last executing test programs:

13m29.507888185s ago: executing program 0 (id=1214):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x25, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28)
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0xffffffffffffff38, 0x0, 0x0}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x101}, @fda={0x66646185, 0x7, 0x0, 0x3d}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000440)}, 0x40}], 0x0, 0x0, 0x0})

13m29.280533614s ago: executing program 0 (id=1215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00'}) (async, rerun: 32)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040), 0x37) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000000c0)={0x30, r2, 0x403, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x76, 0x12}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24004002)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800049, &(0x7f00000001c0)='discard')

13m28.478306383s ago: executing program 0 (id=1216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) (async)
write$tun(r0, &(0x7f0000000280)=ANY=[], 0x149) (async)
pipe(&(0x7f0000000d00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x70}}], 0x1, 0x2000c044) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0xfffffffd) (async)
r7 = socket$inet(0xa, 0x80000, 0xfff)
listen(r7, 0xfffffffd) (async)
r8 = socket$inet(0xa, 0x801, 0x84)
listen(r8, 0x8) (async)
listen(0xffffffffffffffff, 0x1) (async)
r9 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
listen(r10, 0x3) (async)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000100)={0x0, 0x10, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0]})
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) (async)
r11 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$bt_hci(r11, 0x0, 0x3, 0x0, &(0x7f0000000140)) (async)
splice(r1, 0x0, r3, 0x0, 0x714f, 0x0)

13m28.33374167s ago: executing program 0 (id=1217):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0200000000000000160af3653c001ac00400020008000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9)
chroot(&(0x7f0000000040)='./file0/../file0\x00')

13m28.188217055s ago: executing program 0 (id=1218):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0xc, 0x60, {0x60, 0x7, "df06d3c27729a16122cabe2be842a55cd2bacb4d3f908392ac97ca97bf9ee83ee16b3cef7dc80c24e10d0e0d0c5a15443f8686891f03476c728883a4f533d4df555c305673f41706dba0ca01b69dc3526f5261e68655ceaf8b1bbfe793c3"}}, &(0x7f0000000100)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "fbcd12cf80ebcbe1c4fb78c5043511b6df5325eff77e18abe689f7e39775dd0821e61af07ae46817a409a25f231fe4ffd38ad7e6f0164dc10c5e861dbd16eaaa2251cd683625b38dd96b5d7663bffb265c9e8be96e6e57f89250f14fe175adbb79a61a7f3c167990fe73305ba0f25ab853a6d11633423a2ac489a9a20cfae312f18956d11a6fe2fa7eac5a3e40fcd0223afe7354545718b1ccd390aedb20791f07720214bddaae0804147cfc6111c5"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0x16, 0xe9, "ddaed8fa04a954d121402b2665f63cc821f0f2823973f8a1a72ca582944ab9012efa92446a6c1a207b32941ac02f1f5f806c78984a17dbf43d561963929d3c0a2571e3c56a06aa94a85e43c033310b80b7e55d2a3723af86e31b8b8d42f5999cae190c356530f2b0ae5d09601395332abb32105e21b6bcea261bebb8190c24e70c9054d6ffbb33cf24de9fbe45eb2801456cccc0e5f783b01dcb773b98ff1cf9d4427c28d4286956452b95070338a51e2fbd1807c0597979c1b26a20a08731213efa69c17f2de717cb508661b1506d5ffda601d664b04d90d22f028ae0d6177074e5f762a09e6fffd7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000440)={0x40, 0xa0, 0x4}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "844a3001fdc8e2d24841a4f809a233cd00b6912c2ea45e3bd67b9d00b6ef832d51b7b126a2672c0d68fa4553a13e93"}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000003280)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8b3fd345, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x18, 0x0, 0x0, &(0x7f0000000500)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}}], 0x1, 0x880)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
close_range(r2, r3, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="201117"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7)

13m26.258626865s ago: executing program 0 (id=1225):
mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x6)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401"], 0x0)

13m25.891173689s ago: executing program 32 (id=1225):
mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x6)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401"], 0x0)

10m22.246630099s ago: executing program 2 (id=1963):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x8800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
pipe2(&(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r10, &(0x7f0000000040)=ANY=[], 0xffffff6a)
splice(r9, 0x0, r1, 0x0, 0x40010003, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r11 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

10m21.16744841s ago: executing program 2 (id=1964):
io_setup(0x222, &(0x7f0000000180)=<r0=>0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x5, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)})
io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000000a00)="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", 0xffffffffffffffec, 0x200}])

10m20.616303951s ago: executing program 2 (id=1968):
openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x343802)
socket$inet(0x2, 0x4000000000000001, 0x100)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10m20.226896253s ago: executing program 2 (id=1970):
r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000)
readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
r3 = socket(0x5a, 0x3, 0x7)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f00000004c0)=0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x14)
writev(r6, &(0x7f00000015c0)=[{&(0x7f0000000100)="580000001400adc927323b75e8d95023dc9132ffffff810000400e227f000001925aa80020007b00090080287f000006e809000000ff0000f02ac71002000000ffffffff00000000fb56e2011b75e6cf00575ab20d58b1eb", 0x58}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="69e335993366fca1712eab30ef4430d6cf92c64d504a4e70f6c1ea18b94ecbf9b6f7cbc025f130d7d4fabecf20253f40b3a8e258b27266b5af20bfbb53095355eb9186b848e1fe62df12ec6c77305e1399299efa2014ab9ea59b4a7dfa4dfec29746b82613a0f0fee3b6ff96872bdb44477efae8383464466dfc290cf4dd92f19a8c0674b23bff65107641247f2649b92abf9971e7e2e890152aaa30b563ccd98ca0523ba17b03f5f23049cc1f6630666c", 0xb1}], 0x3)
bind$can_raw(r4, &(0x7f0000000200)={0x1d, r2}, 0x10)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

10m19.917017836s ago: executing program 2 (id=1971):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x60080, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
ptrace(0x10, 0x1)
ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000002c0)={0x0, 0x2, 0x1, 0x2})

10m19.729053765s ago: executing program 2 (id=1972):
r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42)
lseek(r0, 0x4, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180))
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0)
syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) (async)
lseek(r0, 0x4, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r2, 0x802) (async)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) (async)

10m3.579551602s ago: executing program 33 (id=1972):
r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42)
lseek(r0, 0x4, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180))
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0)
syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) (async)
lseek(r0, 0x4, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r2, 0x802) (async)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) (async)

9m3.024100112s ago: executing program 5 (id=2220):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffff4}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x65, "9db6c009b3c34d6396fcc45a2fd3cdaff32ce95062db4e76443ea3fa42eb6649d0ae19ab88534653a3b42f7ca53952eb6c4abd45bc447177958dea122f04051341631db19ca3f5409e43e88c6dd696af425256343963fa11d0bac5ca8be5db3b6c4c2acca5"}], 0xf8, 0x4000040}, 0x40000)
syz_usb_disconnect(r0)
close(0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15, 0xc, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0xfffffffc, 0x6, 0xff, 0xfd, 0x2}})

9m0.804844298s ago: executing program 5 (id=2227):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000006000009080004865ba2f24951eeec798af22836fccad7ff0f000000000000d8d4d10001000500000000000f000700756e636f6e66696e6564000070f0f9c706cf70dd1fc4b0c2e7187a6e"], 0x34}, 0x2, 0x34005}, 0x0)

8m57.340712712s ago: executing program 5 (id=2239):
r0 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
writev(r0, &(0x7f0000001500)=[{&(0x7f0000000280)="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", 0x68c}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba727a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94363dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)

8m57.218381669s ago: executing program 5 (id=2240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r9}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1e"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x44010)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='1', 0x1}], 0x1, 0x0, 0x0, 0x48044}}], 0x1, 0x20000000)
ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
r12 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x10001, 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x7, r12})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="00020400", @ANYRES16=r1, @ANYBLOB="33fafefffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000700000066000800080005000200000014000400766c616e3000000000000000000000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0xfe9d128487f77a00}, 0xc2010)

8m56.745359376s ago: executing program 5 (id=2242):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800)

8m53.68151097s ago: executing program 5 (id=2250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'hsr0\x00'}}, 0x1e)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x220, 0x41, 0x1, 0x80002, 0x2, {0x1}, [@generic="95582c4a36af93923476728d4479d1547ad1de62c676981c7d609717388ec4ba7b8f2645b282c95d3214a0f466b0c90a378cd732adb4e375dd6f730cbb84314093d89180eee37870686a0fc509f0270ecd5f547290bce751a36672aa42d795250b24ab3d317611d97a2952494f166ead133dd22f75dd5aa74cfbbf058186935e6d970c2ae6db1652fe79afa26965640055c0ac52507c331dcc653079a1e7596af5a18a8c6dfde5c46a9f32f4d5c53bd1a09da483cdfb6e879090569539bc723543339dce25dd117ecd6ba5a2f4e1dc79654307fedfc677b70c0357fde8dfa32b85efeaa0", @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, @generic="d72e93656a590ed3ca1577e94956c9ed075c3295fcabc1", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3}, @generic="409e63b49116b0950c410a056059108a5706d6257ca65ca1f80dfa203ef7a9c9e294a125676fac49990b8d072179bcbe743653f7c6dcf4dec1b223633a04408e08f8b9d2d6459ff937ce9b182ee7bb328cdcc694a70db8b26a6c9bb28a0e5fb0eb68933c057cd10b33dc86629685ac7c7b627909f73febbe8117838bd1d383a33e99e7139deb6884fc588a56891aef338176e1197780463187570e8cf5742d18e2d10a086661fec7093c4ca0a6f5999dae3ddb3ac53233bcefc52c5fb9905ac0f27b68b8a112fbeb8649740dc4c0addce21e92cd584debe7a5ada04e66a065c0b2af736749b0e10fa2", @typed={0xb, 0x9c, 0x0, 0x0, @str='*\"\']\\]\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x24000000)
sendmmsg$unix(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}}, {{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x1}}], 0x2, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_coalesce={0xe, 0x8, 0xa2, 0x1, 0x1, 0xdd, 0x2, 0x8, 0xa9bd, 0x4, 0x9, 0x3c, 0xd, 0x7, 0x4, 0xf7f, 0x3, 0x80000100, 0x5, 0xe81, 0x5, 0x40, 0x2}})
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x400d4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'hsr0\x00'}}, 0x1e) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x220, 0x41, 0x1, 0x80002, 0x2, {0x1}, [@generic="95582c4a36af93923476728d4479d1547ad1de62c676981c7d609717388ec4ba7b8f2645b282c95d3214a0f466b0c90a378cd732adb4e375dd6f730cbb84314093d89180eee37870686a0fc509f0270ecd5f547290bce751a36672aa42d795250b24ab3d317611d97a2952494f166ead133dd22f75dd5aa74cfbbf058186935e6d970c2ae6db1652fe79afa26965640055c0ac52507c331dcc653079a1e7596af5a18a8c6dfde5c46a9f32f4d5c53bd1a09da483cdfb6e879090569539bc723543339dce25dd117ecd6ba5a2f4e1dc79654307fedfc677b70c0357fde8dfa32b85efeaa0", @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, @generic="d72e93656a590ed3ca1577e94956c9ed075c3295fcabc1", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3}, @generic="409e63b49116b0950c410a056059108a5706d6257ca65ca1f80dfa203ef7a9c9e294a125676fac49990b8d072179bcbe743653f7c6dcf4dec1b223633a04408e08f8b9d2d6459ff937ce9b182ee7bb328cdcc694a70db8b26a6c9bb28a0e5fb0eb68933c057cd10b33dc86629685ac7c7b627909f73febbe8117838bd1d383a33e99e7139deb6884fc588a56891aef338176e1197780463187570e8cf5742d18e2d10a086661fec7093c4ca0a6f5999dae3ddb3ac53233bcefc52c5fb9905ac0f27b68b8a112fbeb8649740dc4c0addce21e92cd584debe7a5ada04e66a065c0b2af736749b0e10fa2", @typed={0xb, 0x9c, 0x0, 0x0, @str='*\"\']\\]\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x24000000) (async)
sendmmsg$unix(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}}, {{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x1}}], 0x2, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_coalesce={0xe, 0x8, 0xa2, 0x1, 0x1, 0xdd, 0x2, 0x8, 0xa9bd, 0x4, 0x9, 0x3c, 0xd, 0x7, 0x4, 0xf7f, 0x3, 0x80000100, 0x5, 0xe81, 0x5, 0x40, 0x2}}) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x400d4) (async)

8m53.096844026s ago: executing program 34 (id=2250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'hsr0\x00'}}, 0x1e)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x220, 0x41, 0x1, 0x80002, 0x2, {0x1}, [@generic="95582c4a36af93923476728d4479d1547ad1de62c676981c7d609717388ec4ba7b8f2645b282c95d3214a0f466b0c90a378cd732adb4e375dd6f730cbb84314093d89180eee37870686a0fc509f0270ecd5f547290bce751a36672aa42d795250b24ab3d317611d97a2952494f166ead133dd22f75dd5aa74cfbbf058186935e6d970c2ae6db1652fe79afa26965640055c0ac52507c331dcc653079a1e7596af5a18a8c6dfde5c46a9f32f4d5c53bd1a09da483cdfb6e879090569539bc723543339dce25dd117ecd6ba5a2f4e1dc79654307fedfc677b70c0357fde8dfa32b85efeaa0", @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, @generic="d72e93656a590ed3ca1577e94956c9ed075c3295fcabc1", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3}, @generic="409e63b49116b0950c410a056059108a5706d6257ca65ca1f80dfa203ef7a9c9e294a125676fac49990b8d072179bcbe743653f7c6dcf4dec1b223633a04408e08f8b9d2d6459ff937ce9b182ee7bb328cdcc694a70db8b26a6c9bb28a0e5fb0eb68933c057cd10b33dc86629685ac7c7b627909f73febbe8117838bd1d383a33e99e7139deb6884fc588a56891aef338176e1197780463187570e8cf5742d18e2d10a086661fec7093c4ca0a6f5999dae3ddb3ac53233bcefc52c5fb9905ac0f27b68b8a112fbeb8649740dc4c0addce21e92cd584debe7a5ada04e66a065c0b2af736749b0e10fa2", @typed={0xb, 0x9c, 0x0, 0x0, @str='*\"\']\\]\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x24000000)
sendmmsg$unix(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}}, {{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x1}}], 0x2, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_coalesce={0xe, 0x8, 0xa2, 0x1, 0x1, 0xdd, 0x2, 0x8, 0xa9bd, 0x4, 0x9, 0x3c, 0xd, 0x7, 0x4, 0xf7f, 0x3, 0x80000100, 0x5, 0xe81, 0x5, 0x40, 0x2}})
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x400d4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'hsr0\x00'}}, 0x1e) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x220, 0x41, 0x1, 0x80002, 0x2, {0x1}, [@generic="95582c4a36af93923476728d4479d1547ad1de62c676981c7d609717388ec4ba7b8f2645b282c95d3214a0f466b0c90a378cd732adb4e375dd6f730cbb84314093d89180eee37870686a0fc509f0270ecd5f547290bce751a36672aa42d795250b24ab3d317611d97a2952494f166ead133dd22f75dd5aa74cfbbf058186935e6d970c2ae6db1652fe79afa26965640055c0ac52507c331dcc653079a1e7596af5a18a8c6dfde5c46a9f32f4d5c53bd1a09da483cdfb6e879090569539bc723543339dce25dd117ecd6ba5a2f4e1dc79654307fedfc677b70c0357fde8dfa32b85efeaa0", @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}]}, @generic="d72e93656a590ed3ca1577e94956c9ed075c3295fcabc1", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x3}, @generic="409e63b49116b0950c410a056059108a5706d6257ca65ca1f80dfa203ef7a9c9e294a125676fac49990b8d072179bcbe743653f7c6dcf4dec1b223633a04408e08f8b9d2d6459ff937ce9b182ee7bb328cdcc694a70db8b26a6c9bb28a0e5fb0eb68933c057cd10b33dc86629685ac7c7b627909f73febbe8117838bd1d383a33e99e7139deb6884fc588a56891aef338176e1197780463187570e8cf5742d18e2d10a086661fec7093c4ca0a6f5999dae3ddb3ac53233bcefc52c5fb9905ac0f27b68b8a112fbeb8649740dc4c0addce21e92cd584debe7a5ada04e66a065c0b2af736749b0e10fa2", @typed={0xb, 0x9c, 0x0, 0x0, @str='*\"\']\\]\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x24000000) (async)
sendmmsg$unix(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}}, {{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x1}}], 0x2, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_coalesce={0xe, 0x8, 0xa2, 0x1, 0x1, 0xdd, 0x2, 0x8, 0xa9bd, 0x4, 0x9, 0x3c, 0xd, 0x7, 0x4, 0xf7f, 0x3, 0x80000100, 0x5, 0xe81, 0x5, 0x40, 0x2}}) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x400d4) (async)

1m25.402156848s ago: executing program 4 (id=4004):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x2, 0x800)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r1 = landlock_create_ruleset(&(0x7f0000000300)={0x7f6e}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x101a00, 0x0)
preadv(r2, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1, 0x2, 0x2)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="cce6154aed11eae6602dedd0a0853180c69f162b6507cae046cc5ff4c2b8a3b4cf37e5c254c0d1a298db31382c431ab33a695d78b1df5bc7a80dc603360c400387f031303ab2f8d9fce5b1a096a242928f91ec1f08081255a659ccef038191f2df", 0x61, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[r4, 0x0], 0x2, 0x80000})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, <r5=>0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x5, 0x5})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000007c0)=[0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x3, 0x6, 0x1})
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
r9 = syz_open_dev$dri(&(0x7f0000000980), 0x5, 0x101cc1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r10=>0x0], 0x1})
r11 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, <r12=>0x0], &(0x7f0000000040), 0x3, r10, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000300)={0x21, r12, r10})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000940)={0x401, 0x3, &(0x7f0000000500)=[r4, r5, r6], &(0x7f0000000540)=[0x1, 0xfa, 0xf4, 0x4, 0x6], &(0x7f00000008c0)=[r7, r12], &(0x7f0000000900)=[0x5df73f80], 0x0, 0x2})
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x40086602, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0})
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2)
sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r15, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x3}, 0x4)
r16 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r16, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

1m25.30484536s ago: executing program 4 (id=4005):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x2400, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000340))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x0, 0x0, 0x31, 0x0, "ff5786c6a764a9658d272f59fdf1b14bc31b0d038dd859565c04f9f29b958c1af2037ad1a72d932547b9eae9011b42fb2e9cd04e000ae477102f95006290846739d87c8c3d3105a7835de37f8e851979"}, 0xd8)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014"], 0x100}, 0x0)

1m25.304426166s ago: executing program 4 (id=4006):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, {0x6b, 0x0, 0x8, 0x3e}], 0xfffffffc}) (async)
r0 = socket$key(0xf, 0x3, 0x2) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r4, 0x205, 0x70bc2d, 0x25dfdbfd}, 0x14}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0xff, 0x3ff, 0x0, 0x0, 0x7, 0xfec00000, 0x4c97ce3c5860c5c6, '\x00', 0x80000000}) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0xe8, 0x14, 0x93, 0x40, 0x4da, 0x390d, 0xaf1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xe4, 0x2, 0x50, 0x6, "", [{{0x9, 0x4, 0x63, 0x0, 0x2, 0x10, 0xa5, 0xe1, 0xe, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x81, 0xa, 0xb0}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async)
r8 = syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x4b00) (async)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
recvmmsg$unix(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000700)=""/277, 0x115}, {&(0x7f0000003100)=""/4080, 0xff0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001cc0)=""/208, 0xd0}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/135, 0x87}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f0000003000)=""/175, 0xaf}, {0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/123, 0x7b}], 0x9}}], 0x2, 0x0, 0x0) (async)
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="31c1a2bd0000f4e676f9"], &(0x7f0000000300)={0xa1, 0x1, 0x400, "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"}, 0x0}) (async)
syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xfffffffffffffd22, &(0x7f00000001c0)=ANY=[]) (async)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="02020708140000002cbd7000fddbdf2505000900c8000000d33100b7fde80008abbd1b03638bb8024732f09186c38b734700000000000000040004000500000084060000000000000000000000000000010000000000008002001000000004d6000004d500000000050007002ba0fc000000000000000000000000000000f7ffffff00000000020013000100000025bd7000023500"/160], 0xa0}}, 0x4014)
socket$key(0xf, 0x3, 0x2) (async)
write(r8, &(0x7f0000000440)="577e6900f5c021ceddf20661bc54fcc7d984e7a694a90d288619687303fa81eb9917d6e7c7d00a62a9", 0x29) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)

1m25.062124064s ago: executing program 4 (id=4007):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

1m25.02406127s ago: executing program 4 (id=4008):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0)
read(r1, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000740)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10)

1m24.899223931s ago: executing program 4 (id=4010):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0xfffffffffffffffe)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x4)
r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400908ebffff07000000000000010285690c2a8b290f73edf2721f0dfe6c3a3075b8edf64703f1d6a91af01da91cf89dfcb7389fcfb67821110fec5029bd745b02d0a2c9edf6d3cd9f89532e64dda77ddba1815d648bc171c928aba8bc92e417b0a6f3a24a1a9cb5e7b738bc61eb7a18edd70cae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e41b0000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x14)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

1m8.758859612s ago: executing program 35 (id=4010):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0xfffffffffffffffe)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r1, 0x4b3a, 0x4)
r2 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0)
syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400908ebffff07000000000000010285690c2a8b290f73edf2721f0dfe6c3a3075b8edf64703f1d6a91af01da91cf89dfcb7389fcfb67821110fec5029bd745b02d0a2c9edf6d3cd9f89532e64dda77ddba1815d648bc171c928aba8bc92e417b0a6f3a24a1a9cb5e7b738bc61eb7a18edd70cae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e41b0000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x14)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)

33.384430954s ago: executing program 3 (id=4303):
socket$nl_route(0x10, 0x3, 0x0)
fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30000100}, 0xc, &(0x7f00000019c0)={&(0x7f0000000880)={0x1100, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x78, 0xfa, "09d422350d46ffb8e47326f4543bb4128b15a4f72c2aeba52e70fe48b4a61b72c1d712f93b1e4b9ddd755f1e34bc67ca1bf1efa4a13a4158211bcddfe578555eb23a07472cf0b3df6042fbd3f569d57c9c57882a3672c276d8f11a30d8a47a80d85abde886607aa29656d2b0739cd0abfb4a22dc"}, @NL80211_ATTR_FILS_ERP_RRK={0x1a, 0xfc, "86d9de7290a3f56ea81cfbe2d7e196f78eabff0bb5b9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_SSID={0x24, 0x34, @random="5d3afd94d42b0a77b6eebc4ff5fa316d2bf87f0c2d942f0c45a0b6a2e0273b9a"}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x700, {0x0, 0xf800, 0xfff7, 0x6}}}]}, 0x1100}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, 0x0, 0x0, 0x9200000000000000)
socket$packet(0x11, 0x3, 0x300)

29.81738023s ago: executing program 3 (id=4313):
r0 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0)
close_range(r1, r1, 0x0)

29.67032849s ago: executing program 3 (id=4314):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x20, 0x8, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "12000000f7ffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9"}, 0x28)
shutdown(r2, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0xfffffffffffffd5b)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x88}, 0x4000001)
sendfile(r2, r3, 0x0, 0xffffffff004)
ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x4, 0xf7, 0x5, 0x7ff}, {0x8, 0x7, 0x80, 0x7}, {0x2, 0x0, 0xff, 0x4}, {0x3, 0xe, 0x69, 0x2}, {0x9, 0x7, 0x1, 0x7}, {0x9, 0xe9, 0x55, 0x6}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

29.055513644s ago: executing program 3 (id=4317):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
time(0x0)

28.908691778s ago: executing program 3 (id=4318):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x60000000)

28.74836886s ago: executing program 3 (id=4319):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x30)
r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$panthor(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r4, 0xc0106440, &(0x7f00000002c0)={0x3, 0x7edd, &(0x7f0000000280)})
r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x10, 0x101100)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000380)={0xc, 0x30})
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000003c0)={'team_slave_1\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000640)=[{&(0x7f00000001c0)="439dbf33", 0x4}], 0x1)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xc2)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000100)={0x7, 0x6, 0x4, 0x1000000004, 0x1000, 0x80000004})

26.480754927s ago: executing program 1 (id=4320):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

26.304965371s ago: executing program 1 (id=4322):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x1}}}, 0xa0)

26.092098117s ago: executing program 1 (id=4324):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
pread64(r2, &(0x7f0000000280)=""/172, 0xac, 0xe0)

25.808535818s ago: executing program 1 (id=4325):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x810500, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880)
writev(r1, &(0x7f0000000040), 0x2)

25.56505871s ago: executing program 1 (id=4326):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000001c0)={0x2000, 0x78, 0x320, 0x800, 0xfffffffa, 0xc54, 0x8, 0x0, {0x9, 0xff, 0x1}, {0xd3, 0xa}, {0xfff, 0x6}, {0x4, 0xfffffff7}, 0x3, 0x100, 0x4, 0x1000, 0x1, 0x2, 0xffffffff, 0x2, 0x1, 0x1, 0x7, 0x23f, 0x2, 0x0, 0x1, 0x9})

25.509046444s ago: executing program 1 (id=4327):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000006c0)={'macvtap0\x00', 0x8000})

19.563213563s ago: executing program 6 (id=4339):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+mem'], 0xc)

19.352274073s ago: executing program 6 (id=4340):
r0 = socket$inet6(0xa, 0x80003, 0x6)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2fc)

18.68051958s ago: executing program 7 (id=4341):
fsopen(&(0x7f0000000000)='bfs\x00', 0x1)

18.567948464s ago: executing program 7 (id=4342):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

18.245845481s ago: executing program 6 (id=4343):
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0)

17.93645858s ago: executing program 6 (id=4344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)

17.699083726s ago: executing program 6 (id=4345):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a35d4", 0x6}, {&(0x7f0000000540)="68d5a742c88671b2edc3950bf81a", 0xe}], 0x2, &(0x7f00000007c0)=[@assoc={0x10, 0x117, 0x4, 0x4}], 0x10, 0x4}], 0x1, 0x804)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x120c0)

17.596053918s ago: executing program 6 (id=4346):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r0)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x30, r1, 0x507, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x40)

17.382637556s ago: executing program 7 (id=4347):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r1, 0x2)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

16.82828686s ago: executing program 7 (id=4348):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a)
io_setup(0x4fa, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000340)="46cac791f1", 0x5, 0x8, 0x0, 0x0, r0}])

16.564392868s ago: executing program 7 (id=4349):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="d0672ff1", 0x4, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1)

16.404452593s ago: executing program 7 (id=4350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x20000090)

12.08828111s ago: executing program 36 (id=4319):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x30)
r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$panthor(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r4, 0xc0106440, &(0x7f00000002c0)={0x3, 0x7edd, &(0x7f0000000280)})
r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x10, 0x101100)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000380)={0xc, 0x30})
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000003c0)={'team_slave_1\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000640)=[{&(0x7f00000001c0)="439dbf33", 0x4}], 0x1)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xc2)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000100)={0x7, 0x6, 0x4, 0x1000000004, 0x1000, 0x80000004})

8.786949721s ago: executing program 37 (id=4327):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000006c0)={'macvtap0\x00', 0x8000})

1.099155574s ago: executing program 38 (id=4346):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r0)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x30, r1, 0x507, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x40)

0s ago: executing program 39 (id=4350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x20000090)

kernel console output (not intermixed with test programs):

remainder of the config
[ 1366.071221][ T5630] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1366.071247][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1366.077542][ T5630] usb 4-1: config 0 descriptor??
[ 1366.207585][   T10] usb 5-1: Using ep0 maxpacket: 8
[ 1366.210473][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1366.210529][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1366.210553][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1366.210577][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 13344, setting to 1024
[ 1366.210602][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1366.210615][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1366.210642][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1366.210664][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1367.074018][ T5630] ath6kl: Failed to read usb control message: -71
[ 1367.074066][ T5630] ath6kl: Unable to read the bmi data from the device: -71
[ 1367.074081][ T5630] ath6kl: Unable to recv target info: -71
[ 1367.075201][ T5630] ath6kl: Failed to init ath6kl core: -71
[ 1367.075733][ T5630] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1367.088595][   T10] usb 5-1: GET_CAPABILITIES returned 0
[ 1367.088638][   T10] usbtmc 5-1:16.0: can't read capabilities
[ 1367.151693][ T5630] usb 4-1: USB disconnect, device number 39
[ 1367.338003][ T5723] usb 5-1: USB disconnect, device number 28
[ 1367.595479][T20284] overlayfs: failed lookup in lower (newroot/398, name='file0', err=-40): overlapping layers
[ 1368.056085][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3879'.
[ 1368.427308][T20300] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1368.427323][T20300] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1368.500621][T20302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3884'.
[ 1368.508027][ T5648] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1368.662675][T20310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3886'.
[ 1368.697654][ T5648] usb 5-1: Using ep0 maxpacket: 8
[ 1368.699199][ T5648] usb 5-1: too many configurations: 126, using maximum allowed: 8
[ 1368.701541][ T5648] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1368.701577][ T5648] usb 5-1: can't read configurations, error -61
[ 1368.847271][ T5648] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1368.922486][ T5630] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1369.019802][ T5648] usb 5-1: Using ep0 maxpacket: 8
[ 1369.021075][ T5648] usb 5-1: too many configurations: 126, using maximum allowed: 8
[ 1369.022639][ T5648] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1369.022673][ T5648] usb 5-1: can't read configurations, error -61
[ 1369.023119][ T5648] usb usb5-port1: attempt power cycle
[ 1369.084271][ T5630] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[ 1369.084300][ T5630] usb 2-1: config 8 has no interface number 0
[ 1369.084342][ T5630] usb 2-1: config 8 interface 177 has no altsetting 0
[ 1369.084361][ T5630] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1369.084373][ T5630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1369.134291][ T5630] ir_toy 2-1:8.177: required endpoints not found
[ 1369.231923][   T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1369.308545][T14714] usb 2-1: USB disconnect, device number 17
[ 1369.381565][ T5648] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1369.409272][ T5648] usb 5-1: Using ep0 maxpacket: 8
[ 1369.410288][ T5648] usb 5-1: too many configurations: 126, using maximum allowed: 8
[ 1369.413856][ T5648] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1369.413889][ T5648] usb 5-1: can't read configurations, error -61
[ 1369.415883][   T10] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 75, changing to 10
[ 1369.415913][   T10] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1369.415940][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1369.415972][   T10] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[ 1369.416016][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1369.431770][   T10] usb 7-1: config 0 descriptor??
[ 1369.552648][ T5648] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1369.590960][ T5648] usb 5-1: Using ep0 maxpacket: 8
[ 1369.592089][ T5648] usb 5-1: too many configurations: 126, using maximum allowed: 8
[ 1369.597328][ T5648] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1369.597362][ T5648] usb 5-1: can't read configurations, error -61
[ 1369.598134][ T5648] usb usb5-port1: unable to enumerate USB device
[ 1369.816524][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3890'.
[ 1369.932879][   T10] hid_parser_main: 7 callbacks suppressed
[ 1369.932901][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.932931][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.932958][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.932984][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933010][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933052][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933080][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933107][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933133][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933158][   T10] gt683r_led 0003:1770:FF00.008C: unknown main item tag 0x0
[ 1369.933182][   T10] gt683r_led 0003:1770:FF00.008C: collection stack underflow
[ 1369.933206][   T10] gt683r_led 0003:1770:FF00.008C: item 0 0 0 12 parsing failed
[ 1369.937437][   T10] gt683r_led 0003:1770:FF00.008C: hid parsing failed
[ 1369.937547][   T10] gt683r_led 0003:1770:FF00.008C: probe with driver gt683r_led failed with error -22
[ 1370.162602][   T10] usb 7-1: USB disconnect, device number 43
[ 1370.297578][T20341] netlink: 'syz.3.3895': attribute type 1 has an invalid length.
[ 1370.297592][T20341] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3895'.
[ 1370.297608][T20341] block nbd1: not configured, cannot reconfigure
[ 1370.352180][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'.
[ 1370.352203][T20344] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1370.355645][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'.
[ 1370.494261][T20348] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3897'.
[ 1370.813674][   T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1370.963591][   T10] usb 4-1: device descriptor read/64, error -71
[ 1371.007688][ T5648] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1371.187691][ T5648] usb 7-1: Using ep0 maxpacket: 16
[ 1371.191478][ T5648] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.191504][ T5648] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1371.191558][ T5648] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1371.191571][ T5648] usb 7-1: config 1 interface 1 has no altsetting 0
[ 1371.193768][ T5648] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[ 1371.193797][ T5648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.193816][ T5648] usb 7-1: Product: syz
[ 1371.193827][ T5648] usb 7-1: Manufacturer: syz
[ 1371.193834][ T5648] usb 7-1: SerialNumber: syz
[ 1371.233489][   T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1371.369368][   T10] usb 4-1: device descriptor read/64, error -71
[ 1371.390687][ T8572] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1371.433485][ T5648] usb 7-1: selecting invalid altsetting 0
[ 1371.490165][   T10] usb usb4-port1: attempt power cycle
[ 1371.557642][ T5648] usb 7-1: USB disconnect, device number 44
[ 1371.572474][ T8572] usb 2-1: Using ep0 maxpacket: 32
[ 1371.578103][ T8572] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1371.578129][ T8572] usb 2-1: config 2 has no interface number 0
[ 1371.578179][ T8572] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1371.578205][ T8572] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1371.580629][ T8572] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1371.580656][ T8572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1371.580675][ T8572] usb 2-1: Product: syz
[ 1371.580689][ T8572] usb 2-1: Manufacturer: syz
[ 1371.580703][ T8572] usb 2-1: SerialNumber: syz
[ 1371.603861][T20364] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1371.776824][ T8315] udevd[8315]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1371.836872][T20364] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1371.873085][   T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1371.894320][   T10] usb 4-1: device descriptor read/8, error -71
[ 1372.052048][ T8572] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1372.052324][ T8572] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1372.063390][ T8572] usb 2-1: USB disconnect, device number 18
[ 1372.115618][T20376] : renamed from bond_slave_0 (while UP)
[ 1372.149538][   T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1372.179870][   T10] usb 4-1: device descriptor read/8, error -71
[ 1372.289182][   T10] usb usb4-port1: unable to enumerate USB device
[ 1372.512900][ T5648] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1372.676113][ T5648] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[ 1372.676140][ T5648] usb 7-1: config 1 has no interface number 0
[ 1372.676183][ T5648] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1372.676209][ T5648] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1372.676235][ T5648] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1372.679442][ T5648] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1372.679470][ T5648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.679490][ T5648] usb 7-1: Product: syz
[ 1372.679503][ T5648] usb 7-1: Manufacturer: syz
[ 1372.679515][ T5648] usb 7-1: SerialNumber: syz
[ 1372.690344][T20378] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1372.905859][T20378] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1372.912380][ T5648] usb 7-1: No status endpoint found
[ 1373.032305][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1373.047473][T16510] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1373.124071][ T5630] usb 7-1: USB disconnect, device number 45
[ 1373.234974][T16510] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1373.312172][T16510] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1373.330855][T16510] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1373.330885][T16510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.330905][T16510] usb 2-1: Product: syz
[ 1373.330919][T16510] usb 2-1: Manufacturer: syz
[ 1373.330934][T16510] usb 2-1: SerialNumber: syz
[ 1373.681614][T16510] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1373.913260][T16510] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1373.913287][T16510] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1374.015546][T20409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1374.018121][T20409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3917'.
[ 1374.349015][T16510] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1374.349046][T16510] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[ 1374.417677][ T8572] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[ 1374.474089][T20414] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1374.474089][T20414] The task syz.4.3918 (20414) triggered the difference, watch for misbehavior.
[ 1374.573121][T16510] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 1374.598476][ T8572] usb 7-1: not running at top speed; connect to a high speed hub
[ 1374.599784][ T8572] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[ 1374.599836][ T8572] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4
[ 1374.604013][ T8572] usb 7-1: New USB device found, idVendor=0499, idProduct=1503, bcdDevice= 0.40
[ 1374.604042][ T8572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.604062][ T8572] usb 7-1: Product: syz
[ 1374.604076][ T8572] usb 7-1: Manufacturer: syz
[ 1374.604090][ T8572] usb 7-1: SerialNumber: syz
[ 1374.901371][T16510] usb 2-1: USB disconnect, device number 19
[ 1374.938944][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1374.943783][ T8572] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1375.152217][T20409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1375.163444][T20409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1375.241124][ T8572] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1375.322958][T20419] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3920'.
[ 1375.374716][ T8572] usb 7-1: USB disconnect, device number 46
[ 1375.480292][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1375.815255][ T6865] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[ 1375.836652][ T5630] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 1375.954476][ T6865] usb 4-1: device descriptor read/64, error -71
[ 1375.957147][T12533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1375.957166][T12533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1375.995053][T20434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1376.022897][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1376.023458][ T5630] usb 2-1: not running at top speed; connect to a high speed hub
[ 1376.025978][ T5630] usb 2-1: config 228 has an invalid interface number: 68 but max is 0
[ 1376.025995][ T5630] usb 2-1: config 228 has no interface number 0
[ 1376.026013][ T5630] usb 2-1: config 228 interface 68 has no altsetting 0
[ 1376.077871][ T5630] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=96.c1
[ 1376.077890][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.077902][ T5630] usb 2-1: Product: syz
[ 1376.077910][ T5630] usb 2-1: Manufacturer: syz
[ 1376.077917][ T5630] usb 2-1: SerialNumber: syz
[ 1376.229371][ T6865] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[ 1376.371239][ T6865] usb 4-1: device descriptor read/64, error -71
[ 1376.519919][ T6865] usb usb4-port1: attempt power cycle
[ 1376.548706][ T5630] usb_ehset_test 2-1:228.68: probe with driver usb_ehset_test failed with error -32
[ 1376.566667][ T5630] usb 2-1: USB disconnect, device number 20
[ 1376.833025][T20453] netlink: 'syz.4.3929': attribute type 3 has an invalid length.
[ 1376.833038][T20453] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3929'.
[ 1376.885850][ T6865] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[ 1376.906819][ T6865] usb 4-1: device descriptor read/8, error -71
[ 1377.001517][ T5630] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1377.161775][ T6865] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[ 1377.161919][ T5630] usb 2-1: Using ep0 maxpacket: 32
[ 1377.163764][ T5630] usb 2-1: config 0 has an invalid interface number: 110 but max is 0
[ 1377.163790][ T5630] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1377.163809][ T5630] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1377.163822][ T5630] usb 2-1: config 0 has no interface number 0
[ 1377.163849][ T5630] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1377.163870][ T5630] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1377.163885][ T5630] usb 2-1: config 0 interface 110 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32
[ 1377.163905][ T5630] usb 2-1: config 0 interface 110 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 1377.163919][ T5630] usb 2-1: config 0 interface 110 has no altsetting 0
[ 1377.166099][ T5630] usb 2-1: New USB device found, idVendor=12d1, idProduct=7183, bcdDevice=65.6a
[ 1377.166125][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1377.166145][ T5630] usb 2-1: Product: syz
[ 1377.166159][ T5630] usb 2-1: Manufacturer: syz
[ 1377.166174][ T5630] usb 2-1: SerialNumber: syz
[ 1377.171855][ T5630] usb 2-1: config 0 descriptor??
[ 1377.206070][ T6865] usb 4-1: device descriptor read/8, error -71
[ 1377.214268][T20451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1377.236682][T16510] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[ 1377.268923][  T822] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1377.322594][ T6865] usb usb4-port1: unable to enumerate USB device
[ 1377.397823][T16510] usb 5-1: too many configurations: 193, using maximum allowed: 8
[ 1377.399925][T16510] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1377.399959][T16510] usb 5-1: can't read configurations, error -61
[ 1377.430903][  T822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1377.430995][  T822] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1377.431009][  T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.436073][  T822] usb 7-1: config 0 descriptor??
[ 1377.437750][T20462] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1377.536000][T16510] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[ 1377.592803][ T5630] option 2-1:0.110: GSM modem (1-port) converter detected
[ 1377.634143][ T5630] usb 2-1: USB disconnect, device number 21
[ 1377.660181][ T5630] option 2-1:0.110: device disconnected
[ 1377.661242][T20462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1377.662058][T20462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1377.708591][T16510] usb 5-1: too many configurations: 193, using maximum allowed: 8
[ 1377.710319][T16510] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1377.710362][T16510] usb 5-1: can't read configurations, error -61
[ 1377.710736][T16510] usb usb5-port1: attempt power cycle
[ 1377.882342][  T822] hid (null): unknown global tag 0xd
[ 1377.885459][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885494][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885519][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885543][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885563][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885578][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885593][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885608][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885622][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.885637][  T822] asus 0003:0B05:1ABE.008D: unknown main item tag 0x0
[ 1377.893047][  T822] asus 0003:0B05:1ABE.008D: ignoring exceeding usage max
[ 1377.894210][  T822] asus 0003:0B05:1ABE.008D: unknown global tag 0xd
[ 1377.894229][  T822] asus 0003:0B05:1ABE.008D: item 0 2 1 13 parsing failed
[ 1377.895008][  T822] asus 0003:0B05:1ABE.008D: Asus hid parse failed: -22
[ 1377.895111][  T822] asus 0003:0B05:1ABE.008D: probe with driver asus failed with error -22
[ 1378.070255][T16510] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 1378.096076][T16510] usb 5-1: too many configurations: 193, using maximum allowed: 8
[ 1378.097655][T16510] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1378.097691][T16510] usb 5-1: can't read configurations, error -61
[ 1378.100590][  T822] usb 7-1: USB disconnect, device number 47
[ 1378.123692][ T5630] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1378.230544][T16510] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[ 1378.253080][T16510] usb 5-1: too many configurations: 193, using maximum allowed: 8
[ 1378.254610][T16510] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 1378.254647][T16510] usb 5-1: can't read configurations, error -61
[ 1378.254980][T16510] usb usb5-port1: unable to enumerate USB device
[ 1378.262589][ T5630] usb 2-1: device descriptor read/64, error -71
[ 1378.519097][ T5630] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1378.658551][ T5630] usb 2-1: device descriptor read/64, error -71
[ 1378.776755][ T5630] usb usb2-port1: attempt power cycle
[ 1379.042760][T16510] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1379.085480][  T822] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1379.138957][ T5630] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1379.162299][ T5630] usb 2-1: device descriptor read/8, error -71
[ 1379.203021][T16510] usb 7-1: Using ep0 maxpacket: 32
[ 1379.205120][T16510] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1379.209063][T16510] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[ 1379.209091][T16510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.209111][T16510] usb 7-1: Product: syz
[ 1379.209120][T16510] usb 7-1: Manufacturer: syz
[ 1379.209128][T16510] usb 7-1: SerialNumber: syz
[ 1379.224457][  T822] usb 4-1: device descriptor read/64, error -71
[ 1379.422558][ T5630] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1379.439040][ T5630] usb 2-1: device descriptor read/8, error -71
[ 1379.481027][  T822] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1379.488411][T16510] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1379.544302][T16510] usb 7-1: USB disconnect, device number 48
[ 1379.558600][ T5630] usb usb2-port1: unable to enumerate USB device
[ 1379.593541][ T7138] udevd[7138]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1379.624035][  T822] usb 4-1: device descriptor read/64, error -71
[ 1379.738989][  T822] usb usb4-port1: attempt power cycle
[ 1380.106015][  T822] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1380.122977][  T822] usb 4-1: device descriptor read/8, error -71
[ 1380.378821][   T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1380.380310][  T822] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1380.401604][  T822] usb 4-1: device descriptor read/8, error -71
[ 1380.520220][  T822] usb usb4-port1: unable to enumerate USB device
[ 1380.540699][   T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1380.540727][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1380.540748][   T10] usb 7-1: config 0 has no interface number 0
[ 1380.540777][   T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.540791][   T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.540803][   T10] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1380.540827][   T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1380.540839][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.553878][   T10] usb 7-1: config 0 descriptor??
[ 1380.573648][T16510] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1380.634012][T20492] pim6reg: entered allmulticast mode
[ 1380.731301][T16510] usb 5-1: Using ep0 maxpacket: 16
[ 1380.733297][T16510] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1380.733322][T16510] usb 5-1: config 0 has no interface number 0
[ 1380.735698][T16510] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1380.735726][T16510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.735747][T16510] usb 5-1: Product: syz
[ 1380.735762][T16510] usb 5-1: Manufacturer: syz
[ 1380.735777][T16510] usb 5-1: SerialNumber: syz
[ 1380.740820][T16510] usb 5-1: config 0 descriptor??
[ 1380.808620][T16510] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1381.058267][T20478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1381.069944][T20478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1381.195615][T20478] overlayfs: conflicting lowerdir path
[ 1381.229644][   T10] holtek_mouse 0003:04D9:A04A.008E: item fetching failed at offset 202/235
[ 1381.230374][   T10] holtek_mouse 0003:04D9:A04A.008E: hid parse failed: -22
[ 1381.230442][   T10] holtek_mouse 0003:04D9:A04A.008E: probe with driver holtek_mouse failed with error -22
[ 1381.368566][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1381.392350][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1381.412000][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1381.452428][   T10] usb 7-1: USB disconnect, device number 49
[ 1382.180579][   T10] xfrm0 speed is unknown, defaulting to 1000
[ 1382.181095][T20480] infiniband syz0: set active
[ 1382.181383][T20480] infiniband syz0: added xfrm0
[ 1382.343192][T16510] gspca_spca1528: reg_r err -32
[ 1382.343252][T16510] spca1528 5-1:0.1: probe with driver spca1528 failed with error -32
[ 1382.366523][ T6865] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1382.376149][T20480] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1382.376184][T20480] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1382.376225][T20480] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1382.547808][ T6865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1382.547861][ T6865] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1382.547885][ T6865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.588107][ T6865] usb 4-1: config 0 descriptor??
[ 1382.610970][T20499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1382.766172][T20480] RDS/IB: syz0: added
[ 1382.771354][T20480] smc: adding ib device syz0 with port count 1
[ 1382.807567][T20480] smc:    ib device syz0 port 1 has no pnetid
[ 1382.842821][   T10] xfrm0 speed is unknown, defaulting to 1000
[ 1382.952085][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1382.991993][T20513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3946'.
[ 1383.098609][ T6865] asus 0003:0B05:1ABE.008F: collection stack underflow
[ 1383.098640][ T6865] asus 0003:0B05:1ABE.008F: item 0 1 0 12 parsing failed
[ 1383.099599][ T6865] asus 0003:0B05:1ABE.008F: Asus hid parse failed: -22
[ 1383.099698][ T6865] asus 0003:0B05:1ABE.008F: probe with driver asus failed with error -22
[ 1383.313132][   T10] usb 4-1: USB disconnect, device number 52
[ 1383.387474][ T5648] usb 7-1: new full-speed USB device number 50 using dummy_hcd
[ 1383.481519][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1383.544806][ T5648] usb 7-1: not running at top speed; connect to a high speed hub
[ 1383.546415][ T5648] usb 7-1: config 129 has an invalid interface number: 82 but max is 2
[ 1383.546443][ T5648] usb 7-1: config 129 has an invalid interface number: 235 but max is 2
[ 1383.546469][ T5648] usb 7-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[ 1383.546487][ T5648] usb 7-1: config 129 has an invalid interface number: 113 but max is 2
[ 1383.546509][ T5648] usb 7-1: config 129 has no interface number 0
[ 1383.546526][ T5648] usb 7-1: config 129 has no interface number 1
[ 1383.546541][ T5648] usb 7-1: config 129 has no interface number 2
[ 1383.546607][ T5648] usb 7-1: config 129 interface 82 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1383.546630][ T5648] usb 7-1: config 129 interface 82 altsetting 4 endpoint 0xC has invalid maxpacket 1088, setting to 64
[ 1383.546651][ T5648] usb 7-1: config 129 interface 82 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1383.546664][ T5648] usb 7-1: config 129 interface 82 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[ 1383.546677][ T5648] usb 7-1: config 129 interface 82 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[ 1383.546689][ T5648] usb 7-1: config 129 interface 82 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1383.546707][ T5648] usb 7-1: config 129 interface 235 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1383.546722][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[ 1383.546735][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1383.546746][ T5648] usb 7-1: config 129 interface 235 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1383.546761][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[ 1383.546780][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[ 1383.546793][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has an endpoint descriptor with address 0xE5, changing to 0x85
[ 1383.546806][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has a duplicate endpoint with address 0x85, skipping
[ 1383.546818][ T5648] usb 7-1: config 129 interface 235 altsetting 4 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[ 1383.546839][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has a duplicate endpoint with address 0x1, skipping
[ 1383.546852][ T5648] usb 7-1: config 129 interface 113 altsetting 101 endpoint 0xF has invalid maxpacket 1023, setting to 64
[ 1383.546866][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has a duplicate endpoint with address 0x9, skipping
[ 1383.546878][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has a duplicate endpoint with address 0x1, skipping
[ 1383.546898][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has a duplicate endpoint with address 0xD, skipping
[ 1383.546920][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has an invalid descriptor for endpoint zero, skipping
[ 1383.546940][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has an invalid descriptor for endpoint zero, skipping
[ 1383.546968][ T5648] usb 7-1: config 129 interface 113 altsetting 101 has an invalid descriptor for endpoint zero, skipping
[ 1383.546989][ T5648] usb 7-1: config 129 interface 82 has no altsetting 0
[ 1383.547008][ T5648] usb 7-1: config 129 interface 235 has no altsetting 0
[ 1383.547040][ T5648] usb 7-1: config 129 interface 113 has no altsetting 0
[ 1383.549428][ T5648] usb 7-1: Dual-Role OTG device on HNP port
[ 1383.549717][ T5648] usb 7-1: New USB device found, idVendor=12d1, idProduct=06db, bcdDevice=50.62
[ 1383.549731][ T5648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.549742][ T5648] usb 7-1: Product: ᩅൟ傿䆫ᖻ曼뽚ဍᦫ瑃䭑忇襭େ팂矤⿅䜦ᵂ歞蛿㺚풻碟ꡙ夝뚧뜙྽𠏮䱮㌖劊䷬壐祓뫤愌娈ꛦ葚쿔⁍䷮羙令䌬숙曫쏿筇⨟陌⺊絏합䠕갴꺮埽㖼⌋븥섐ꎫΩ♊⹧삘ಝ汋枵쮍⺳뒉ꍎ윶ሻ竎摊㤻둒ビュ毮Ⓓ뀴챙뾌ƈ잻ꞧ뫩
[ 1383.549758][ T5648] usb 7-1: Manufacturer: Њ
[ 1383.549765][ T5648] usb 7-1: SerialNumber: ⰴ䙊쓂⊔ﴮ䘤潅쬧ꉙ哅ᙠ윂஀㳩恀멻뀫鰊塭ฤᇈ㽃準꾣덋䬗눭而㜥쯰ⅹ笫䜞攤쒠盾왐脧5戻襻럀蹑⚋띂穲륗`嫁℺䀑ᖼ솱彙봮賙〉箶宋䶇꒞ꡥ뀋騞᭗瑤൮榖ᶶ䏯ື包育鶮呮삕跫䯷֍Ĉ猥闅愐柮塯媁䪙뿤跜駬薷ሦ䌪뙝놵㽴舜ꗸ⹉彪飆
[ 1383.894896][ T5648] option 7-1:129.82: GSM modem (1-port) converter detected
[ 1384.003623][ T5648] option 7-1:129.113: GSM modem (1-port) converter detected
[ 1384.039095][ T5648] usb 7-1: USB disconnect, device number 50
[ 1384.105613][ T5648] option 7-1:129.82: device disconnected
[ 1384.143949][ T5648] option 7-1:129.113: device disconnected
[ 1384.295619][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1384.332920][T16510] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1384.511722][T16510] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1384.513360][T16510] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.541741][T16510] usb 4-1: string descriptor 0 read error: -22
[ 1384.541847][T16510] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1384.541860][T16510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.627799][T20526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1385.117052][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1385.258593][T20535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1385.263398][T20535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1385.272097][T20524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1385.323237][T16510] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1
[ 1385.506364][T16510] usb 4-1: USB disconnect, device number 53
[ 1385.508485][ T6865] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1385.682218][ T6865] usb 7-1: Using ep0 maxpacket: 16
[ 1385.684337][ T6865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1385.684391][ T6865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1385.684419][ T6865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1385.684442][ T6865] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1385.684466][ T6865] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1385.685864][ T6865] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1385.685891][ T6865] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1385.685911][ T6865] usb 7-1: Manufacturer: syz
[ 1385.697865][ T6865] usb 7-1: config 0 descriptor??
[ 1385.846745][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1386.022997][ T6865] rc_core: IR keymap rc-hauppauge not found
[ 1386.023027][ T6865] Registered IR keymap rc-empty
[ 1386.023207][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.043787][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.144702][ T6865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1386.171826][ T6865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input93
[ 1386.185569][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.205172][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.231750][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.246739][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.279565][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.299872][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.310040][T14714] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1386.320919][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.351790][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.363774][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.385929][ T6865] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1386.443623][ T6865] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[ 1386.443648][ T6865] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1386.459778][T14714] usb 2-1: device descriptor read/64, error -71
[ 1386.508402][T20480] xfrm0 speed is unknown, defaulting to 1000
[ 1386.791275][T14714] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1386.995475][T14714] usb 2-1: device descriptor read/64, error -71
[ 1387.112330][T14714] usb usb2-port1: attempt power cycle
[ 1387.402673][ T8572] usb 5-1: USB disconnect, device number 37
[ 1387.482174][T20564] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1387.507006][T14714] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1387.529648][T14714] usb 2-1: device descriptor read/8, error -71
[ 1387.681180][ T8572] usb 7-1: USB disconnect, device number 51
[ 1387.796167][T14714] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1387.828535][T14714] usb 2-1: device descriptor read/8, error -71
[ 1387.945581][T14714] usb usb2-port1: unable to enumerate USB device
[ 1388.030689][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1388.223258][   T10] usb 5-1: Using ep0 maxpacket: 8
[ 1388.225348][   T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[ 1388.225374][   T10] usb 5-1: config 0 has no interface number 0
[ 1388.227661][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1388.227688][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.227709][   T10] usb 5-1: Product: syz
[ 1388.227722][   T10] usb 5-1: Manufacturer: syz
[ 1388.227732][   T10] usb 5-1: SerialNumber: syz
[ 1388.231420][   T10] usb 5-1: config 0 descriptor??
[ 1388.340891][ T6865] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1388.469286][ T8572] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1388.473108][   T10] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1388.473196][   T10] uvcvideo 5-1:0.31: No valid video chain found.
[ 1388.500942][ T6865] usb 7-1: Using ep0 maxpacket: 8
[ 1388.503282][ T6865] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1388.503327][   T10] usb 5-1: USB disconnect, device number 38
[ 1388.507551][ T6865] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1388.507579][ T6865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.507599][ T6865] usb 7-1: Product: syz
[ 1388.507613][ T6865] usb 7-1: Manufacturer: syz
[ 1388.507629][ T6865] usb 7-1: SerialNumber: syz
[ 1388.575307][ T6865] usb 7-1: config 0 descriptor??
[ 1388.587962][ T6865] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found
[ 1388.657649][ T8572] usb 4-1: Using ep0 maxpacket: 8
[ 1388.663598][ T8572] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1388.663626][ T8572] usb 4-1: config 179 has no interface number 0
[ 1388.663670][ T8572] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1388.663697][ T8572] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1388.663725][ T8572] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1388.663752][ T8572] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1388.663780][ T8572] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1388.663813][ T8572] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1388.663826][ T8572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.765091][T20588] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1388.829600][ T6865] snd_usb_toneport 7-1:0.0: set_interface failed
[ 1388.829851][ T6865] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1388.830032][ T6865] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1388.896937][ T6865] usb 7-1: USB disconnect, device number 52
[ 1389.211982][ T8572] usb 4-1: USB disconnect, device number 54
[ 1389.212053][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1389.212103][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1389.548908][T20606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3972'.
[ 1389.941009][ T8572] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1390.040829][ T7023] Flush: task=udevd[7023] dev=loop3 state=2
[ 1390.110398][ T8572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.110429][ T8572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.110461][ T8572] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1390.110481][ T8572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.157755][ T8572] usb 7-1: config 0 descriptor??
[ 1390.227017][ T7023] Teardown: task=udevd[7023] dev=loop3 state=2
[ 1390.682012][ T8572] hid_parser_main: 556 callbacks suppressed
[ 1390.682036][ T8572] playstation 0003:054C:0DF2.0090: unknown main item tag 0x0
[ 1390.682065][ T8572] playstation 0003:054C:0DF2.0090: unknown main item tag 0x0
[ 1390.682127][ T8572] playstation 0003:054C:0DF2.0090: unknown main item tag 0x0
[ 1390.682153][ T8572] playstation 0003:054C:0DF2.0090: unknown main item tag 0x0
[ 1390.682176][ T8572] playstation 0003:054C:0DF2.0090: unknown main item tag 0x0
[ 1390.685818][ T8572] playstation 0003:054C:0DF2.0090: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0
[ 1390.800593][ T6865] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1390.967967][ T6865] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1390.967996][ T6865] usb 5-1: config 0 has no interface number 0
[ 1390.968037][ T6865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.968061][ T6865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.968083][ T6865] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1390.968121][ T6865] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1390.968145][ T6865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.975310][ T6865] usb 5-1: config 0 descriptor??
[ 1391.194053][T20644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1391.194080][T20644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1391.203061][T20644] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1391.203087][T20644] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1391.281861][ T8572] playstation 0003:054C:0DF2.0090: Failed to retrieve feature with reportID 9: -71
[ 1391.281889][ T8572] playstation 0003:054C:0DF2.0090: Failed to retrieve DualSense pairing info: -71
[ 1391.281938][ T8572] playstation 0003:054C:0DF2.0090: Failed to get MAC address from DualSense
[ 1391.281954][ T8572] playstation 0003:054C:0DF2.0090: Failed to create dualsense.
[ 1391.285756][ T8572] playstation 0003:054C:0DF2.0090: probe with driver playstation failed with error -71
[ 1391.342208][ T8572] usb 7-1: USB disconnect, device number 53
[ 1391.449751][ T6865] hid (null): global environment stack underflow
[ 1391.487692][T20650] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3984'.
[ 1391.668456][ T6865] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0091/input/input94
[ 1391.742498][ T6865] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0091/input/input95
[ 1391.832715][T20657] random: crng reseeded on system resumption
[ 1391.848706][T20656] netlink: 1788 bytes leftover after parsing attributes in process `syz.3.3987'.
[ 1391.879384][T20636] tmpfs: Unknown parameter 'usrquota��@'
[ 1391.934593][ T6865] uclogic 0003:28BD:0042.0091: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1
[ 1391.992911][T20636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1391.993600][T20636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1392.223425][ T8572] usb 5-1: USB disconnect, device number 39
[ 1392.380797][   T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1392.543073][   T10] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1392.543101][   T10] usb 4-1: config 8 has no interface number 0
[ 1392.543147][   T10] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1392.543181][   T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1392.543205][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.558143][   T10] ir_toy 4-1:8.177: required endpoints not found
[ 1392.746163][T20669] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1392.761079][T20669] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 1392.790628][   T10] usb 4-1: USB disconnect, device number 55
[ 1393.021652][ T8572] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1393.192920][ T8572] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[ 1393.192947][ T8572] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.192965][ T8572] usb 2-1: config 8 has no interface number 0
[ 1393.193008][ T8572] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 1511, setting to 64
[ 1393.193049][ T8572] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1393.196903][ T8572] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1393.196931][ T8572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.196951][ T8572] usb 2-1: Product: syz
[ 1393.196966][ T8572] usb 2-1: Manufacturer: syz
[ 1393.196978][ T8572] usb 2-1: SerialNumber: syz
[ 1393.205228][T20669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1393.487851][ T8572] usb 2-1: USB disconnect, device number 30
[ 1393.630761][T16510] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1393.673627][ T6865] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1393.780885][T16510] usb 7-1: device descriptor read/64, error -71
[ 1393.868328][ T6865] usb 4-1: Using ep0 maxpacket: 8
[ 1393.870910][ T6865] usb 4-1: config 5 has an invalid descriptor of length 203, skipping remainder of the config
[ 1393.870938][ T6865] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 1393.873131][ T6865] usb 4-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=ea.30
[ 1393.873160][ T6865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.873181][ T6865] usb 4-1: Product: syz
[ 1393.873193][ T6865] usb 4-1: Manufacturer: syz
[ 1393.873201][ T6865] usb 4-1: SerialNumber: syz
[ 1394.045659][T16510] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1394.186507][T16510] usb 7-1: device descriptor read/64, error -71
[ 1394.246856][ T6865] usb 4-1: USB disconnect, device number 56
[ 1394.305610][T16510] usb usb7-port1: attempt power cycle
[ 1394.409319][T20707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1394.409869][T20707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1394.667376][T16510] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1394.667377][ T8572] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1394.689598][T16510] usb 7-1: device descriptor read/8, error -71
[ 1394.838811][ T8572] usb 2-1: Using ep0 maxpacket: 32
[ 1394.847634][ T8572] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1394.847652][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.871025][ T8572] usb 2-1: config 0 descriptor??
[ 1394.945332][T16510] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1394.969587][T16510] usb 7-1: device descriptor read/8, error -71
[ 1395.084195][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1395.085563][T16510] usb usb7-port1: unable to enumerate USB device
[ 1395.094892][ T8572] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1395.129647][ T8572] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1395.129674][ T8572] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1395.255196][   T10] usb 4-1: device descriptor read/64, error -71
[ 1395.522588][   T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1395.672189][   T10] usb 4-1: device descriptor read/64, error -71
[ 1395.691897][T20725] dummy0: entered allmulticast mode
[ 1395.800680][   T10] usb usb4-port1: attempt power cycle
[ 1395.812051][T20724] dummy0: left allmulticast mode
[ 1395.916776][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1395.950094][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1395.992924][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.003540][T16510] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[ 1396.017895][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.056811][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.079909][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.099917][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.143039][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.163839][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.166015][T16510] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1396.166045][T16510] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1396.166061][T16510] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 1396.167192][T16510] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1396.167219][T16510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1396.167240][T16510] usb 5-1: SerialNumber: syz
[ 1396.175941][   T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1396.185533][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4011'.
[ 1396.267597][   T10] usb 4-1: device descriptor read/8, error -71
[ 1396.391891][T16510] rndis_host 5-1:253.0: RNDIS init failed, -71
[ 1396.392181][T16510] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71
[ 1396.401515][T16510] usb 5-1: USB disconnect, device number 40
[ 1396.516273][   T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1396.538281][   T10] usb 4-1: device descriptor read/8, error -71
[ 1396.655844][   T10] usb usb4-port1: unable to enumerate USB device
[ 1396.858308][T16510] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[ 1396.965355][ T5630] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1397.021011][T16510] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1397.021051][T16510] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1397.021067][T16510] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 1397.022173][T16510] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1397.022201][T16510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1397.022213][T16510] usb 5-1: SerialNumber: syz
[ 1397.125446][ T5630] usb 7-1: Using ep0 maxpacket: 16
[ 1397.127618][ T5630] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1397.128853][ T5630] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8
[ 1397.128931][ T5630] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1397.131175][ T5630] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1397.131202][ T5630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.131222][ T5630] usb 7-1: Product: syz
[ 1397.131275][ T5630] usb 7-1: Manufacturer: syz
[ 1397.131289][ T5630] usb 7-1: SerialNumber: syz
[ 1397.197825][T20736] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1397.437894][ T5630] usblp0: Disabling reads from problematic bidirectional printer
[ 1397.463810][ T5630] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 2 proto 2 vid 0x03F0 pid 0x0004
[ 1397.483337][ T5630] usb 7-1: USB disconnect, device number 58
[ 1397.494263][ T5630] usblp0: removed
[ 1397.894027][T20728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1397.894599][T20728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1397.914130][T20728] netlink: 'syz.4.4010': attribute type 7 has an invalid length.
[ 1398.482797][ T5630] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[ 1398.659432][ T5630] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1398.659451][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.659462][ T5630] usb 4-1: Product: syz
[ 1398.659469][ T5630] usb 4-1: Manufacturer: syz
[ 1398.659477][ T5630] usb 4-1: SerialNumber: syz
[ 1398.674830][ T5630] usb 4-1: config 0 descriptor??
[ 1398.927208][ T5630] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1399.578208][ T5630] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1399.978854][ T5630] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1400.141876][ T5630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1400.141913][ T5630] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1400.141961][ T5630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1400.147200][ T5630] usb 7-1: config 0 descriptor??
[ 1400.151520][T20763] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1400.628822][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[ 1400.628978][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[ 1400.669691][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669728][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669814][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669842][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669868][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669895][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.669977][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.670004][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.670028][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.670052][ T5630] asus 0003:0B05:1ABE.0092: unknown main item tag 0x0
[ 1400.686748][ T5630] asus 0003:0B05:1ABE.0092: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.6-1/input0
[ 1400.861632][ T5630] usb 7-1: USB disconnect, device number 59
[ 1401.352181][T14715] usb 4-1: USB disconnect, device number 61
[ 1401.780347][  T822] usb 7-1: new low-speed USB device number 60 using dummy_hcd
[ 1401.966273][  T822] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1401.968324][  T822] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt
[ 1401.968354][  T822] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt
[ 1401.968427][  T822] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1401.973004][  T822] usb 7-1: string descriptor 0 read error: -22
[ 1401.973198][  T822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1401.973223][  T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1402.030991][T20775] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1402.031102][T20775] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1402.083334][  T822] usb 7-1: No union descriptors
[ 1402.129849][T20785] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[ 1402.195673][T20785] team0: Device veth0_vlan failed to register rx_handler
[ 1402.255455][   T10] usb 7-1: USB disconnect, device number 60
[ 1402.405240][T14715] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1403.313511][   T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1403.484327][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1403.487482][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1403.488631][   T10] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1403.488654][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1403.491196][   T10] usb 7-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[ 1403.491213][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.491224][   T10] usb 7-1: Product: syz
[ 1403.491231][   T10] usb 7-1: Manufacturer: syz
[ 1403.491239][   T10] usb 7-1: SerialNumber: syz
[ 1403.773064][T16510] rndis_host 5-1:253.0: RNDIS init failed, -110
[ 1403.773373][T16510] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -110
[ 1404.269473][   T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1404.286212][   T10] usb 7-1: USB disconnect, device number 61
[ 1404.311499][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1405.033957][T16510] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1405.198044][T16510] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1405.198077][T16510] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1405.198090][T16510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.208939][T16510] usb 7-1: config 0 descriptor??
[ 1405.213657][T20800] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1405.375144][T20802] __nla_validate_parse: 58 callbacks suppressed
[ 1405.386417][T20802] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4031'.
[ 1405.671573][ T5649] block nbd0: Receive control failed (result -32)
[ 1405.849983][T16510] asus 0003:0B05:1ABE.0093: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.6-1/input0
[ 1406.014631][ T5630] usb 7-1: USB disconnect, device number 62
[ 1406.377285][T20810] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4034'.
[ 1406.414586][T14715] usb 4-1: device descriptor read/64, error -71
[ 1406.669206][T14715] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1406.856080][T14715] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1406.856109][T14715] usb 4-1: config 8 has no interface number 0
[ 1406.856156][T14715] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1406.856189][T14715] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1406.856213][T14715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.906998][T14715] ir_toy 4-1:8.177: required endpoints not found
[ 1407.082856][ T5630] usb 4-1: USB disconnect, device number 63
[ 1407.150667][T20826] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 1407.417415][T14715] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1407.588177][T14715] usb 7-1: Using ep0 maxpacket: 32
[ 1407.595865][T14715] usb 7-1: config 0 has an invalid interface number: 146 but max is 0
[ 1407.595883][T14715] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1407.595894][T14715] usb 7-1: config 0 has no interface number 0
[ 1407.595921][T14715] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[ 1407.595936][T14715] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1407.595948][T14715] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[ 1407.595961][T14715] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1407.595974][T14715] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1407.595988][T14715] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1407.596001][T14715] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1407.596013][T14715] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1407.598121][T14715] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1407.598144][T14715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.598156][T14715] usb 7-1: Product: syz
[ 1407.598164][T14715] usb 7-1: Manufacturer: syz
[ 1407.598172][T14715] usb 7-1: SerialNumber: syz
[ 1407.745150][T20828] sg_read: process 634 (syz.3.4040) changed security contexts after opening file descriptor, this is not allowed.
[ 1407.761414][T14715] usb 7-1: config 0 descriptor??
[ 1407.762275][T20826] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1407.766622][T14715] usb 7-1: can only deal with bulk endpoints; endpoint 2 is not bulk.
[ 1407.766637][T14715] usb 7-1: couldn't find two input bulk endpoints. Bailing out.
[ 1407.979816][ T5630] usb 7-1: USB disconnect, device number 63
[ 1408.672431][T20842] netlink: 'syz.6.4045': attribute type 10 has an invalid length.
[ 1408.672458][T20842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4045'.
[ 1408.693809][T20842] team0: Port device geneve1 added
[ 1408.924184][ T5630] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1409.052387][  T822] usb 7-1: new full-speed USB device number 64 using dummy_hcd
[ 1409.086444][ T5630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1409.086476][ T5630] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1409.086489][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.089963][ T5630] usb 4-1: config 0 descriptor??
[ 1409.091106][T20840] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1409.214669][  T822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1409.214699][  T822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1409.214758][  T822] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 1409.214771][  T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.219822][  T822] usb 7-1: config 0 descriptor??
[ 1409.274450][  T822] uvcvideo 7-1:0.0: Found UVC 0.00 device <unnamed> (10c4:ea90)
[ 1409.274546][  T822] uvcvideo 7-1:0.0: No valid video chain found.
[ 1409.446203][  T822] usb 7-1: USB disconnect, device number 64
[ 1409.532011][ T5630] hid_parser_main: 920 callbacks suppressed
[ 1409.532036][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532066][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532091][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532118][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532143][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532168][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532194][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532221][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532247][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.532271][ T5630] asus 0003:0B05:1ABE.0094: unknown main item tag 0x0
[ 1409.619223][ T5630] asus 0003:0B05:1ABE.0094: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0
[ 1409.743576][T14715] usb 4-1: USB disconnect, device number 64
[ 1410.302706][T14715] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1410.484456][T14715] usb 7-1: Using ep0 maxpacket: 16
[ 1410.486385][T14715] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1410.489079][T14715] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1410.489096][T14715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.489107][T14715] usb 7-1: Product: syz
[ 1410.489116][T14715] usb 7-1: Manufacturer: syz
[ 1410.489123][T14715] usb 7-1: SerialNumber: syz
[ 1410.494438][T14715] r8152-cfgselector 7-1: Unknown version 0x0000
[ 1410.494453][T14715] r8152-cfgselector 7-1: config 0 descriptor??
[ 1410.571903][T14714] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1410.740888][T14714] usb 4-1: Using ep0 maxpacket: 32
[ 1410.743008][T14714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1410.743036][T14714] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[ 1410.743049][T14714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.749003][T14714] usb 4-1: config 0 descriptor??
[ 1410.777962][T14715] r8152-cfgselector 7-1: Needed 1 retries to read version
[ 1410.778105][T14715] r8152-cfgselector 7-1: Unknown version 0x00d0
[ 1410.778829][T14715] r8152-cfgselector 7-1: No union descriptors
[ 1410.995109][T20852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.995748][T20852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1411.004323][T14715] r8152-cfgselector 7-1: USB disconnect, device number 65
[ 1411.031049][T20854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1411.035115][T20854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1411.038346][T20855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1411.042818][T20855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1411.259667][T14714] hid (null): unknown global tag 0xc
[ 1411.277705][T14714] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0095/input/input97
[ 1411.367302][T14714] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0095/input/input98
[ 1411.492477][T14714] uclogic 0003:5543:0042.0095: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0
[ 1412.278098][T20864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1412.404435][T20864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1412.407078][T20864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1412.418146][T20864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1412.419230][T20864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1413.015812][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1413.030026][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.041365][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1413.041911][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.199097][  T822] usb 7-1: new full-speed USB device number 66 using dummy_hcd
[ 1413.255877][T20862] xfrm0 speed is unknown, defaulting to 1000
[ 1413.360206][  T822] usb 7-1: too many configurations: 219, using maximum allowed: 8
[ 1413.362702][  T822] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1413.362737][  T822] usb 7-1: can't read configurations, error -61
[ 1413.498324][  T822] usb 7-1: new full-speed USB device number 67 using dummy_hcd
[ 1413.554113][T16510] usb 4-1: USB disconnect, device number 65
[ 1413.661720][  T822] usb 7-1: too many configurations: 219, using maximum allowed: 8
[ 1413.696584][  T822] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1413.696622][  T822] usb 7-1: can't read configurations, error -61
[ 1413.697055][  T822] usb usb7-port1: attempt power cycle
[ 1414.075391][  T822] usb 7-1: new full-speed USB device number 68 using dummy_hcd
[ 1414.100178][  T822] usb 7-1: too many configurations: 219, using maximum allowed: 8
[ 1414.104327][  T822] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1414.104366][  T822] usb 7-1: can't read configurations, error -61
[ 1414.235679][  T822] usb 7-1: new full-speed USB device number 69 using dummy_hcd
[ 1414.258351][  T822] usb 7-1: too many configurations: 219, using maximum allowed: 8
[ 1414.259917][  T822] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1414.259951][  T822] usb 7-1: can't read configurations, error -61
[ 1414.260648][  T822] usb usb7-port1: unable to enumerate USB device
[ 1414.351655][T20862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1414.351871][T20862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1414.352031][T20862] bridge_slave_0: entered allmulticast mode
[ 1414.355574][T20862] bridge_slave_0: entered promiscuous mode
[ 1414.359760][T20862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1414.360132][T20862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1414.360354][T20862] bridge_slave_1: entered allmulticast mode
[ 1414.363516][T20862] bridge_slave_1: entered promiscuous mode
[ 1414.431771][T20862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1414.436932][T20862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1414.557119][T20862] team0: Port device team_slave_0 added
[ 1414.572740][T20862] team0: Port device team_slave_1 added
[ 1414.607645][T20862] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1414.607656][T20862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1414.607671][T20862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1414.610517][T20862] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1414.610531][T20862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1414.610557][T20862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1414.714775][T20862] hsr_slave_0: entered promiscuous mode
[ 1414.715994][T20862] hsr_slave_1: entered promiscuous mode
[ 1414.731919][T20862] debugfs: 'hsr0' already exists in 'hsr'
[ 1414.731948][T20862] Cannot create hsr debugfs directory
[ 1414.770152][   T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1414.930312][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1414.939972][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1414.940006][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1414.940046][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1414.940144][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.980037][ T5649] Bluetooth: hci3: command tx timeout
[ 1415.007230][   T10] usb 4-1: config 0 descriptor??
[ 1415.013016][   T10] hub 4-1:0.0: USB hub found
[ 1415.239108][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.239897][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.268896][   T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1415.511686][   T10] hid-generic 0003:046D:C31C.0096: item fetching failed at offset 0/1
[ 1415.512268][   T10] hid-generic 0003:046D:C31C.0096: probe with driver hid-generic failed with error -22
[ 1415.679860][T20862] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1415.714160][T20862] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1415.715192][T20862] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1415.721439][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.722098][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.767269][T20862] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1415.768232][T20862] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1415.839119][ T5630] usb 4-1: USB disconnect, device number 66
[ 1415.843609][T20862] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1415.845333][T20862] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1415.918272][T20862] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1416.139322][T20862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1416.195401][T20862] 8021q: adding VLAN 0 to HW filter on device team0
[ 1416.232630][T19759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1416.232884][T19759] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1416.328132][T19759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1416.331613][T19759] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1416.785991][T20920] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4064'.
[ 1416.812199][   T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1416.988170][   T10] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1416.988199][   T10] usb 4-1: config 8 has no interface number 0
[ 1416.988242][   T10] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1416.988262][   T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1416.988274][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.096434][   T10] ir_toy 4-1:8.177: required endpoints not found
[ 1417.198124][ T5649] Bluetooth: hci3: command tx timeout
[ 1417.312305][  T822] usb 4-1: USB disconnect, device number 67
[ 1417.371138][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.376705][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.379001][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.382976][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.403048][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.403942][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.422656][ T5630] kernel read not supported for file /rfkill (pid: 5630 comm: kworker/1:1)
[ 1417.583037][T16510] kernel read not supported for file /rfkill (pid: 16510 comm: kworker/1:5)
[ 1417.609885][T16510] kernel read not supported for file /rfkill (pid: 16510 comm: kworker/1:5)
[ 1417.614749][T16510] kernel read not supported for file /rfkill (pid: 16510 comm: kworker/1:5)
[ 1417.758084][T20862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1418.122393][T20970] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4077'.
[ 1418.362364][T16510] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1418.378430][T20862] veth0_vlan: entered promiscuous mode
[ 1418.430036][T20862] veth1_vlan: entered promiscuous mode
[ 1418.507452][T20862] veth0_macvtap: entered promiscuous mode
[ 1418.516435][T20862] veth1_macvtap: entered promiscuous mode
[ 1418.545741][T16510] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1418.545760][T16510] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1418.545770][T16510] usb 7-1: config 0 has no interface number 0
[ 1418.545795][T16510] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.545809][T16510] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.545822][T16510] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1418.545844][T16510] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1418.545857][T16510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.548630][T20862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1418.555290][T16510] usb 7-1: config 0 descriptor??
[ 1418.711162][T20862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1418.844366][T10204] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.864477][T10204] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.865213][T10204] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.909365][T10204] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.106736][T16510] hid_parser_main: 455 callbacks suppressed
[ 1419.106752][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106771][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106787][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106803][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106818][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106833][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106848][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106863][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106877][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.106892][T16510] holtek_mouse 0003:04D9:A04A.0097: unknown main item tag 0x0
[ 1419.107419][T16510] holtek_mouse 0003:04D9:A04A.0097: item fetching failed at offset 90/235
[ 1419.109592][T16510] holtek_mouse 0003:04D9:A04A.0097: hid parse failed: -22
[ 1419.109668][T16510] holtek_mouse 0003:04D9:A04A.0097: probe with driver holtek_mouse failed with error -22
[ 1419.254898][ T5723] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1419.448300][ T5649] Bluetooth: hci3: command tx timeout
[ 1419.449488][ T5723] usb 4-1: Using ep0 maxpacket: 32
[ 1419.457921][ T5723] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1419.457956][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1419.457988][ T5723] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[ 1419.458010][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.494186][ T5723] usb 4-1: config 0 descriptor??
[ 1419.978232][ T5723] hid (null): invalid report_count 44730
[ 1420.003841][ T5723] itetech 0003:048D:8595.0098: invalid report_count 44730
[ 1420.003867][ T5723] itetech 0003:048D:8595.0098: item 0 2 1 9 parsing failed
[ 1420.065476][ T5723] itetech 0003:048D:8595.0098: probe with driver itetech failed with error -22
[ 1420.204103][ T5648] usb 4-1: USB disconnect, device number 68
[ 1420.514059][ T5796] usb 7-1: USB disconnect, device number 70
[ 1420.757734][T19759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1420.757754][T19759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1420.897377][T12528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1420.897396][T12528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1421.103683][T20862] Flush: task=syz-executor[20862] dev=loop7 state=2
[ 1421.158515][T16510] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1421.193061][T20862] Teardown: task=syz-executor[20862] dev=loop7 state=2
[ 1421.313832][T16510] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1421.313861][T16510] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1421.313916][T16510] usb 4-1: config 8 has no interface number 0
[ 1421.313942][T16510] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1421.313957][T16510] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1421.313976][T16510] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1421.313989][T16510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.392433][T16510] ir_toy 4-1:8.177: required endpoints not found
[ 1421.460849][  T822] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1421.524337][ T5723] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1421.549356][T14715] usb 4-1: USB disconnect, device number 69
[ 1421.631246][  T822] usb 7-1: Using ep0 maxpacket: 32
[ 1421.633682][  T822] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1421.635827][  T822] usb 7-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice= 0.40
[ 1421.635854][  T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1421.635865][  T822] usb 7-1: Product: syz
[ 1421.635873][  T822] usb 7-1: Manufacturer: syz
[ 1421.635881][  T822] usb 7-1: SerialNumber: syz
[ 1421.642683][ T5649] Bluetooth: hci3: command tx timeout
[ 1421.667621][T21013] No source specified
[ 1421.684628][ T5723] usb 8-1: Using ep0 maxpacket: 16
[ 1421.700039][ T5723] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1421.700092][ T5723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1421.700171][ T5723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1421.700193][ T5723] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1421.700215][ T5723] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1421.702772][ T5723] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1421.702799][ T5723] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1421.702878][ T5723] usb 8-1: Manufacturer: syz
[ 1421.786761][ T5723] usb 8-1: config 0 descriptor??
[ 1421.980619][T20993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1421.981607][T20993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.122759][ T5723] rc_core: IR keymap rc-hauppauge not found
[ 1422.122773][ T5723] Registered IR keymap rc-empty
[ 1422.123086][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.144515][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.267669][ T5723] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1422.276323][ T5723] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input99
[ 1422.287833][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.291444][  T822] usb 7-1: can't set first interface for hiFace device.
[ 1422.291598][  T822] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5
[ 1422.309060][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.315666][    C1] rc rc0: IR event FIFO is full!
[ 1422.315687][    C1] rc rc0: IR event FIFO is full!
[ 1422.315702][    C1] rc rc0: IR event FIFO is full!
[ 1422.315714][    C1] rc rc0: IR event FIFO is full!
[ 1422.315727][    C1] rc rc0: IR event FIFO is full!
[ 1422.315979][    C1] rc rc0: IR event FIFO is full!
[ 1422.315993][    C1] rc rc0: IR event FIFO is full!
[ 1422.316446][    C1] rc rc0: IR event FIFO is full!
[ 1422.316670][    C1] rc rc0: IR event FIFO is full!
[ 1422.316684][    C1] rc rc0: IR event FIFO is full!
[ 1422.316697][    C1] rc rc0: IR event FIFO is full!
[ 1422.316709][    C1] rc rc0: IR event FIFO is full!
[ 1422.316721][    C1] rc rc0: IR event FIFO is full!
[ 1422.316734][    C1] rc rc0: IR event FIFO is full!
[ 1422.316746][    C1] rc rc0: IR event FIFO is full!
[ 1422.316759][    C1] rc rc0: IR event FIFO is full!
[ 1422.316772][    C1] rc rc0: IR event FIFO is full!
[ 1422.316784][    C1] rc rc0: IR event FIFO is full!
[ 1422.316793][    C1] rc rc0: IR event FIFO is full!
[ 1422.316803][    C1] rc rc0: IR event FIFO is full!
[ 1422.317037][    C1] rc rc0: IR event FIFO is full!
[ 1422.317053][    C1] rc rc0: IR event FIFO is full!
[ 1422.317066][    C1] rc rc0: IR event FIFO is full!
[ 1422.317078][    C1] rc rc0: IR event FIFO is full!
[ 1422.317313][    C1] rc rc0: IR event FIFO is full!
[ 1422.317327][    C1] rc rc0: IR event FIFO is full!
[ 1422.317340][    C1] rc rc0: IR event FIFO is full!
[ 1422.317353][    C1] rc rc0: IR event FIFO is full!
[ 1422.317580][    C1] rc rc0: IR event FIFO is full!
[ 1422.317593][    C1] rc rc0: IR event FIFO is full!
[ 1422.317606][    C1] rc rc0: IR event FIFO is full!
[ 1422.317618][    C1] rc rc0: IR event FIFO is full!
[ 1422.317838][    C1] rc rc0: IR event FIFO is full!
[ 1422.317852][    C1] rc rc0: IR event FIFO is full!
[ 1422.317865][    C1] rc rc0: IR event FIFO is full!
[ 1422.318106][    C1] rc rc0: IR event FIFO is full!
[ 1422.318120][    C1] rc rc0: IR event FIFO is full!
[ 1422.318133][    C1] rc rc0: IR event FIFO is full!
[ 1422.318145][    C1] rc rc0: IR event FIFO is full!
[ 1422.318158][    C1] rc rc0: IR event FIFO is full!
[ 1422.318170][    C1] rc rc0: IR event FIFO is full!
[ 1422.318182][    C1] rc rc0: IR event FIFO is full!
[ 1422.318407][    C1] rc rc0: IR event FIFO is full!
[ 1422.318421][    C1] rc rc0: IR event FIFO is full!
[ 1422.318433][    C1] rc rc0: IR event FIFO is full!
[ 1422.318446][    C1] rc rc0: IR event FIFO is full!
[ 1422.318458][    C1] rc rc0: IR event FIFO is full!
[ 1422.318470][    C1] rc rc0: IR event FIFO is full!
[ 1422.318482][    C1] rc rc0: IR event FIFO is full!
[ 1422.318494][    C1] rc rc0: IR event FIFO is full!
[ 1422.318719][    C1] rc rc0: IR event FIFO is full!
[ 1422.318733][    C1] rc rc0: IR event FIFO is full!
[ 1422.319180][    C1] rc rc0: IR event FIFO is full!
[ 1422.319407][    C1] rc rc0: IR event FIFO is full!
[ 1422.319421][    C1] rc rc0: IR event FIFO is full!
[ 1422.319433][    C1] rc rc0: IR event FIFO is full!
[ 1422.319445][    C1] rc rc0: IR event FIFO is full!
[ 1422.319458][    C1] rc rc0: IR event FIFO is full!
[ 1422.319470][    C1] rc rc0: IR event FIFO is full!
[ 1422.319908][    C1] rc rc0: IR event FIFO is full!
[ 1422.319924][    C1] rc rc0: IR event FIFO is full!
[ 1422.319936][    C1] rc rc0: IR event FIFO is full!
[ 1422.319947][    C1] rc rc0: IR event FIFO is full!
[ 1422.319959][    C1] rc rc0: IR event FIFO is full!
[ 1422.319971][    C1] rc rc0: IR event FIFO is full!
[ 1422.319984][    C1] rc rc0: IR event FIFO is full!
[ 1422.319997][    C1] rc rc0: IR event FIFO is full!
[ 1422.320223][    C1] rc rc0: IR event FIFO is full!
[ 1422.320236][    C1] rc rc0: IR event FIFO is full!
[ 1422.320249][    C1] rc rc0: IR event FIFO is full!
[ 1422.320261][    C1] rc rc0: IR event FIFO is full!
[ 1422.320282][    C1] rc rc0: IR event FIFO is full!
[ 1422.320295][    C1] rc rc0: IR event FIFO is full!
[ 1422.320306][    C1] rc rc0: IR event FIFO is full!
[ 1422.320319][    C1] rc rc0: IR event FIFO is full!
[ 1422.320330][    C1] rc rc0: IR event FIFO is full!
[ 1422.320769][    C1] rc rc0: IR event FIFO is full!
[ 1422.320783][    C1] rc rc0: IR event FIFO is full!
[ 1422.320796][    C1] rc rc0: IR event FIFO is full!
[ 1422.320809][    C1] rc rc0: IR event FIFO is full!
[ 1422.320822][    C1] rc rc0: IR event FIFO is full!
[ 1422.321048][    C1] rc rc0: IR event FIFO is full!
[ 1422.321062][    C1] rc rc0: IR event FIFO is full!
[ 1422.321075][    C1] rc rc0: IR event FIFO is full!
[ 1422.321088][    C1] rc rc0: IR event FIFO is full!
[ 1422.321100][    C1] rc rc0: IR event FIFO is full!
[ 1422.321329][    C1] rc rc0: IR event FIFO is full!
[ 1422.321343][    C1] rc rc0: IR event FIFO is full!
[ 1422.321355][    C1] rc rc0: IR event FIFO is full!
[ 1422.321367][    C1] rc rc0: IR event FIFO is full!
[ 1422.321379][    C1] rc rc0: IR event FIFO is full!
[ 1422.321609][    C1] rc rc0: IR event FIFO is full!
[ 1422.321623][    C1] rc rc0: IR event FIFO is full!
[ 1422.321636][    C1] rc rc0: IR event FIFO is full!
[ 1422.321648][    C1] rc rc0: IR event FIFO is full!
[ 1422.321660][    C1] rc rc0: IR event FIFO is full!
[ 1422.321893][    C1] rc rc0: IR event FIFO is full!
[ 1422.321907][    C1] rc rc0: IR event FIFO is full!
[ 1422.321920][    C1] rc rc0: IR event FIFO is full!
[ 1422.321932][    C1] rc rc0: IR event FIFO is full!
[ 1422.321944][    C1] rc rc0: IR event FIFO is full!
[ 1422.321956][    C1] rc rc0: IR event FIFO is full!
[ 1422.321968][    C1] rc rc0: IR event FIFO is full!
[ 1422.321980][    C1] rc rc0: IR event FIFO is full!
[ 1422.321992][    C1] rc rc0: IR event FIFO is full!
[ 1422.322005][    C1] rc rc0: IR event FIFO is full!
[ 1422.322018][    C1] rc rc0: IR event FIFO is full!
[ 1422.322251][    C1] rc rc0: IR event FIFO is full!
[ 1422.322264][    C1] rc rc0: IR event FIFO is full!
[ 1422.322499][    C1] rc rc0: IR event FIFO is full!
[ 1422.322513][    C1] rc rc0: IR event FIFO is full!
[ 1422.322526][    C1] rc rc0: IR event FIFO is full!
[ 1422.322540][    C1] rc rc0: IR event FIFO is full!
[ 1422.322766][    C1] rc rc0: IR event FIFO is full!
[ 1422.322779][    C1] rc rc0: IR event FIFO is full!
[ 1422.322791][    C1] rc rc0: IR event FIFO is full!
[ 1422.323669][    C1] rc rc0: IR event FIFO is full!
[ 1422.323897][    C1] rc rc0: IR event FIFO is full!
[ 1422.323912][    C1] rc rc0: IR event FIFO is full!
[ 1422.323925][    C1] rc rc0: IR event FIFO is full!
[ 1422.323937][    C1] rc rc0: IR event FIFO is full!
[ 1422.323950][    C1] rc rc0: IR event FIFO is full!
[ 1422.323962][    C1] rc rc0: IR event FIFO is full!
[ 1422.323974][    C1] rc rc0: IR event FIFO is full!
[ 1422.323987][    C1] rc rc0: IR event FIFO is full!
[ 1422.324212][    C1] rc rc0: IR event FIFO is full!
[ 1422.324225][    C1] rc rc0: IR event FIFO is full!
[ 1422.324238][    C1] rc rc0: IR event FIFO is full!
[ 1422.324470][    C1] rc rc0: IR event FIFO is full!
[ 1422.324484][    C1] rc rc0: IR event FIFO is full!
[ 1422.324712][    C1] rc rc0: IR event FIFO is full!
[ 1422.324725][    C1] rc rc0: IR event FIFO is full!
[ 1422.325393][    C1] rc rc0: IR event FIFO is full!
[ 1422.325408][    C1] rc rc0: IR event FIFO is full!
[ 1422.325420][    C1] rc rc0: IR event FIFO is full!
[ 1422.328161][    C1] rc rc0: IR event FIFO is full!
[ 1422.328178][    C1] rc rc0: IR event FIFO is full!
[ 1422.328192][    C1] rc rc0: IR event FIFO is full!
[ 1422.328429][    C1] rc rc0: IR event FIFO is full!
[ 1422.328444][    C1] rc rc0: IR event FIFO is full!
[ 1422.328456][    C1] rc rc0: IR event FIFO is full!
[ 1422.328468][    C1] rc rc0: IR event FIFO is full!
[ 1422.328481][    C1] rc rc0: IR event FIFO is full!
[ 1422.328495][    C1] rc rc0: IR event FIFO is full!
[ 1422.328614][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.328719][    C1] rc rc0: IR event FIFO is full!
[ 1422.328732][    C1] rc rc0: IR event FIFO is full!
[ 1422.328745][    C1] rc rc0: IR event FIFO is full!
[ 1422.328971][    C1] rc rc0: IR event FIFO is full!
[ 1422.328984][    C1] rc rc0: IR event FIFO is full!
[ 1422.328997][    C1] rc rc0: IR event FIFO is full!
[ 1422.329009][    C1] rc rc0: IR event FIFO is full!
[ 1422.329023][    C1] rc rc0: IR event FIFO is full!
[ 1422.329035][    C1] rc rc0: IR event FIFO is full!
[ 1422.329267][    C1] rc rc0: IR event FIFO is full!
[ 1422.329290][    C1] rc rc0: IR event FIFO is full!
[ 1422.329303][    C1] rc rc0: IR event FIFO is full!
[ 1422.329316][    C1] rc rc0: IR event FIFO is full!
[ 1422.329328][    C1] rc rc0: IR event FIFO is full!
[ 1422.329341][    C1] rc rc0: IR event FIFO is full!
[ 1422.329353][    C1] rc rc0: IR event FIFO is full!
[ 1422.329366][    C1] rc rc0: IR event FIFO is full!
[ 1422.329588][    C1] rc rc0: IR event FIFO is full!
[ 1422.329602][    C1] rc rc0: IR event FIFO is full!
[ 1422.329614][    C1] rc rc0: IR event FIFO is full!
[ 1422.329627][    C1] rc rc0: IR event FIFO is full!
[ 1422.329639][    C1] rc rc0: IR event FIFO is full!
[ 1422.329651][    C1] rc rc0: IR event FIFO is full!
[ 1422.329875][    C1] rc rc0: IR event FIFO is full!
[ 1422.329890][    C1] rc rc0: IR event FIFO is full!
[ 1422.329901][    C1] rc rc0: IR event FIFO is full!
[ 1422.330127][    C1] rc rc0: IR event FIFO is full!
[ 1422.330141][    C1] rc rc0: IR event FIFO is full!
[ 1422.330373][    C1] rc rc0: IR event FIFO is full!
[ 1422.330387][    C1] rc rc0: IR event FIFO is full!
[ 1422.330399][    C1] rc rc0: IR event FIFO is full!
[ 1422.330629][    C1] rc rc0: IR event FIFO is full!
[ 1422.330643][    C1] rc rc0: IR event FIFO is full!
[ 1422.330655][    C1] rc rc0: IR event FIFO is full!
[ 1422.330668][    C1] rc rc0: IR event FIFO is full!
[ 1422.330680][    C1] rc rc0: IR event FIFO is full!
[ 1422.330693][    C1] rc rc0: IR event FIFO is full!
[ 1422.330932][    C1] rc rc0: IR event FIFO is full!
[ 1422.330946][    C1] rc rc0: IR event FIFO is full!
[ 1422.330957][    C1] rc rc0: IR event FIFO is full!
[ 1422.330970][    C1] rc rc0: IR event FIFO is full!
[ 1422.330981][    C1] rc rc0: IR event FIFO is full!
[ 1422.330994][    C1] rc rc0: IR event FIFO is full!
[ 1422.331221][    C1] rc rc0: IR event FIFO is full!
[ 1422.331235][    C1] rc rc0: IR event FIFO is full!
[ 1422.331460][    C1] rc rc0: IR event FIFO is full!
[ 1422.331474][    C1] rc rc0: IR event FIFO is full!
[ 1422.331486][    C1] rc rc0: IR event FIFO is full!
[ 1422.331499][    C1] rc rc0: IR event FIFO is full!
[ 1422.331511][    C1] rc rc0: IR event FIFO is full!
[ 1422.331736][    C1] rc rc0: IR event FIFO is full!
[ 1422.331749][    C1] rc rc0: IR event FIFO is full!
[ 1422.331762][    C1] rc rc0: IR event FIFO is full!
[ 1422.331775][    C1] rc rc0: IR event FIFO is full!
[ 1422.331788][    C1] rc rc0: IR event FIFO is full!
[ 1422.332017][    C1] rc rc0: IR event FIFO is full!
[ 1422.332244][    C1] rc rc0: IR event FIFO is full!
[ 1422.332258][    C1] rc rc0: IR event FIFO is full!
[ 1422.332270][    C1] rc rc0: IR event FIFO is full!
[ 1422.332291][    C1] rc rc0: IR event FIFO is full!
[ 1422.332303][    C1] rc rc0: IR event FIFO is full!
[ 1422.332316][    C1] rc rc0: IR event FIFO is full!
[ 1422.332541][    C1] rc rc0: IR event FIFO is full!
[ 1422.332556][    C1] rc rc0: IR event FIFO is full!
[ 1422.332787][    C1] rc rc0: IR event FIFO is full!
[ 1422.332801][    C1] rc rc0: IR event FIFO is full!
[ 1422.332813][    C1] rc rc0: IR event FIFO is full!
[ 1422.332826][    C1] rc rc0: IR event FIFO is full!
[ 1422.332839][    C1] rc rc0: IR event FIFO is full!
[ 1422.332853][    C1] rc rc0: IR event FIFO is full!
[ 1422.333083][    C1] rc rc0: IR event FIFO is full!
[ 1422.333097][    C1] rc rc0: IR event FIFO is full!
[ 1422.333109][    C1] rc rc0: IR event FIFO is full!
[ 1422.333342][    C1] rc rc0: IR event FIFO is full!
[ 1422.333355][    C1] rc rc0: IR event FIFO is full!
[ 1422.333369][    C1] rc rc0: IR event FIFO is full!
[ 1422.334025][    C1] rc rc0: IR event FIFO is full!
[ 1422.334040][    C1] rc rc0: IR event FIFO is full!
[ 1422.334053][    C1] rc rc0: IR event FIFO is full!
[ 1422.334292][    C1] rc rc0: IR event FIFO is full!
[ 1422.334306][    C1] rc rc0: IR event FIFO is full!
[ 1422.334319][    C1] rc rc0: IR event FIFO is full!
[ 1422.334332][    C1] rc rc0: IR event FIFO is full!
[ 1422.334344][    C1] rc rc0: IR event FIFO is full!
[ 1422.334572][    C1] rc rc0: IR event FIFO is full!
[ 1422.334586][    C1] rc rc0: IR event FIFO is full!
[ 1422.334599][    C1] rc rc0: IR event FIFO is full!
[ 1422.347444][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.368603][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.387476][  T822] usb 7-1: can't set first interface for hiFace device.
[ 1422.387580][  T822] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1422.390042][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.414748][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.428123][  T822] usb 7-1: USB disconnect, device number 71
[ 1422.439818][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.460275][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.491412][ T5723] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1422.642439][ T5723] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1422.642478][ T5723] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1422.704011][ T5723] usb 8-1: USB disconnect, device number 2
[ 1422.844897][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1423.297214][T21031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4094'.
[ 1424.112023][T21043] tmpfs: Unsupported parameter 'huge'
[ 1424.794562][T14715] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1424.848335][  T822] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1424.968472][T14715] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1424.968499][T14715] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1424.968515][T14715] usb 4-1: config 8 has no interface number 0
[ 1424.968550][T14715] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1424.968574][T14715] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1424.968602][T14715] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1424.968621][T14715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1425.008353][  T822] usb 7-1: Using ep0 maxpacket: 16
[ 1425.029926][ T5796] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1425.054159][  T822] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1425.054182][  T822] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1425.056949][  T822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1425.056977][  T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.056995][  T822] usb 7-1: Product: syz
[ 1425.057007][  T822] usb 7-1: Manufacturer: syz
[ 1425.057021][  T822] usb 7-1: SerialNumber: syz
[ 1425.060741][T14715] ir_toy 4-1:8.177: required endpoints not found
[ 1425.106452][T21050] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1425.268447][ T5796] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1425.273736][ T5796] usb 8-1: not running at top speed; connect to a high speed hub
[ 1425.281227][ T5796] usb 8-1: config 2 interface 0 has no altsetting 0
[ 1425.285117][ T5723] usb 4-1: USB disconnect, device number 70
[ 1425.293347][ T5796] usb 8-1: New USB device found, idVendor=0572, idProduct=689a, bcdDevice=95.41
[ 1425.293376][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.293396][ T5796] usb 8-1: Product: syz
[ 1425.293410][ T5796] usb 8-1: Manufacturer: syz
[ 1425.297532][ T5796] usb 8-1: SerialNumber: syz
[ 1425.401325][T21046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.402286][T21046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.483102][  T822] usb 7-1: USB disconnect, device number 72
[ 1426.136952][T21069] usb usb5: usbfs: process 21069 (syz.6.4107) did not claim interface 0 before use
[ 1426.675675][T16510] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1426.835883][T16510] usb 7-1: Using ep0 maxpacket: 8
[ 1426.840783][T16510] usb 7-1: config 5 has an invalid interface number: 234 but max is 0
[ 1426.840809][T16510] usb 7-1: config 5 has no interface number 0
[ 1426.840839][T16510] usb 7-1: config 5 interface 234 has no altsetting 0
[ 1426.843885][T16510] usb 7-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e
[ 1426.843915][T16510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.843935][T16510] usb 7-1: Product: syz
[ 1426.843950][T16510] usb 7-1: Manufacturer: syz
[ 1426.843964][T16510] usb 7-1: SerialNumber: syz
[ 1427.090773][T16510] ipw 7-1:5.234: IPWireless converter converter detected
[ 1427.111181][T16510] usb 7-1: USB disconnect, device number 73
[ 1427.119319][T16510] ipw 7-1:5.234: device disconnected
[ 1427.648057][T14715] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1427.819275][T14715] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1427.819314][T14715] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1427.819390][T14715] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 1427.819439][T14715] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1427.819463][T14715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.961581][T14715] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1428.262806][T17289] bridge_slave_1: left allmulticast mode
[ 1428.262841][T17289] bridge_slave_1: left promiscuous mode
[ 1428.264507][T17289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1428.433468][ T5796] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1428.461774][ T5796] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1428.461802][ T5796] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1428.476610][T17289] bridge_slave_0: left allmulticast mode
[ 1428.476659][T17289] bridge_slave_0: left promiscuous mode
[ 1428.480431][T17289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1428.580246][ T5796] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1428.598749][T14715] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[ 1428.642088][ T5796] usb 8-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230A' in warm state
[ 1428.642177][T16510] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1428.692589][ T5796] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 1428.802250][T16510] usb 7-1: Using ep0 maxpacket: 32
[ 1428.807093][T16510] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1428.810484][T16510] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1428.810514][T16510] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1428.810535][T16510] usb 7-1: Product: syz
[ 1428.810549][T16510] usb 7-1: Manufacturer: syz
[ 1428.868977][ T5796] usb 8-1: USB disconnect, device number 3
[ 1428.940334][T16510] hub 7-1:4.0: bad descriptor, ignoring hub
[ 1428.940373][T16510] hub 7-1:4.0: probe with driver hub failed with error -5
[ 1428.975454][T16510] usbhid 7-1:4.0: couldn't find an input interrupt endpoint
[ 1429.003724][T21109] netlink: 1232 bytes leftover after parsing attributes in process `syz.1.4118'.
[ 1429.065137][T21112] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1429.250497][T21116] IPVS: length: 24 != 98616
[ 1429.544735][T16510] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1429.806934][T16510] usb 8-1: Using ep0 maxpacket: 8
[ 1429.809191][T16510] usb 8-1: config 3 has an invalid interface number: 45 but max is 0
[ 1429.809219][T16510] usb 8-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[ 1429.809232][T16510] usb 8-1: config 3 has no interface number 0
[ 1429.809259][T16510] usb 8-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1429.809274][T16510] usb 8-1: config 3 interface 45 has no altsetting 0
[ 1429.811480][T16510] usb 8-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[ 1429.811509][T16510] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1429.811529][T16510] usb 8-1: Product: syz
[ 1429.811543][T16510] usb 8-1: Manufacturer: syz
[ 1429.811557][T16510] usb 8-1: SerialNumber: syz
[ 1430.186883][T16510] usb 8-1: USB disconnect, device number 4
[ 1430.215892][ T7023] udevd[7023]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1430.544852][T17289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1430.630934][T17289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1430.653472][T17289] bond0 (unregistering): Released all slaves
[ 1430.794728][T16510] usb 4-1: USB disconnect, device number 71
[ 1430.813451][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1430.914482][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1430.938808][T14714] usb 7-1: USB disconnect, device number 74
[ 1431.110976][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1431.135346][T21121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.135841][T21121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.367162][T16510] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1431.532555][T16510] usb 8-1: Using ep0 maxpacket: 32
[ 1431.535349][T16510] usb 8-1: config 38 has an invalid interface number: 151 but max is 2
[ 1431.535378][T16510] usb 8-1: config 38 has an invalid interface number: 41 but max is 2
[ 1431.535392][T16510] usb 8-1: config 38 has an invalid interface number: 14 but max is 2
[ 1431.535403][T16510] usb 8-1: config 38 has no interface number 0
[ 1431.535412][T16510] usb 8-1: config 38 has no interface number 1
[ 1431.535421][T16510] usb 8-1: config 38 has no interface number 2
[ 1431.535459][T16510] usb 8-1: config 38 interface 151 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1431.535473][T16510] usb 8-1: config 38 interface 151 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1431.535486][T16510] usb 8-1: config 38 interface 151 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[ 1431.535499][T16510] usb 8-1: config 38 interface 151 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[ 1431.535511][T16510] usb 8-1: config 38 interface 151 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[ 1431.535531][T16510] usb 8-1: config 38 interface 41 altsetting 43 has a duplicate endpoint with address 0x9, skipping
[ 1431.535549][T16510] usb 8-1: config 38 interface 41 altsetting 43 has a duplicate endpoint with address 0x7, skipping
[ 1431.535566][T16510] usb 8-1: config 38 interface 41 altsetting 43 endpoint 0xF has invalid maxpacket 1023, setting to 64
[ 1431.535579][T16510] usb 8-1: config 38 interface 41 altsetting 43 has an invalid descriptor for endpoint zero, skipping
[ 1431.535593][T16510] usb 8-1: config 38 interface 41 altsetting 43 has a duplicate endpoint with address 0x1, skipping
[ 1431.535604][T16510] usb 8-1: config 38 interface 41 altsetting 43 has a duplicate endpoint with address 0x2, skipping
[ 1431.535622][T16510] usb 8-1: config 38 interface 41 altsetting 43 has an endpoint descriptor with address 0xDA, changing to 0x8A
[ 1431.535636][T16510] usb 8-1: config 38 interface 41 altsetting 43 endpoint 0x8A has invalid maxpacket 38411, setting to 1024
[ 1431.535649][T16510] usb 8-1: config 38 interface 41 altsetting 43 bulk endpoint 0x8A has invalid maxpacket 1024
[ 1431.535662][T16510] usb 8-1: config 38 interface 41 altsetting 43 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1431.535676][T16510] usb 8-1: config 38 interface 41 altsetting 43 has an invalid descriptor for endpoint zero, skipping
[ 1431.535687][T16510] usb 8-1: config 38 interface 41 altsetting 43 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[ 1431.535709][T16510] usb 8-1: config 38 interface 14 altsetting 57 has an invalid descriptor for endpoint zero, skipping
[ 1431.535721][T16510] usb 8-1: config 38 interface 14 altsetting 57 has an endpoint descriptor with address 0x55, changing to 0x5
[ 1431.535735][T16510] usb 8-1: config 38 interface 14 altsetting 57 has a duplicate endpoint with address 0xF, skipping
[ 1431.535747][T16510] usb 8-1: config 38 interface 14 altsetting 57 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1431.535760][T16510] usb 8-1: config 38 interface 14 altsetting 57 endpoint 0x8E has invalid maxpacket 520, setting to 64
[ 1431.535774][T16510] usb 8-1: config 38 interface 14 altsetting 57 has a duplicate endpoint with address 0x7, skipping
[ 1431.535785][T16510] usb 8-1: config 38 interface 41 has no altsetting 0
[ 1431.535795][T16510] usb 8-1: config 38 interface 14 has no altsetting 0
[ 1431.537928][T16510] usb 8-1: New USB device found, idVendor=05c6, idProduct=9208, bcdDevice=7c.14
[ 1431.537956][T16510] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1431.884360][T16510] usb 8-1: Product: П
[ 1431.884375][T16510] usb 8-1: Manufacturer: 뷔姷鴿껭聶꠯邪㶄頁ǀ퐵퐽Ẕ栄툕䘲뙇鍚嗌岛꺓⮓࢏罱涊괨봒䰞⏓븧き㗱軛牜㦧ॊ㯃簸㍏榻麀웱룇䲴⋻借顺屡赍淎畬㰸強궡᩠⬙琅ᕵ婋燤㚻쿬褽﫿뎑ꁤ﮿භ炮⡈鋌
[ 1431.884389][T16510] usb 8-1: SerialNumber: syz
[ 1432.050886][   T10] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1432.200815][   T10] usb 7-1: device descriptor read/64, error -71
[ 1432.316176][T16510] usb 8-1: selecting invalid altsetting 0
[ 1432.316196][T16510] usb 8-1: Could not set interface, error -22
[ 1432.364309][T16510] usb 8-1: USB disconnect, device number 5
[ 1432.512477][   T10] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1432.623787][T21138] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4127'.
[ 1432.654155][T21116] infiniband sYz0: set active
[ 1432.654233][T21116] infiniband sYz0: added xfrm0
[ 1432.655895][T21116] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1432.672439][   T10] usb 7-1: device descriptor read/64, error -71
[ 1432.672562][T14715] xfrm0 speed is unknown, defaulting to 1000
[ 1432.800848][   T10] usb usb7-port1: attempt power cycle
[ 1432.965526][T21116] infiniband sYz0: Couldn't open port 1
[ 1432.965811][T21116] smbdirect: ib_dev[sYz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1432.965842][T21116] smbdirect: ib_dev[sYz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1432.965878][T21116] smbdirect: ib_dev[sYz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1433.245678][T21116] RDS/IB: sYz0: added
[ 1433.245766][T21116] smc: adding ib device sYz0 with port count 1
[ 1433.245950][T21116] smc:    ib device sYz0 port 1 has no pnetid
[ 1433.290972][   T10] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1433.313632][   T10] usb 7-1: device descriptor read/8, error -71
[ 1433.313883][ T5796] xfrm0 speed is unknown, defaulting to 1000
[ 1433.355184][ T5723] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1433.460123][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1433.480806][T14715] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1433.538970][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1433.540198][ T5723] usb 4-1: config index 0 descriptor too short (expected 443, got 63)
[ 1433.540236][ T5723] usb 4-1: config 3 has an invalid interface number: 246 but max is 1
[ 1433.540257][ T5723] usb 4-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config
[ 1433.540277][ T5723] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2
[ 1433.540305][ T5723] usb 4-1: config 3 has no interface number 0
[ 1433.540357][ T5723] usb 4-1: config 3 interface 246 altsetting 1 endpoint 0x5 has an invalid bInterval 255, changing to 7
[ 1433.540384][ T5723] usb 4-1: config 3 interface 246 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[ 1433.540412][ T5723] usb 4-1: config 3 interface 246 has no altsetting 0
[ 1433.541532][ T5723] usb 4-1: config index 1 descriptor too short (expected 443, got 63)
[ 1433.541557][ T5723] usb 4-1: config 3 has an invalid interface number: 246 but max is 1
[ 1433.541577][ T5723] usb 4-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config
[ 1433.541596][ T5723] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2
[ 1433.541617][ T5723] usb 4-1: config 3 has no interface number 0
[ 1433.541662][ T5723] usb 4-1: config 3 interface 246 altsetting 1 endpoint 0x5 has an invalid bInterval 255, changing to 7
[ 1433.541688][ T5723] usb 4-1: config 3 interface 246 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[ 1433.541716][ T5723] usb 4-1: config 3 interface 246 has no altsetting 0
[ 1433.544142][ T5723] usb 4-1: New USB device found, idVendor=0763, idProduct=23f4, bcdDevice=e1.c6
[ 1433.544171][ T5723] usb 4-1: New USB device strings: Mfr=16, Product=188, SerialNumber=13
[ 1433.544192][ T5723] usb 4-1: Product: syz
[ 1433.544206][ T5723] usb 4-1: Manufacturer: syz
[ 1433.544222][ T5723] usb 4-1: SerialNumber: syz
[ 1433.633956][   T10] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1433.654203][T14715] usb 8-1: Using ep0 maxpacket: 16
[ 1433.655432][   T10] usb 7-1: device descriptor read/8, error -71
[ 1433.659583][T14715] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1433.659611][T14715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.659631][T14715] usb 8-1: Product: syz
[ 1433.659645][T14715] usb 8-1: Manufacturer: syz
[ 1433.659660][T14715] usb 8-1: SerialNumber: syz
[ 1433.772300][   T10] usb usb7-port1: unable to enumerate USB device
[ 1433.804950][T14715] usb 8-1: config 0 descriptor??
[ 1434.026114][T14715] speedtch 8-1:0.0: speedtch_bind: data interface not found!
[ 1434.026150][T14715] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1434.033477][T14715] usb 8-1: USB disconnect, device number 6
[ 1434.072371][ T5723] usb 4-1: USB disconnect, device number 72
[ 1434.234334][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1434.400506][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1434.581735][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1434.721731][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4132'.
[ 1434.773958][T21155] loop7: detected capacity change from 0 to 16384
[ 1435.216066][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1435.625124][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1435.846291][T21116] xfrm0 speed is unknown, defaulting to 1000
[ 1436.029934][T14715] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[ 1436.127867][T21176] netlink: 'syz.1.4140': attribute type 3 has an invalid length.
[ 1436.190029][T14715] usb 7-1: device descriptor read/64, error -71
[ 1436.457924][T14715] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1436.617717][T14715] usb 7-1: device descriptor read/64, error -71
[ 1436.732668][T14715] usb usb7-port1: attempt power cycle
[ 1437.106579][T14715] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[ 1437.116957][T17289] hsr_slave_0: left promiscuous mode
[ 1437.128493][T14715] usb 7-1: device descriptor read/8, error -71
[ 1437.159837][T17289] hsr_slave_1: left promiscuous mode
[ 1437.160906][T17289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1437.160931][T17289] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1437.191270][T17289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1437.191296][T17289] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1437.371715][T17289] veth1_macvtap: left promiscuous mode
[ 1437.372851][T17289] veth0_macvtap: left promiscuous mode
[ 1437.388957][T14715] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[ 1437.412323][T17289] veth1_vlan: left promiscuous mode
[ 1437.427712][T14715] usb 7-1: device descriptor read/8, error -71
[ 1437.552867][T14715] usb usb7-port1: unable to enumerate USB device
[ 1438.008944][ T7023] Flush: task=udevd[7023] dev=loop7 state=2
[ 1438.179227][ T7023] Teardown: task=udevd[7023] dev=loop7 state=2
[ 1439.394830][T17289] team0 (unregistering): Port device team_slave_1 removed
[ 1439.459929][T17289] team0 (unregistering): Port device team_slave_0 removed
[ 1441.618034][ T5723] hid_parser_main: 68 callbacks suppressed
[ 1441.618057][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618090][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618127][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618151][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618176][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618200][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618225][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618250][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618275][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.618299][ T5723] hid-generic 0004:000B:0005.0099: unknown main item tag 0x0
[ 1441.919750][ T5723] hid-generic 0004:000B:0005.0099: hidraw0: <UNKNOWN> HID v0.80 Device [syz1] on syz1
[ 1445.348621][T14714] hid-generic 0004:000B:0005.009A: hidraw0: <UNKNOWN> HID v0.80 Device [syz1] on syz1
[ 1445.546491][T21462] fido_id[21462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1446.651865][T21516] dlm: non-version read from control device 0
[ 1451.065469][T14715] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1451.237085][T14715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1451.237132][T14715] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1451.237146][T14715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.240441][T14715] usb 8-1: config 0 descriptor??
[ 1451.427035][T16510] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1451.459179][T14715] usbhid 8-1:0.0: can't add hid device: -71
[ 1451.459304][T14715] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1451.489029][T14715] usb 8-1: USB disconnect, device number 7
[ 1451.595318][T16510] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1451.595351][T16510] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1451.595375][T16510] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1451.595417][T16510] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1451.595440][T16510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.617314][T16510] usb 7-1: config 0 descriptor??
[ 1452.047037][T14715] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1452.159788][T16510] plantronics 0003:047F:FFFF.009B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1452.228492][T14715] usb 8-1: Using ep0 maxpacket: 32
[ 1452.262665][T14715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1452.262726][T14715] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1452.262751][T14715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.327817][T14715] usb 8-1: config 0 descriptor??
[ 1452.333754][T14715] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1452.390076][T14715] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[ 1453.051997][T21594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.056161][T21594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.288941][T21594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.289557][T21594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.427119][    C0] plantronics 0003:047F:FFFF.009B: usb_submit_urb(ctrl) failed: -1
[ 1453.601687][ T5796] usb 7-1: reset high-speed USB device number 83 using dummy_hcd
[ 1453.690356][T14714] usb 8-1: USB disconnect, device number 8
[ 1453.700183][T14714] ldusb 8-1:0.0: LD USB Device #1 now disconnected
[ 1454.695633][T14715] usb 7-1: USB disconnect, device number 83
[ 1454.703484][T21601] input: syz1 as /devices/virtual/input/input100
[ 1454.986017][T21610] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4325'.
[ 1455.872886][T14715] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1456.081849][T14715] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1456.081881][T14715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1456.081902][T14715] usb 8-1: Product: syz
[ 1456.081917][T14715] usb 8-1: Manufacturer: syz
[ 1456.081932][T14715] usb 8-1: SerialNumber: syz
[ 1456.125424][T14715] usb 8-1: config 0 descriptor??
[ 1456.804242][T21621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1456.804801][T21621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1458.808503][T14715] usb 8-1: USB disconnect, device number 9
[ 1458.920048][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4332'.
[ 1458.920077][T21626] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4332'.
[ 1458.920097][T21626] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4332'.
[ 1459.809297][T14715] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1460.079088][T14715] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1460.079122][T14715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1460.079149][T14715] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1460.079176][T14715] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1460.079219][T14715] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1460.079242][T14715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1460.158775][T14715] usb 8-1: config 0 descriptor??
[ 1460.167648][T21638] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1460.668149][T14715] plantronics 0003:047F:FFFF.009C: reserved main item tag 0xd
[ 1460.688728][T14715] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1460.829434][T21632] syz.6.4334 (21632): drop_caches: 2
[ 1460.930970][T21641] netlink: 'syz.6.4338': attribute type 29 has an invalid length.
[ 1461.084960][ T8572] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1461.085044][ T8572] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1461.124575][ T8572] usb 2-1: USB disconnect, device number 31
[ 1461.264946][ T6865] usb 8-1: USB disconnect, device number 10
[ 1466.297677][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[ 1466.297775][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[ 1468.906968][T20864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1469.049356][T20864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1469.075907][T20864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1469.076948][T20864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1469.078776][T20864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1471.914451][ T5649] Bluetooth: hci4: command tx timeout
[ 1472.231591][T20864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1472.335387][T20864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1472.341105][T20864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1472.353188][T20864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1472.358813][T20864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1474.138612][ T5649] Bluetooth: hci4: command tx timeout
[ 1475.008135][ T5649] Bluetooth: hci6: command tx timeout
[ 1476.445775][ T5649] Bluetooth: hci4: command tx timeout
[ 1477.277622][ T5649] Bluetooth: hci6: command tx timeout
[ 1478.721786][ T5649] Bluetooth: hci4: command tx timeout
[ 1479.483802][ T5649] Bluetooth: hci6: command tx timeout
[ 1480.064611][T20864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1480.077362][T20864] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1480.158256][T20864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1480.229080][T20864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1480.229813][T20864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1481.072197][T20864] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1481.122500][T20864] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1481.124677][T20864] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1481.125633][T20864] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1481.138690][T20864] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1481.670140][T20864] Bluetooth: hci6: command tx timeout
[ 1482.940744][ T5649] Bluetooth: hci7: command tx timeout
[ 1483.894918][ T5649] Bluetooth: hci8: command tx timeout
[ 1485.166512][ T5649] Bluetooth: hci7: command tx timeout
[ 1485.541740][ T5723] usb 5-1: USB disconnect, device number 41
[ 1486.213852][ T5649] Bluetooth: hci8: command tx timeout
[ 1486.772528][T12528] 
[ 1486.772540][T12528] ======================================================
[ 1486.772548][T12528] WARNING: possible circular locking dependency detected
[ 1486.772561][T12528] syzkaller #0 Tainted: G             L     
[ 1486.772571][T12528] ------------------------------------------------------
[ 1486.772579][T12528] kworker/u8:47/12528 is trying to acquire lock:
[ 1486.772590][T12528] ffff8880517dd070 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1486.772641][T12528] 
[ 1486.772641][T12528] but task is already holding lock:
[ 1486.772648][T12528] ffffffff8f7c1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[ 1486.772684][T12528] 
[ 1486.772684][T12528] which lock already depends on the new lock.
[ 1486.772684][T12528] 
[ 1486.772691][T12528] 
[ 1486.772691][T12528] the existing dependency chain (in reverse order) is:
[ 1486.772699][T12528] 
[ 1486.772699][T12528] -> #6 (rtnl_mutex){+.+.}-{4:4}:
[ 1486.772723][T12528]        _mutex_lock_killable+0x63/0x1d0
[ 1486.772740][T12528]        register_netdev+0x18/0x60
[ 1486.772759][T12528]        slcan_open+0x35f/0x440
[ 1486.772778][T12528]        tty_ldisc_open+0xa1/0x100
[ 1486.772798][T12528]        tty_set_ldisc+0x365/0x540
[ 1486.772818][T12528]        tty_ioctl+0xc36/0xde0
[ 1486.772839][T12528]        __se_sys_ioctl+0xff/0x170
[ 1486.772859][T12528]        do_syscall_64+0x174/0x580
[ 1486.772880][T12528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.772896][T12528] 
[ 1486.772896][T12528] -> #5 (&tty->ldisc_sem){++++}-{0:0}:
[ 1486.772921][T12528]        __ldsem_down_read_nested+0xb2/0x790
[ 1486.772939][T12528]        tty_ldisc_ref_wait+0x25/0x70
[ 1486.772958][T12528]        tty_poll+0x6b/0x170
[ 1486.772972][T12528]        ep_insert+0x11ee/0x1830
[ 1486.772991][T12528]        do_epoll_ctl_file+0x8d5/0xf00
[ 1486.773016][T12528]        __se_sys_epoll_ctl+0x162/0x230
[ 1486.773034][T12528]        do_syscall_64+0x174/0x580
[ 1486.773053][T12528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.773070][T12528] 
[ 1486.773070][T12528] -> #4 (&ep->mtx){+.+.}-{4:4}:
[ 1486.773095][T12528]        mutex_lock_nested+0x5a/0x1d0
[ 1486.773110][T12528]        get_epoll_tfile_raw_ptr+0x86/0x1a0
[ 1486.773129][T12528]        kcmp_epoll_target+0x14f/0x1f0
[ 1486.773154][T12528]        __se_sys_kcmp+0x668/0x8f0
[ 1486.773174][T12528]        do_syscall_64+0x174/0x580
[ 1486.773193][T12528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.773210][T12528] 
[ 1486.773210][T12528] -> #3 (&sig->exec_update_lock){++++}-{4:4}:
[ 1486.773235][T12528]        down_read_killable+0xa4/0x220
[ 1486.773256][T12528]        mm_access+0x4d/0x2c0
[ 1486.773272][T12528]        proc_map_files_lookup+0x3d3/0x6b0
[ 1486.773290][T12528]        path_openat+0x112d/0x3850
[ 1486.773310][T12528]        do_file_open+0x23e/0x4a0
[ 1486.773328][T12528]        do_sys_openat2+0x115/0x200
[ 1486.773342][T12528]        __x64_sys_openat+0x138/0x170
[ 1486.773358][T12528]        do_syscall_64+0x174/0x580
[ 1486.773377][T12528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.773393][T12528] 
[ 1486.773393][T12528] -> #2 (&sb->s_type->i_mutex_key#11){++++}-{4:4}:
[ 1486.773422][T12528]        down_read+0x97/0x200
[ 1486.773442][T12528]        lookup_slow+0x46/0x70
[ 1486.773458][T12528]        path_lookupat+0x3f5/0x8c0
[ 1486.773474][T12528]        filename_lookup+0x265/0x5d0
[ 1486.773489][T12528]        kern_path+0x3d/0x150
[ 1486.773504][T12528]        bpf_prog_get_type_path+0xa3/0x270
[ 1486.773526][T12528]        bpf_mt_check_v1+0x156/0x360
[ 1486.773547][T12528]        xt_check_match+0x602/0xce0
[ 1486.773570][T12528]        __nft_match_init+0x66b/0x8c0
[ 1486.773589][T12528]        nft_match_large_init+0xc0/0x150
[ 1486.773609][T12528]        nf_tables_newrule+0x179e/0x28a0
[ 1486.773622][T12528]        nfnetlink_rcv+0x1291/0x28d0
[ 1486.773636][T12528]        netlink_unicast+0x7f5/0x990
[ 1486.773649][T12528]        netlink_sendmsg+0x813/0xb40
[ 1486.773664][T12528]        sock_sendmsg_nosec+0x13a/0x180
[ 1486.773681][T12528]        ____sys_sendmsg+0x565/0x870
[ 1486.773694][T12528]        ___sys_sendmsg+0x2a5/0x360
[ 1486.773708][T12528]        __x64_sys_sendmsg+0x1b7/0x290
[ 1486.773722][T12528]        do_syscall_64+0x174/0x580
[ 1486.773737][T12528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.773749][T12528] 
[ 1486.773749][T12528] -> #1 (&nft_net->commit_mutex){+.+.}-{4:4}:
[ 1486.773769][T12528]        mutex_lock_nested+0x5a/0x1d0
[ 1486.773781][T12528]        nf_tables_netdev_event+0xad/0x160
[ 1486.773799][T12528]        call_netdevice_register_net_notifiers+0x133/0x750
[ 1486.773819][T12528]        register_netdevice_notifier+0x96/0x160
[ 1486.773837][T12528]        nft_chain_filter_init+0x1d/0x80
[ 1486.773890][T12528]        nf_tables_module_init+0x25/0x100
[ 1486.773907][T12528]        do_one_initcall+0x250/0x870
[ 1486.773924][T12528]        do_initcall_level+0x10a/0x1a0
[ 1486.773948][T12528]        do_initcalls+0x59/0xa0
[ 1486.773959][T12528]        kernel_init_freeable+0x29d/0x3e0
[ 1486.773973][T12528]        kernel_init+0x22/0x1d0
[ 1486.773984][T12528]        ret_from_fork+0x514/0xb70
[ 1486.774001][T12528]        ret_from_fork_asm+0x1a/0x30
[ 1486.774023][T12528] 
[ 1486.774023][T12528] -> #0 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[ 1486.774046][T12528]        __lock_acquire+0x15ff/0x2e40
[ 1486.774060][T12528]        lock_acquire+0x115/0x350
[ 1486.774074][T12528]        mutex_lock_nested+0x5a/0x1d0
[ 1486.774086][T12528]        call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774099][T12528]        unregister_netdevice_notifier_dev_net+0x159/0x1a0
[ 1486.774112][T12528]        nsim_destroy+0x105/0x800
[ 1486.774129][T12528]        __nsim_dev_port_del+0x14e/0x200
[ 1486.774142][T12528]        nsim_dev_reload_destroy+0x288/0x490
[ 1486.774154][T12528]        nsim_dev_reload_down+0x8a/0xc0
[ 1486.774166][T12528]        devlink_reload+0x1c5/0x890
[ 1486.774179][T12528]        devlink_pernet_pre_exit+0x1ff/0x420
[ 1486.774196][T12528]        ops_undo_list+0x17d/0x8d0
[ 1486.774208][T12528]        cleanup_net+0x575/0x810
[ 1486.774220][T12528]        process_one_work+0xaaf/0x1480
[ 1486.774233][T12528]        worker_thread+0xb05/0x10d0
[ 1486.774246][T12528]        kthread+0x388/0x470
[ 1486.774263][T12528]        ret_from_fork+0x514/0xb70
[ 1486.774278][T12528]        ret_from_fork_asm+0x1a/0x30
[ 1486.774294][T12528] 
[ 1486.774294][T12528] other info that might help us debug this:
[ 1486.774294][T12528] 
[ 1486.774300][T12528] Chain exists of:
[ 1486.774300][T12528]   &dev_instance_lock_key#3 --> &tty->ldisc_sem --> rtnl_mutex
[ 1486.774300][T12528] 
[ 1486.774326][T12528]  Possible unsafe locking scenario:
[ 1486.774326][T12528] 
[ 1486.774331][T12528]        CPU0                    CPU1
[ 1486.774336][T12528]        ----                    ----
[ 1486.774341][T12528]   lock(rtnl_mutex);
[ 1486.774351][T12528]                                lock(&tty->ldisc_sem);
[ 1486.774362][T12528]                                lock(rtnl_mutex);
[ 1486.774372][T12528]   lock(&dev_instance_lock_key#3);
[ 1486.774385][T12528] 
[ 1486.774385][T12528]  *** DEADLOCK ***
[ 1486.774385][T12528] 
[ 1486.774390][T12528] locks held by kworker/u8:47/12528: 6, last CPU#1:
[ 1486.774401][T12528]  #0: ffff88801bee0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1486.774436][T12528]  #1: ffffc9000473fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[ 1486.774468][T12528]  #2: ffffffff8f7b2b60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[ 1486.774500][T12528]  #3: ffff888037bdd160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 1486.774538][T12528]  #4: ffff888038d1e310 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 1486.774578][T12528]  #5: ffffffff8f7c1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[ 1486.774610][T12528] 
[ 1486.774610][T12528] stack backtrace:
[ 1486.774621][T12528] CPU: 1 UID: 0 PID: 12528 Comm: kworker/u8:47 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1486.774642][T12528] Tainted: [L]=SOFTLOCKUP
[ 1486.774648][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1486.774658][T12528] Workqueue: netns cleanup_net
[ 1486.774673][T12528] Call Trace:
[ 1486.774679][T12528]  <TASK>
[ 1486.774686][T12528]  dump_stack_lvl+0xe8/0x150
[ 1486.774704][T12528]  print_circular_bug+0x2e2/0x300
[ 1486.774722][T12528]  check_noncircular+0x12f/0x150
[ 1486.774740][T12528]  __lock_acquire+0x15ff/0x2e40
[ 1486.774758][T12528]  ? kthread_data+0x4f/0xc0
[ 1486.774775][T12528]  lock_acquire+0x115/0x350
[ 1486.774787][T12528]  ? call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774804][T12528]  ? call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774820][T12528]  ? call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774834][T12528]  mutex_lock_nested+0x5a/0x1d0
[ 1486.774847][T12528]  ? call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774862][T12528]  call_netdevice_unregister_net_notifiers+0x1e0/0x4c0
[ 1486.774879][T12528]  ? __pfx_call_netdevice_unregister_net_notifiers+0x10/0x10
[ 1486.774894][T12528]  ? rtnl_net_dev_lock+0x257/0x2f0
[ 1486.774909][T12528]  ? rcu_is_watching+0x15/0xb0
[ 1486.774926][T12528]  unregister_netdevice_notifier_dev_net+0x159/0x1a0
[ 1486.774942][T12528]  nsim_destroy+0x105/0x800
[ 1486.774961][T12528]  __nsim_dev_port_del+0x14e/0x200
[ 1486.774975][T12528]  nsim_dev_reload_destroy+0x288/0x490
[ 1486.774991][T12528]  nsim_dev_reload_down+0x8a/0xc0
[ 1486.775006][T12528]  devlink_reload+0x1c5/0x890
[ 1486.775026][T12528]  ? __pfx_devlink_reload+0x10/0x10
[ 1486.775043][T12528]  devlink_pernet_pre_exit+0x1ff/0x420
[ 1486.775062][T12528]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 1486.775081][T12528]  ? iput+0xb84/0xf00
[ 1486.775097][T12528]  ops_undo_list+0x17d/0x8d0
[ 1486.775112][T12528]  ? __pfx_ops_undo_list+0x10/0x10
[ 1486.775125][T12528]  ? rt_spin_unlock+0x157/0x200
[ 1486.775139][T12528]  ? idr_destroy+0x21b/0x2a0
[ 1486.775155][T12528]  ? rt_spin_unlock+0x163/0x200
[ 1486.775169][T12528]  cleanup_net+0x575/0x810
[ 1486.775183][T12528]  ? __pfx_cleanup_net+0x10/0x10
[ 1486.775198][T12528]  ? rcu_is_watching+0x15/0xb0
[ 1486.775213][T12528]  ? process_one_work+0x7fd/0x1480
[ 1486.775228][T12528]  process_one_work+0xaaf/0x1480
[ 1486.775248][T12528]  ? __pfx_process_one_work+0x10/0x10
[ 1486.775261][T12528]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1486.775281][T12528]  ? assign_work+0x3cf/0x5d0
[ 1486.775296][T12528]  worker_thread+0xb05/0x10d0
[ 1486.775318][T12528]  kthread+0x388/0x470
[ 1486.775335][T12528]  ? __pfx_worker_thread+0x10/0x10
[ 1486.775349][T12528]  ? __pfx_kthread+0x10/0x10
[ 1486.775366][T12528]  ret_from_fork+0x514/0xb70
[ 1486.775384][T12528]  ? __pfx_ret_from_fork+0x10/0x10
[ 1486.775402][T12528]  ? __switch_to+0xc89/0x1420
[ 1486.775418][T12528]  ? __pfx_kthread+0x10/0x10
[ 1486.775435][T12528]  ret_from_fork_asm+0x1a/0x30
[ 1486.775457][T12528]  </TASK>
[ 1487.034471][T21688] xfrm0 speed is unknown, defaulting to 1000
[ 1487.276356][T21688] xfrm0 speed is unknown, defaulting to 1000
[ 1487.539931][ T5649] Bluetooth: hci7: command tx timeout
[ 1487.672262][T12528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1488.453518][T20864] Bluetooth: hci8: command tx timeout
[ 1489.026935][T12528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1489.346114][T12528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1489.645752][T12528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1490.074441][T12528] bridge_slave_1: left allmulticast mode
[ 1490.074469][T12528] bridge_slave_1: left promiscuous mode
[ 1490.074639][T12528] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1490.243189][T12528] bridge_slave_0: left allmulticast mode
[ 1490.243211][T12528] bridge_slave_0: left promiscuous mode
[ 1490.243345][T12528] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1490.624894][T19758] smc: removing ib device syz0
[ 1490.638375][T20864] Bluetooth: hci8: command tx timeout
[ 1490.705133][T19758] smbdirect: ib_dev[syz0] removed
[ 1491.077569][T12528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1491.165221][T12528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1491.184910][T12528] bond0 (unregistering): Released all slaves
[ 1491.227891][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1491.228153][ T8572] xfrm0 speed is unknown, defaulting to 1000
[ 1491.228191][ T8572] syz0: Port: 1 Link DOWN
[ 1491.730077][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1492.307271][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1492.863666][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1493.192540][T12528] hsr_slave_0: left promiscuous mode
[ 1493.213888][T12528] hsr_slave_1: left promiscuous mode
[ 1493.214339][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1493.214359][T12528] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1493.257131][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1493.257147][T12528] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1493.342511][T12528] veth1_macvtap: left promiscuous mode
[ 1493.342580][T12528] veth0_macvtap: left promiscuous mode
[ 1493.342749][T12528] veth1_vlan: left promiscuous mode
[ 1493.342853][T12528] veth0_vlan: left promiscuous mode
[ 1495.502030][T12528] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1495.726430][T12528] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1495.972160][T12528] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1496.197043][T12528] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0