxpacket: 16
[  384.852384][T10954] openvswitch: netlink: Actions may not be safe on all matching packets
[  384.853123][   T24] usb 6-1: config 8 has an invalid interface number: 206 but max is 0
[  384.872057][   T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  384.884016][   T24] usb 6-1: config 8 has no interface number 0
[  384.891321][   T24] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  384.903418][   T24] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  384.914843][   T24] usb 6-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  384.928280][   T24] usb 6-1: config 8 interface 206 has no altsetting 0
[  384.937274][   T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  384.946567][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.954565][   T24] usb 6-1: Product: syz
[  384.958841][   T24] usb 6-1: Manufacturer: syz
[  384.964036][   T24] usb 6-1: SerialNumber: syz
[  385.096414][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  385.178959][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'.
[  385.191790][   T24] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected
[  385.202667][   T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  385.213363][   T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  385.247085][    T9] usb 2-1: Using ep0 maxpacket: 16
[  385.268794][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.284015][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  385.295320][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  385.305546][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  385.316481][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  385.325128][T10961] �x9�: renamed from bridge_slave_0 (while UP)
[  385.330652][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.341551][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.354198][    T9] usb 2-1: string descriptor 0 read error: -71
[  385.368730][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.379255][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.393135][    T9] usb 2-1: can't set config #1, error -71
[  385.418533][   T24] usb 6-1: USB disconnect, device number 68
[  385.418544][    T9] usb 2-1: USB disconnect, device number 38
[  385.454116][   T24] garmin_gps 6-1:8.206: device disconnected
[  385.696274][ T5845] usb 5-1: new full-speed USB device number 126 using dummy_hcd
[  385.849490][ T5845] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  385.858682][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.866957][ T5845] usb 5-1: Product: syz
[  385.876088][ T5845] usb 5-1: Manufacturer: syz
[  385.886142][ T5845] usb 5-1: SerialNumber: syz
[  385.898132][ T5845] usb 5-1: config 0 descriptor??
[  385.907858][ T5845] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  386.166726][   T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  386.316184][   T24] usb 2-1: Using ep0 maxpacket: 8
[  386.326506][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  386.335664][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  386.344131][   T24] usb 2-1: Product: syz
[  386.348583][   T24] usb 2-1: Manufacturer: syz
[  386.353327][   T24] usb 2-1: SerialNumber: syz
[  386.361815][   T24] usb 2-1: config 0 descriptor??
[  386.374585][   T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  386.500317][T10978] vivid-000: disconnect
[  386.756143][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  386.779704][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.788894][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.921468][    T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  386.930944][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.939747][    T9] usb 3-1: Product: syz
[  386.944285][    T9] usb 3-1: Manufacturer: syz
[  386.949095][    T9] usb 3-1: SerialNumber: syz
[  387.011058][   T24] gspca_sn9c2028: read1 error -71
[  387.027008][   T24] gspca_sn9c2028: read1 error -71
[  387.040261][   T24] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71
[  387.054615][   T24] usb 2-1: USB disconnect, device number 39
[  387.197370][T10987] vivid-000: reconnect
[  387.204859][    T9] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[  387.232088][    T9] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  387.251914][    T9] usb 3-1: USB disconnect, device number 45
[  387.289441][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1339'.
[  387.596195][    T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  387.701658][T11002] netlink: 9872 bytes leftover after parsing attributes in process `syz.5.1343'.
[  387.736311][    T9] usb 3-1: device descriptor read/64, error -71
[  387.846135][ T8622] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  387.976158][    T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  388.009939][ T8622] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  388.019628][ T8622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.033517][ T8622] usb 2-1: config 0 descriptor??
[  388.041918][ T8622] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  388.051957][ T8622] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  388.116179][    T9] usb 3-1: device descriptor read/64, error -71
[  388.227720][    T9] usb usb3-port1: attempt power cycle
[  388.296156][ T8622] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  388.446162][ T8622] usb 6-1: Using ep0 maxpacket: 8
[  388.453663][ T8622] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  388.466699][ T8622] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  388.476277][ T8622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.484509][ T8622] usb 6-1: Product: syz
[  388.488759][ T8622] usb 6-1: Manufacturer: syz
[  388.493449][ T8622] usb 6-1: SerialNumber: syz
[  388.505452][ T8622] ch9200 6-1:2.0: probe with driver ch9200 failed with error -22
[  388.566336][    T9] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  388.588470][    T9] usb 3-1: device descriptor read/8, error -71
[  388.706178][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.715840][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.725869][ T8622] usb 6-1: USB disconnect, device number 69
[  388.836301][    T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  388.856771][    T9] usb 3-1: device descriptor read/8, error -71
[  388.966397][    T9] usb usb3-port1: unable to enumerate USB device
[  389.576117][ T8622] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  389.706325][ T8622] usb 6-1: device descriptor read/64, error -71
[  389.753578][ T5845] gspca_stk1135: reg_w 0x1b err -71
[  389.762396][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.769591][ T5845] gspca_stk1135: Sensor write failed
[  389.775649][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.782398][ T5845] gspca_stk1135: Sensor write failed
[  389.788280][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.794648][ T5845] gspca_stk1135: Sensor read failed
[  389.799976][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.808150][ T5845] gspca_stk1135: Sensor read failed
[  389.813498][ T5845] gspca_stk1135: Detected sensor type unknown (0x0)
[  389.820295][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.826969][ T5845] gspca_stk1135: Sensor read failed
[  389.832317][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.838703][ T5845] gspca_stk1135: Sensor read failed
[  389.844104][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.850730][ T5845] gspca_stk1135: Sensor write failed
[  389.856273][ T5845] gspca_stk1135: serial bus timeout: status=0x00
[  389.862699][ T5845] gspca_stk1135: Sensor write failed
[  389.868208][ T5845] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  389.880596][ T5845] usb 5-1: USB disconnect, device number 126
[  389.956489][ T8622] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  390.086161][ T8622] usb 6-1: device descriptor read/64, error -71
[  390.206550][ T8622] usb usb6-port1: attempt power cycle
[  390.366295][T11020] netlink: 'syz.2.1349': attribute type 58 has an invalid length.
[  390.381720][T11020] netlink: 'syz.2.1349': attribute type 58 has an invalid length.
[  390.391675][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1349'.
[  390.497104][T11026] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1352'.
[  390.556231][ T8622] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  390.577211][ T8622] usb 6-1: device descriptor read/8, error -71
[  390.609527][   T24] usb 2-1: USB disconnect, device number 40
[  390.624556][   T24] ftdi_sio 2-1:0.0: device disconnected
[  390.686167][ T5845] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  390.796190][ T8626] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  390.837368][ T8622] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  390.840379][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.856266][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.866120][ T5845] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  390.867377][ T8622] usb 6-1: device descriptor read/8, error -71
[  390.875176][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.879139][ T5845] usb 5-1: config 0 descriptor??
[  390.978027][ T8626] usb 3-1: unable to get BOS descriptor or descriptor too short
[  390.995574][ T8626] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.008318][ T8622] usb usb6-port1: unable to enumerate USB device
[  391.015809][ T8626] usb 3-1: config 1 interface 0 has no altsetting 0
[  391.027172][ T8626] usb 3-1: string descriptor 0 read error: -22
[  391.034117][ T8626] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.40
[  391.044641][ T8626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.120668][ T5845] usbhid 5-1:0.0: can't add hid device: -71
[  391.136186][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  391.147945][   T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  391.160825][ T5845] usb 5-1: USB disconnect, device number 127
[  391.320540][   T24] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  391.329930][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.339500][   T24] usb 2-1: Product: syz
[  391.343768][   T24] usb 2-1: Manufacturer: syz
[  391.348638][   T24] usb 2-1: SerialNumber: syz
[  391.357065][   T24] usb 2-1: config 0 descriptor??
[  391.367723][   T24] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  391.507300][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.520526][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.577834][T11037] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  391.742450][T11068] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1360'.
[  392.206185][ T8622] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  392.370750][ T8622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.398314][ T8622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.428498][   T24] gspca_stk1135: reg_w 0x7 err -71
[  392.439207][ T8622] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  392.459135][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.469096][ T8622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.470978][   T24] gspca_stk1135: Sensor write failed
[  392.471014][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471027][   T24] gspca_stk1135: Sensor write failed
[  392.471095][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471108][   T24] gspca_stk1135: Sensor read failed
[  392.471139][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471151][   T24] gspca_stk1135: Sensor read failed
[  392.471161][   T24] gspca_stk1135: Detected sensor type unknown (0x0)
[  392.471224][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471236][   T24] gspca_stk1135: Sensor read failed
[  392.471267][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471279][   T24] gspca_stk1135: Sensor read failed
[  392.471310][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471322][   T24] gspca_stk1135: Sensor write failed
[  392.471379][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  392.471391][   T24] gspca_stk1135: Sensor write failed
[  392.471508][   T24] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  392.475111][   T24] usb 2-1: USB disconnect, device number 41
[  392.590434][ T8622] usb 5-1: config 0 descriptor??
[  392.756299][  T808] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  392.886163][  T808] usb 6-1: device descriptor read/64, error -71
[  393.007112][ T8622] hid_parser_main: 11 callbacks suppressed
[  393.007138][ T8622] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0
[  393.021752][ T8622] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0
[  393.029320][ T8622] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0
[  393.037242][ T8622] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0
[  393.044748][ T8622] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0
[  393.057645][ T8622] playstation 0003:054C:0DF2.0027: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  393.136118][  T808] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  393.226181][ T5850] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  393.266167][  T808] usb 6-1: device descriptor read/64, error -71
[  393.275456][ T8622] playstation 0003:054C:0DF2.0027: Invalid byte count transferred, expected 20 got 0
[  393.285769][ T8622] playstation 0003:054C:0DF2.0027: Failed to retrieve DualSense pairing info: -22
[  393.295199][ T8622] playstation 0003:054C:0DF2.0027: Failed to get MAC address from DualSense
[  393.305593][ T8622] playstation 0003:054C:0DF2.0027: Failed to create dualsense.
[  393.315429][ T8622] playstation 0003:054C:0DF2.0027: probe with driver playstation failed with error -22
[  393.376109][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  393.381765][  T808] usb usb6-port1: attempt power cycle
[  393.391742][ T5850] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  393.402287][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  393.418467][ T5850] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  393.428049][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.436138][ T5850] usb 2-1: Product: syz
[  393.440427][ T5850] usb 2-1: Manufacturer: syz
[  393.445169][ T5850] usb 2-1: SerialNumber: syz
[  393.452655][ T5850] usb 2-1: config 0 descriptor??
[  393.465587][ T5850] appledisplay 2-1:0.0: Could not find int-in endpoint
[  393.474174][ T5850] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  393.542538][T11031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.555126][T11065] netlink: 'syz.2.1353': attribute type 2 has an invalid length.
[  393.572936][ T5850] usb 5-1: USB disconnect, device number 2
[  393.683348][T11079] syzkaller1: entered promiscuous mode
[  393.690373][ T8626] usbhid 3-1:1.0: can't add hid device: -71
[  393.701537][T11079] syzkaller1: entered allmulticast mode
[  393.707854][ T8626] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  393.738959][  T808] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  393.741731][ T8622] usb 2-1: USB disconnect, device number 42
[  393.754633][ T8626] usb 3-1: USB disconnect, device number 50
[  393.816561][  T808] usb 6-1: device descriptor read/8, error -71
[  393.831107][    T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  393.859429][    T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  393.870451][    T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  393.878480][    T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  393.897335][    T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  393.912791][    T9] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.43 Device [syz1] on syz1
[  393.974856][T11085] fido_id[11085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  394.000407][T11087] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1366'.
[  394.033605][T11087] 9pnet_fd: p9_fd_create_tcp (11087): problem connecting socket to 127.0.0.1
[  394.067178][  T808] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  394.086958][  T808] usb 6-1: device descriptor read/8, error -71
[  394.197823][  T808] usb usb6-port1: unable to enumerate USB device
[  394.536151][ T8626] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  394.710181][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.721487][ T8626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.731403][ T8626] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  394.740494][ T8626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.750908][ T8626] usb 5-1: config 0 descriptor??
[  394.916172][ T8622] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  394.960868][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.963493][ T8626] cp2112 0003:10C4:EA90.0029: item fetching failed at offset 5/7
[  394.971303][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.982729][ T8626] cp2112 0003:10C4:EA90.0029: parse failed
[  394.991838][ T8626] cp2112 0003:10C4:EA90.0029: probe with driver cp2112 failed with error -22
[  395.046308][ T8622] usb 2-1: device descriptor read/64, error -71
[  395.164103][  T808] usb 5-1: USB disconnect, device number 3
[  395.286223][ T8622] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  395.436158][ T8622] usb 2-1: device descriptor read/64, error -71
[  395.547614][ T8622] usb usb2-port1: attempt power cycle
[  395.896248][ T8622] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  395.903976][   T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  395.936869][ T8622] usb 2-1: device descriptor read/8, error -71
[  396.036199][  T808] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  396.066303][   T24] usb 6-1: Using ep0 maxpacket: 8
[  396.074594][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.085259][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  396.094509][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  396.106047][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  396.119399][   T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  396.129509][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.144602][   T24] hub 6-1:1.0: bad descriptor, ignoring hub
[  396.150816][   T24] hub 6-1:1.0: probe with driver hub failed with error -5
[  396.158723][   T24] cdc_wdm 6-1:1.0: skipping garbage
[  396.164069][   T24] cdc_wdm 6-1:1.0: skipping garbage
[  396.171423][   T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  396.180261][   T24] cdc_wdm 6-1:1.0: Unknown control protocol
[  396.186147][  T808] usb 5-1: Using ep0 maxpacket: 8
[  396.186994][ T8622] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  396.194406][  T808] usb 5-1: unable to get BOS descriptor or descriptor too short
[  396.211316][  T808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.222309][  T808] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  396.232869][ T8622] usb 2-1: device descriptor read/8, error -71
[  396.235213][  T808] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  396.249014][  T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.257232][  T808] usb 5-1: Product: syz
[  396.261617][  T808] usb 5-1: Manufacturer: syz
[  396.266541][  T808] usb 5-1: SerialNumber: syz
[  396.349624][ T8622] usb usb2-port1: unable to enumerate USB device
[  396.354758][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.368116][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.486513][    T9] usb 6-1: USB disconnect, device number 78
[  396.558942][  T808] usb 5-1: USB disconnect, device number 4
[  396.597643][ T9708] udevd[9708]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  396.846232][    T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  396.996158][    T9] usb 6-1: Using ep0 maxpacket: 16
[  397.003888][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  397.017537][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  397.028645][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024
[  397.041257][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  397.052710][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024
[  397.072019][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  397.085721][    T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  397.097594][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.114028][    T9] usb 6-1: Product: syz
[  397.123281][    T9] usb 6-1: Manufacturer: syz
[  397.133095][    T9] usb 6-1: SerialNumber: syz
[  397.141537][    T9] usb 6-1: config 0 descriptor??
[  397.184422][    T9] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected
[  397.184522][    C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71)
[  397.197782][    C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71)
[  397.406146][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  397.578068][   T24] usb 5-1: Using ep0 maxpacket: 8
[  397.585395][T11104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.591063][   T24] usb 5-1: config 5 has an invalid interface number: 179 but max is 0
[  397.605650][T11104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.619512][   T24] usb 5-1: config 5 has no interface number 0
[  397.636174][   T24] usb 5-1: config 5 interface 179 altsetting 11 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  397.639384][    T9] usb 6-1: USB disconnect, device number 79
[  397.665737][   T24] usb 5-1: config 5 interface 179 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  397.691718][   T24] usb 5-1: config 5 interface 179 altsetting 11 endpoint 0xA has invalid maxpacket 1536, setting to 64
[  397.699339][    T9] mcba_usb 6-1:0.0 can0: device disconnected
[  397.737291][   T24] usb 5-1: config 5 interface 179 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  397.772479][   T24] usb 5-1: config 5 interface 179 altsetting 11 has a duplicate endpoint with address 0x6, skipping
[  397.817808][   T24] usb 5-1: config 5 interface 179 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16
[  397.857711][   T24] usb 5-1: config 5 interface 179 altsetting 11 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  397.890384][   T24] usb 5-1: config 5 interface 179 altsetting 11 has a duplicate endpoint with address 0x9, skipping
[  397.926555][   T24] usb 5-1: config 5 interface 179 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  397.976090][   T24] usb 5-1: config 5 interface 179 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  398.024324][   T24] usb 5-1: config 5 interface 179 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[  398.056706][   T24] usb 5-1: config 5 interface 179 altsetting 11 has a duplicate endpoint with address 0xD, skipping
[  398.086093][   T24] usb 5-1: config 5 interface 179 has no altsetting 0
[  398.115751][   T24] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=bd.f4
[  398.128773][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.162629][   T24] usb 5-1: Product: ࠠ
[  398.171898][   T24] usb 5-1: Manufacturer: 팕㋜昲깱⁷ᐵᔏ늠䷏覘瞅ﱛߓ駒✞쵶䚻䙀⏡䖅郐୐號鏶骊ܬଋ⛙耸迉ퟟㆱ礁ﰥ嬹⑋詁꿁鎜醱廰䒶凉璚Ⅷ࣐쎗䘸⨗᧭곴ꁃᕯྗ蝬쉄到裯꼉䷡圪轖䋽ᚗ득༽喫裑外妱듼䜙잕倻퀖暟様侅ꋻ윎軵ኖ멉뒯䧾ఈ둜瑌貀䛭ꭻ댡᐀嗃嗇
[  398.254879][   T24] usb 5-1: SerialNumber: 犧꘸엓㪄㇥姡ሶ濋ᅧ೫ؗቴ濋䒺﫢ﾰ頦Ⓞ瓏﹘慁并挖㩁쏭맓ﾅꄪ㶭᷈퓰盖듭ξ
[  398.318214][T11112] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  398.329824][T11112] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  398.570141][   T24] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  398.660157][   T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  398.683373][   T24] dib0700: firmware download failed at 7 with -22
[  398.752065][   T24] usb 5-1: USB disconnect, device number 5
[  398.789659][    T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  398.958248][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  398.985511][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  399.012110][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.033863][    T9] usb 2-1: config 0 descriptor??
[  399.057333][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  399.125915][T11148] syz.5.1382 (11148): drop_caches: 2
[  399.136115][ T8626] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  399.287767][ T8626] usb 6-1: device descriptor read/64, error -71
[  399.453661][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  399.536516][ T8626] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  399.670667][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  399.687219][ T8626] usb 6-1: device descriptor read/64, error -71
[  399.699494][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  399.712366][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  399.723036][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  399.739003][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  399.756596][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  399.806996][ T8626] usb usb6-port1: attempt power cycle
[  399.929316][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.962199][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
			
			
		

		
			
		

		



	
		
		




syzkaller
syzkaller login: [  401.406234][ T8622] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  401.426758][ T8622] usb 5-1: device descriptor read/8, error -71
[  401.511125][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  401.521574][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  401.530171][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  401.537400][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  401.544472][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  401.553186][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  401.560076][T11190] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1390'.
[  401.574891][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  401.582590][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  401.599124][    T9] pwc: Registered as video103.
[  401.612353][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67
[  401.626591][   T24] usb 3-1: device descriptor read/64, error -71
[  401.649026][    T9] usb 2-1: USB disconnect, device number 47
[  401.666405][ T8622] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  401.708342][ T8622] usb 5-1: device descriptor read/8, error -71
[  401.826604][ T8622] usb usb5-port1: unable to enumerate USB device
[  401.870990][T11199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.879104][T11199] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.886391][   T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  401.894939][T11199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.907162][T11199] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.095010][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  402.097134][T11203] overlayfs: missing 'lowerdir'
[  402.107686][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.118039][   T24] usb 3-1: Product: syz
[  402.123131][   T24] usb 3-1: Manufacturer: syz
[  402.129030][   T24] usb 3-1: SerialNumber: syz
[  402.137416][T11203] 9p: Bad value for 'wfdno'
[  402.366408][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  402.378942][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  402.536516][ T5850] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[  402.567308][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.577157][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.600690][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  402.613073][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  402.625527][   T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  402.646490][   T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  402.649792][T11217] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  402.663912][   T24] usb 3-1: USB disconnect, device number 52
[  402.677466][ T5850] usb 6-1: device descriptor read/64, error -71
[  402.715906][    C0] 
[  402.718270][    C0] ================================
[  402.723368][    C0] WARNING: inconsistent lock state
[  402.728468][    C0] syzkaller #0 Tainted: G             L     
[  402.734611][    C0] --------------------------------
[  402.739744][    C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  402.746688][    C0] syz.2.1397/11217 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  402.753097][    C0] ffff88803175d068 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x5e/0x180
[  402.762333][    C0] {HARDIRQ-ON-W} state was registered at:
[  402.768052][    C0]   lock_acquire+0x106/0x350
[  402.772682][    C0]   _raw_spin_lock_bh+0x36/0x50
[  402.777620][    C0]   waveform_ao_cancel+0x8d/0x120
[  402.782737][    C0]   comedi_close+0x27e/0x5e0
[  402.787330][    C0]   __fput+0x44f/0xa60
[  402.791400][    C0]   task_work_run+0x1d9/0x270
[  402.796083][    C0]   do_exit+0x70f/0x22c0
[  402.800389][    C0]   do_group_exit+0x21b/0x2d0
[  402.805088][    C0]   get_signal+0x1284/0x1330
[  402.809787][    C0]   arch_do_signal_or_restart+0xbc/0x830
[  402.815557][    C0]   exit_to_user_mode_loop+0x86/0x480
[  402.820987][    C0]   do_syscall_64+0x33e/0xf80
[  402.825777][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.831763][    C0] irq event stamp: 1724
[  402.835946][    C0] hardirqs last  enabled at (1723): [<ffffffff8bbd1830>] _raw_spin_unlock_irqrestore+0x30/0x80
[  402.846376][    C0] hardirqs last disabled at (1724): [<ffffffff8bba38c3>] common_interrupt+0x13/0xe0
[  402.855851][    C0] softirqs last  enabled at (1446): [<ffffffff8188cf0a>] __irq_exit_rcu+0xca/0x220
[  402.865148][    C0] softirqs last disabled at (1287): [<ffffffff8188cf0a>] __irq_exit_rcu+0xca/0x220
[  402.874787][    C0] 
[  402.874787][    C0] other info that might help us debug this:
[  402.882869][    C0]  Possible unsafe locking scenario:
[  402.882869][    C0] 
[  402.890422][    C0]        CPU0
[  402.893699][    C0]        ----
[  402.897080][    C0]   lock(&dev->spinlock);
[  402.901408][    C0]   <Interrupt>
[  402.904871][    C0]     lock(&dev->spinlock);
[  402.909379][    C0] 
[  402.909379][    C0]  *** DEADLOCK ***
[  402.909379][    C0] 
[  402.917519][    C0] 3 locks held by syz.2.1397/11217:
[  402.922720][    C0]  #0: ffff888034f830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  402.932466][    C0]  #1: ffff888140470c70 (&buf->lock){+.+.}-{4:4}, at: tiocsti+0x1bd/0x2a0
[  402.941010][    C0]  #2: ffff888034f832c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x84/0x12e0
[  402.951834][    C0] 
[  402.951834][    C0] stack backtrace:
[  402.957826][    C0] CPU: 0 UID: 0 PID: 11217 Comm: syz.2.1397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.957869][    C0] Tainted: [L]=SOFTLOCKUP
[  402.957876][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  402.957887][    C0] Call Trace:
[  402.957895][    C0]  <IRQ>
[  402.957903][    C0]  dump_stack_lvl+0xe8/0x150
[  402.957929][    C0]  print_usage_bug+0x28b/0x2e0
[  402.957946][    C0]  mark_lock_irq+0x410/0x420
[  402.957962][    C0]  mark_lock+0x115/0x190
[  402.957977][    C0]  __lock_acquire+0x661/0x2cf0
[  402.957992][    C0]  ? __asan_memset+0x22/0x50
[  402.958010][    C0]  ? das16m1_interrupt+0x5e/0x180
[  402.958023][    C0]  lock_acquire+0x106/0x350
[  402.958036][    C0]  ? das16m1_interrupt+0x5e/0x180
[  402.958051][    C0]  _raw_spin_lock+0x2e/0x40
[  402.958063][    C0]  ? das16m1_interrupt+0x5e/0x180
[  402.958075][    C0]  das16m1_interrupt+0x5e/0x180
[  402.958086][    C0]  ? __pfx_das16m1_interrupt+0x10/0x10
[  402.958101][    C0]  __handle_irq_event_percpu+0x216/0x9a0
[  402.958115][    C0]  handle_irq_event+0x8b/0x1e0
[  402.958127][    C0]  ? handle_edge_irq+0x229/0x9f0
[  402.958138][    C0]  handle_edge_irq+0x23b/0x9f0
[  402.958150][    C0]  __common_interrupt+0x141/0x1f0
[  402.958164][    C0]  common_interrupt+0xb6/0xe0
[  402.958175][    C0]  </IRQ>
[  402.958179][    C0]  <TASK>
[  402.958183][    C0]  asm_common_interrupt+0x26/0x40
[  402.958195][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  402.958209][    C0] Code: f7 e8 bd fd e5 f5 f7 c3 00 02 00 00 74 05 e8 60 69 11 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b4 96 d7 f5 65 8b 05 dd a7 84 07 85 c0 74 18 5b 41 5e e9 41 48
[  402.958219][    C0] RSP: 0018:ffffc9000ccdfbf8 EFLAGS: 00000206
[  402.958231][    C0] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000080000001
[  402.958238][    C0] RDX: 0000000000000007 RSI: ffffffff8e106c7e RDI: 0000000000000001
[  402.958245][    C0] RBP: 0000000000000000 R08: ffffffff9033bef7 R09: 1ffffffff20677de
[  402.958253][    C0] R10: dffffc0000000000 R11: fffffbfff20677df R12: ffffffff9a82c120
[  402.958260][    C0] R13: dffffc0000000000 R14: ffffffff9a82bfe0 R15: ffffffff8f231860
[  402.958272][    C0]  uart_flush_chars+0x2e8/0x6c0
[  402.958284][    C0]  ? __pfx_uart_flush_chars+0x10/0x10
[  402.958294][    C0]  n_tty_receive_buf_common+0xc8c/0x12e0
[  402.958315][    C0]  ? __pfx_n_tty_receive_buf+0x10/0x10
[  402.958328][    C0]  tiocsti+0x218/0x2a0
[  402.958338][    C0]  ? __pfx_tiocsti+0x10/0x10
[  402.958348][    C0]  ? __fget_files+0x2a/0x420
[  402.958361][    C0]  ? __fget_files+0x3a0/0x420
[  402.958373][    C0]  ? __fget_files+0x2a/0x420
[  402.958386][    C0]  tty_ioctl+0x626/0xde0
[  402.958396][    C0]  ? __pfx_tty_ioctl+0x10/0x10
[  402.958406][    C0]  __se_sys_ioctl+0xfc/0x170
[  402.958417][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.958427][    C0]  do_syscall_64+0x15f/0xf80
[  402.958441][    C0]  ? trace_irq_disable+0x3b/0x140
[  402.958453][    C0]  ? clear_bhb_loop+0x40/0x90
[  402.958465][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.958475][    C0] RIP: 0033:0x7efc6b19c819
[  402.958485][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.958494][    C0] RSP: 002b:00007efc6c0b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  402.958504][    C0] RAX: ffffffffffffffda RBX: 00007efc6b415fa0 RCX: 00007efc6b19c819
[  402.958512][    C0] RDX: 0000200000000200 RSI: 0000000000005412 RDI: 0000000000000003
[  402.958519][    C0] RBP: 00007efc6b232c91 R08: 0000000000000000 R09: 0000000000000000
[  402.958526][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.958532][    C0] R13: 00007efc6b416038 R14: 00007efc6b415fa0 R15: 00007ffe5dd92748
[  402.958543][    C0]  </TASK>
[  402.958625][    C0] comedi comedi0: fifo overflow
[  403.332572][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  403.476090][ T5850] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[  403.486176][    T9] usb 2-1: Using ep0 maxpacket: 32
[  403.492516][    T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  403.500971][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  403.512008][    T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  403.523095][    T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  403.533047][    T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  403.546665][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  403.555246][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  403.564495][    T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  403.572974][    T9] usb 2-1: Product: syz
[  403.577194][    T9] usb 2-1: Manufacturer: syz
[  403.581890][    T9] usb 2-1: SerialNumber: syz
[  403.588188][    T9] usb 2-1: config 0 descriptor??
[  403.594869][    T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  403.605408][    T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  403.615168][ T5850] usb 6-1: device descriptor read/64, error -71
[  403.726409][ T5850] usb usb6-port1: attempt power cycle
[  404.066124][ T5850] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[  404.086534][ T5850] usb 6-1: device descriptor read/8, error -71
[  404.147027][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.155734][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.170894][   T24] usb 2-1: USB disconnect, device number 48
[  404.183386][   T24] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  404.326122][ T5850] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  404.348362][ T5850] usb 6-1: device descriptor read/8, error -71
[  404.456557][ T5850] usb usb6-port1: unable to enumerate USB device