last executing test programs:

19m45.074628512s ago: executing program 3 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4101, 0x1005}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000240)=""/182, 0xb6}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)

19m44.053890513s ago: executing program 3 (id=1482):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x800)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50010000300000012bbd7000fbdbdf251e00000079897fc9bbf8ff061dfbb66f57364cbd5e8afb870785800000001f6772f202c2465fb6bfeb493ef995cceec18d1a1fe7276fae54110257a6df49701c00288014004e0000000000000000000000ffff64010197ffffffffffffff00", @ANYRES64=r0, @ANYBLOB="b83e9996e78677b523a626002b51e586cb9322fedf6b9446e9110d1ba829a0f7c748a4ccc163cff86cac1756ec371fa6ef4e073c8b11cc5185f0c7543cec1040543ba0be3cb4eaaf28c727b98cc2b1d58cea23c0e039b73ff62961e08916a253d3ace76b807dadfe01f24838cf4106afccd50699a794b54c1d8307a6aa6ccee18a46ba34d5cf4dd0d36463a630e42ef958074d141d75bdfeccc11ec78df106d45401e3cbf747ced066e980665e0325000d0aea2825a008c3c3af2f10390669485ee7ee615c091fc3b336870a70b51f0de8a30800a900", @ANYRES32=r0, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x400a080)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = socket$inet6(0xa, 0x80808, 0x6)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00', 0x400}, 0x1c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x11}, 0x20040810)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000001080))
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x24, 0x9a32, 0xff7f, 0x1, 0x4}})
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {{'ctr-cast6-avx\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r10, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000240)={r10, 0x2, 0x6, @broadcast}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'syztnl2\x00', <r11=>0x0, 0x1, 0x700, 0xf, 0x3, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0xc, 0xa, "fc18319d73fce89e"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)={0xbc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8fd1a19ee3f1d9d2}, 0x20000000)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

19m43.453114532s ago: executing program 3 (id=1487):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400040)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040))
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

19m43.304227646s ago: executing program 3 (id=1489):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xb4401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r4, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)

19m42.197963968s ago: executing program 3 (id=1497):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8940, 0x0)
fadvise64(r0, 0xff, 0x100000000004, 0x2)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000140)={0x0, [0x3, 0x7, 0x5], [{0x1, 0xffffffff, 0x0, 0x1}, {0x3ff, 0x0, 0x0, 0x1}, {0x0, 0x200}], 0x10})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8940, 0x0) (async)
fadvise64(r0, 0xff, 0x100000000004, 0x2) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000140)={0x0, [0x3, 0x7, 0x5], [{0x1, 0xffffffff, 0x0, 0x1}, {0x3ff, 0x0, 0x0, 0x1}, {0x0, 0x200}], 0x10}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) (async)

19m41.85933449s ago: executing program 3 (id=1501):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r1, 0x540b, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x2c8}}, './file0\x00'})
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040))

19m41.550672715s ago: executing program 32 (id=1501):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r1, 0x540b, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x2c8}}, './file0\x00'})
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040))

19m6.579925895s ago: executing program 0 (id=1667):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, r0, 0xc36c8000) (async, rerun: 32)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (rerun: 32)

19m5.451975251s ago: executing program 0 (id=1670):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x180)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0xfffffffe, 0xffffffff, 0x0, 0x2, 0xfffffffd, 0x2})

19m4.826415672s ago: executing program 0 (id=1675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$inet(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x88}, 0x40)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

19m4.344859761s ago: executing program 0 (id=1678):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x575d, 0xffff7a32, 0x1ff, 0x8, 0x1a, "fc12105588e633bbb1dfe72dace17a02d211ee"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0)
mkdir(&(0x7f0000000240)='./cgroup\x00', 0x3)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
bind(r1, &(0x7f00000003c0)=@sco={0x1f, @none}, 0x80)
umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1)
r2 = openat2$dir(0xffffffffffffff9c, 0xfffffffffffffffd, &(0x7f00000002c0)={0x84200, 0x150, 0x10}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2901, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)=0x2)
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000001c0))
prctl$PR_SET_SECCOMP(0x50, 0x1, 0x0)
r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', r4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r2, @ANYRES16=r7, @ANYRESDEC=r5, @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400", @ANYRES16=r7], 0x58}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)

19m3.89329742s ago: executing program 0 (id=1682):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) (async)

19m2.430667258s ago: executing program 0 (id=1687):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2e71513b5828a7c0243dd3e4426b3d8583105df81c78e9eba4ecc9e6f27755f4d80635d52c720c7dc982ba032ceaaa0ffd0b9d27ee8e95e1", 0x38}, {&(0x7f00000001c0)="2ff767709a7b02c5276b1044c55bed9d45b41269cb3b", 0x16}], 0x2}], 0x1, 0x4044850)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x0, 0x2713, 0x0, &(0x7f00000000c0))
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r4 = dup(r0)
write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
memfd_create(0x0, 0x3)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)="94", 0x4d}, {0x0}], 0x2)
write$P9_RSTATu(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f0020a6b6ba696e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000500187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315e"], 0x232)
ioctl$KDSETMODE(r5, 0x4b45, 0x0)
ioctl$VT_DISALLOCATE(r5, 0x5608)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x4a0c5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x1ff, 0x6, 0x2, 0x7f, 0xfffff713, 0xac2}]})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

19m2.039635057s ago: executing program 33 (id=1687):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2e71513b5828a7c0243dd3e4426b3d8583105df81c78e9eba4ecc9e6f27755f4d80635d52c720c7dc982ba032ceaaa0ffd0b9d27ee8e95e1", 0x38}, {&(0x7f00000001c0)="2ff767709a7b02c5276b1044c55bed9d45b41269cb3b", 0x16}], 0x2}], 0x1, 0x4044850)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x0, 0x2713, 0x0, &(0x7f00000000c0))
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r4 = dup(r0)
write$UHID_INPUT(r4, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
memfd_create(0x0, 0x3)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)="94", 0x4d}, {0x0}], 0x2)
write$P9_RSTATu(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f0020a6b6ba696e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000500187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315e"], 0x232)
ioctl$KDSETMODE(r5, 0x4b45, 0x0)
ioctl$VT_DISALLOCATE(r5, 0x5608)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x4a0c5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x1ff, 0x6, 0x2, 0x7f, 0xfffff713, 0xac2}]})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

18m34.945001008s ago: executing program 2 (id=1821):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000b40)={0x0, @reserved})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYBLOB="4166c260fd67a094ccf2cd99393bcec5eabe3da19326e0e61413c2095a38a594871950b24177de57fb536062fd8800", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x98b00, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {}, {0x4}]}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80868c2594f913", 0x11}], 0x1}, 0x8001)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0xa1ff}, 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000180)='syz0\x00')
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x6, 0xfa, 0x46}, 0x0)

18m34.882950522s ago: executing program 2 (id=1822):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) (async, rerun: 64)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_helper', 0x1c1a80, 0x48) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

18m34.787579547s ago: executing program 2 (id=1823):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x1, 0x2, {0x2, 0xff, 0x1}, {0x2, 0x1, 0x2}, 0xff, 0xff}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x1}, 0x2, 0xfe}, {0x3, 0x2, {0x2, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0xfe, 0x1}, {0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}, 0xfe}, {0x0, 0x2, {0x2, 0xf0, 0x3}, {0x1, 0xff, 0x1}, 0xfe, 0x1}], 0x20)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async)
r4 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={r5, 0x200, 0xdda, 0x648, 0x8, 0x8}, 0x14) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r5, 0x80}, 0x8) (async)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

18m34.084913099s ago: executing program 2 (id=1827):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60)
sched_setscheduler(0x0, 0x2, 0x0)
msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3800)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
timer_create(0x5, &(0x7f0000000380)={0x0, 0x1f, 0x4, @thr={&(0x7f00000002c0)="120c1cd72fc947cb1c4a2a457cd76775cca59ada8859d55fd0a8214706a55dde7401ffeffd5d8297f185019b629f9e05af3df10809b9ca2250140dac88a10dde726b41f8256369418ea4ae604b05a619792f46a32643c8f24aabded850b0227853d530b72a7e4642aa25f8e2c62e5c4f412f6e6362336388f8", &(0x7f0000000340)="c83ef12bf9b87a6836f7"}}, &(0x7f00000003c0))
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r8 = dup3(r6, r7, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000000), 0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r1, 0x714, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)

18m33.75280272s ago: executing program 2 (id=1830):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000b40)={0x0, @reserved})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYBLOB="4166c260fd67a094ccf2cd99393bcec5eabe3da19326e0e61413c2095a38a594871950b24177de57fb536062fd8800", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x98b00, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80868c2594f913", 0x11}], 0x1}, 0x8001)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0xa1ff}, 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000180)='syz0\x00')
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x6, 0xfa, 0x46}, 0x0)

18m33.370944594s ago: executing program 2 (id=1831):
ftruncate(0xffffffffffffffff, 0x1)
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x444400)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d61637674617000000009005553cd1f77d86f010073797a310000000038000000050a01010600000000000000010020000c00024000000000000000010900010073797a31000000000c000480080002cd4f86996d6e7448909d11595dd3be25054b0fdf4254f30a50273c562683ad139867ccfb3df83a454b06000000000000005f0706"], 0xd4}}, 0xc800)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000000)=0x7)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x19, 0x0, <r6=>0x0})
ptrace(0x10, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r6})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)
mprotect(&(0x7f0000a68000/0x4000)=nil, 0x4000, 0x8)

18m33.126000132s ago: executing program 34 (id=1831):
ftruncate(0xffffffffffffffff, 0x1)
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x444400)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d61637674617000000009005553cd1f77d86f010073797a310000000038000000050a01010600000000000000010020000c00024000000000000000010900010073797a31000000000c000480080002cd4f86996d6e7448909d11595dd3be25054b0fdf4254f30a50273c562683ad139867ccfb3df83a454b06000000000000005f0706"], 0xd4}}, 0xc800)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000000)=0x7)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x19, 0x0, <r6=>0x0})
ptrace(0x10, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r6})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)
mprotect(&(0x7f0000a68000/0x4000)=nil, 0x4000, 0x8)

11m19.236814275s ago: executing program 5 (id=3941):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0x858d, 0x0, 0x1, 0xc1}, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xc, 0x6, [0x4, 0x3, 0x0, 0xa, 0x5, 0x570]}, &(0x7f0000000080)=0x14)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006)
sendfile(r0, r0, 0x0, 0x7ffff000)
r2 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x6)
ftruncate(r2, 0x6)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
getrlimit(0xd04341df388b766d, &(0x7f0000000000))
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0xa0)
openat(r4, &(0x7f0000000100)='./file0\x00', 0x88182, 0x103)

11m18.918279865s ago: executing program 5 (id=3942):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$inet(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="b5cf4e9f11", 0x5}], 0x1}, 0x40)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000001000000000001"], 0xfdef)

11m18.290942035s ago: executing program 5 (id=3945):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000340)={0x1})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) (async)
socket(0x1e, 0x1, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r2, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000040)) (async)
madvise(&(0x7f00004e4000/0x3000)=nil, 0x3000, 0x3)

11m17.516393617s ago: executing program 5 (id=3946):
pipe2$watch_queue(&(0x7f0000000140), 0x80)
timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]})
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x20142, 0x70)
mkdirat(0xffffffffffffffff, 0x0, 0x98)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000008d0605000000000000000000000000010c0007800500150000000000050200000005000400000000040900020073797a300000000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
chdir(0x0)
setpgid(0x0, 0x0)
setpgid(0x0, 0x0)
syz_clone(0x600a6000, &(0x7f0000000040)="b743a366f4e441cc05746309aaff3a7c9a123a69816e9eece30e862d20e26faeff", 0x21, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x3f)
sendfile(r1, r1, 0x0, 0x7ffff000)

11m16.397622323s ago: executing program 5 (id=3949):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)
socketpair(0x21, 0x2, 0x9c98, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58)
getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x2})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000040)=[{0x1, 0x2, {0x2, 0xff, 0x1}, {0x2, 0x1, 0x2}, 0xff, 0xff}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x1}, 0x2, 0xfe}, {0x3, 0x2, {0x2, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0xfe, 0x1}, {0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}, 0xfe}, {0x0, 0x2, {0x2, 0xf0, 0x3}, {0x1, 0xff, 0x1}, 0xfe, 0x1}], 0x20)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x6, 0x8a25, 0x2})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a000, 0x0)
fallocate(r3, 0x4, 0x5e, 0x9)

11m14.136615386s ago: executing program 5 (id=3953):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000080015"], 0x3e0}}, 0x20010000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000fddbdf259681b2a2a48d90b75eb9c7fc050000000808000000636900110002001a3030303a49303a31302e30"], 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x4080)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x6, 0x2, 0x800, "e7b0c8f01664"}})

11m13.529544496s ago: executing program 35 (id=3953):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000080015"], 0x3e0}}, 0x20010000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000fddbdf259681b2a2a48d90b75eb9c7fc050000000808000000636900110002001a3030303a49303a31302e30"], 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x4080)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x6, 0x2, 0x800, "e7b0c8f01664"}})

1m19.816930468s ago: executing program 4 (id=6931):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
mount$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000100), 0x100000, &(0x7f00000002c0)={[{'vxfs\x00'}, {'vxfs\x00'}, {'/dev/rnullb0\x00'}, {'/dev/rnullb0\x00'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@smackfsdef}, {@uid_gt={'uid>', r0}}, {@uid_lt={'uid<', r2}}, {@obj_role}, {@obj_role={'obj_role', 0x3d, '*\\[)'}}, {@fsuuid={'fsuuid', 0x3d, {[0x53, 0x35, 0x64, 0x34, 0x37, 0x66, 0x37, 0x65], 0x2d, [0x63, 0x32, 0x5e, 0x62], 0x2d, [0x30, 0x32, 0x36, 0x37], 0x2d, [0x33, 0x31, 0x35], 0x2d, [0x64, 0x38, 0x64, 0x39, 0x61, 0x63, 0x30, 0x62]}}}]})

1m19.729433087s ago: executing program 4 (id=6933):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9c8)
r1 = socket$rds(0x15, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1020, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@uname={'uname', 0x3d, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}}, {@afid={'afid', 0x3d, 0x8}}, {@nodevmap}], [{@subj_type={'subj_type', 0x3d, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}}]}})
bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10)
fallocate(r1, 0x28, 0x7, 0x2)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0xf)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x111103, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x7}}, '.\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={<r4=>0x0, 0x38, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x1, @empty, 0xc}, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={<r5=>r4, 0x6, 0x1, 0x6, 0x7, 0x9}, &(0x7f0000000400)=0x14)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000440)={<r6=>r5, 0x3}, &(0x7f0000000480)=0x8)
writev(r1, &(0x7f0000000600)=[{&(0x7f00000004c0)="9a9addba48d5ac3a43cae1ab3b6a6e79cd4a5cea6bbefa0623d6aa8cf4e6d43b5c7a077162d0630908efff42", 0x2c}, {&(0x7f0000000500)="c64f2ce32f1e9d364d5843974fe875bfaac494256553ec7d818fa83d85eff896212f30aee0ee726e596cf21b188dac974ef319939573427bc07a35cafa78ffd9aef891d62604d3e5e4390aa992e7a2751cb995ef428b4f595e1adb06913cf244bfee30f59affe9f8302d8611f5b0f8f067f3435cdccfc1257184e71f9acab660de91d60d997f6b3bd9a704ddb6a2f45202dcea73801ca83527e52f55aaed966d0c3a502aa4ceba187ad397a078b002f1311405f91cbf60828479f2f0003a02b234f82d126cefbfde9b30b96448d37a600226068e9c6d2a36137057400e521b2f", 0xe0}], 0x2)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
recvmsg(r7, &(0x7f0000001bc0)={&(0x7f0000000640)=@caif, 0x80, &(0x7f0000001b00)=[{&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000000840)=""/164, 0xa4}, {&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/5, 0x5}], 0x7, &(0x7f0000001b80)=""/60, 0x3c}, 0x20)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001c00)={0x6, 0x0, 0x800a, 0x8, 0x7, 0x7, 0x0, 0x7, r6}, &(0x7f0000001c40)=0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000001e80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x170, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xea87}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf521}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2c1b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002080)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff}, './file0\x00'})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f00000030c0)={&(0x7f00000020c0)=[0x0, 0x8, 0x7, 0x4, 0x7, 0xd, 0x5, 0x1d6, 0x4, 0x1, 0x8, 0x1, 0x44e, 0x9, 0x8e, 0x2, 0xd48, 0x8, 0x9, 0x7, 0x865, 0xf91, 0x1, 0x7, 0x6, 0xfffffffd, 0x6, 0x7, 0x3, 0x101, 0x7, 0x4388, 0x3, 0xfff, 0x80, 0x9, 0x3, 0xfffffffb, 0x9, 0xa000, 0x10, 0xfffff9b8, 0x7b2a, 0x200, 0x4, 0x8, 0x8000, 0x0, 0x6, 0x1, 0x401, 0x0, 0x5, 0x9, 0x5, 0x8, 0x15, 0x23fa, 0x5, 0x0, 0x300, 0x0, 0x8, 0x9, 0x800, 0xd, 0x0, 0x6, 0x57, 0xb, 0x2, 0xe7, 0x0, 0x1e0, 0x0, 0xfffffffa, 0x8, 0x8, 0x6, 0x9, 0x6, 0x978, 0x3, 0x100, 0x9, 0xf, 0x80000000, 0xb7, 0x0, 0x0, 0x6, 0x4e, 0xac, 0x2, 0x5, 0x6, 0x7, 0x0, 0x10000000, 0x7, 0x0, 0x7fff, 0x1, 0x3, 0x6, 0x6, 0x8, 0x1, 0x5, 0x5, 0x6, 0x10, 0x4, 0x805, 0x1, 0x10000, 0x6ec, 0x8, 0x9, 0x153a6296, 0x37, 0x3, 0xfffffffd, 0x9, 0x6, 0x1000, 0x7, 0x1e, 0x6, 0x200000, 0xbd, 0xffff, 0x5a2, 0x8000, 0x7, 0x7a, 0x1, 0xc, 0x8, 0x1, 0x8, 0x9, 0x226, 0x9, 0x10001, 0x9, 0x1c, 0x100, 0x4, 0x9, 0x54, 0x5, 0x9f6, 0x0, 0x7ff, 0xc4, 0x8, 0xc0, 0x6108, 0x5, 0xffffffff, 0x10, 0x8, 0x8, 0x1, 0x9, 0x7, 0x7, 0x781a, 0x7, 0x8, 0xa, 0xff, 0x8, 0x1, 0x8, 0x0, 0x87, 0x3, 0x615, 0x4, 0x2, 0x6, 0x8, 0x5, 0x70000000, 0x84, 0xa, 0x4, 0x9, 0x7b5, 0x9, 0x1, 0x10001, 0x1, 0x2, 0x1, 0x0, 0x80, 0x5, 0x6, 0xffffff12, 0x6, 0x1, 0x4, 0x8, 0x7c5, 0x200, 0x54a, 0x9, 0xff, 0x7fffffff, 0x6, 0x9, 0x9, 0xf, 0x6, 0x8, 0xfffffab4, 0x4, 0x7ff, 0x4, 0x5, 0x8, 0x6, 0x400, 0xd45c, 0x8, 0x6, 0x3, 0x0, 0x9, 0x5, 0x1, 0x430064b2, 0xb, 0x6, 0x7, 0x2, 0x7, 0x2, 0x7, 0x40, 0x10000, 0x0, 0x81, 0x6671, 0x1, 0x6, 0x8, 0x7, 0x0, 0x4000000, 0x3, 0x82, 0x4, 0x9, 0x9, 0x4, 0x7, 0x1, 0x9, 0x1, 0x2, 0x7, 0x2, 0x3f50, 0x3, 0x7, 0x80, 0x9, 0x3, 0xbbe, 0x3, 0x7f, 0x8, 0x400, 0x1, 0x0, 0x3, 0x2, 0x6, 0x7ff, 0x7, 0x5, 0x49, 0x0, 0x0, 0x1, 0x1, 0xfe0, 0x6, 0x100, 0x365, 0x3, 0x5, 0xffffff80, 0x8, 0x8, 0x3ff, 0x7, 0x2, 0xfffffe00, 0x7, 0x1000, 0x4, 0x10, 0xfffffff9, 0xfffffffa, 0x7a72, 0x4, 0x258, 0x2, 0x7, 0x4, 0x6, 0x6, 0x37, 0x1, 0x1000, 0x9, 0x852, 0xa6c, 0xe, 0xc, 0x8, 0x7, 0x3, 0x4e, 0x8802, 0x7, 0x7, 0xf67, 0x39, 0x2, 0x9, 0x0, 0x3, 0x0, 0x5, 0x7fffffff, 0x9, 0xf, 0x0, 0x7, 0x76f8, 0x8, 0x0, 0x7, 0xa7c, 0x3, 0xa, 0x2ae2, 0x8, 0xffff, 0x3, 0xfffffffe, 0x2, 0x7, 0x62, 0x18, 0x2, 0x1, 0x4, 0x5, 0x7, 0x4, 0x0, 0x9, 0x9, 0x5, 0x7, 0x1, 0x1, 0xf, 0x8, 0x5, 0x6, 0x2, 0xfffffffe, 0x80000000, 0x6, 0xe69f, 0x7, 0x401, 0x0, 0x5, 0x56e6, 0x7, 0xe, 0x101, 0x2, 0x400000, 0x400, 0x387, 0x1, 0x0, 0x0, 0x72, 0x6, 0x0, 0x4f24, 0x6, 0xfff, 0x80000000, 0x1, 0x8, 0x6, 0x7, 0x2, 0x2, 0xffff, 0x4, 0xff, 0x7f, 0x85b, 0x100, 0xc, 0x2, 0x8, 0x9, 0x7c9, 0x4, 0xf, 0x4d24, 0x5, 0x1ff, 0x1, 0x7, 0x6, 0x7, 0xffffff15, 0x2, 0x89, 0x2, 0x7547, 0x5, 0xa00, 0x6, 0x6, 0x90, 0x7, 0x6, 0x5, 0x8, 0x9, 0x1, 0x7f41, 0x2, 0x2, 0x0, 0x101, 0x0, 0xfffffffc, 0x7fffffff, 0x1, 0x111f385b, 0x6, 0x6, 0x30000000, 0x1, 0x8, 0x6, 0x0, 0x6, 0x4, 0x3ff, 0x1, 0x7, 0x40000, 0x80000001, 0x81, 0xa, 0x4a94, 0x11, 0x8, 0x2, 0x4, 0x1ff, 0x2, 0xfbb5, 0x1, 0x99, 0x4, 0xf, 0xa, 0x1, 0xbab1, 0x5, 0x8825, 0x7, 0x101, 0x0, 0x4, 0x8, 0x80000001, 0x8, 0x2, 0xfffffff9, 0xad, 0x80000001, 0x7, 0x2de, 0x0, 0x0, 0x8, 0x6, 0x5, 0xfffffffa, 0xfffffffe, 0xe, 0x400, 0x100, 0x3, 0x0, 0x384e, 0xfff, 0x5, 0x2, 0xfff, 0x8001, 0xf9, 0xff, 0x4, 0x1, 0x5, 0x7, 0x2, 0x3, 0xaea00000, 0x2e88, 0xae70, 0xab, 0x74, 0xf, 0x3, 0x93, 0x0, 0x800, 0x6, 0x9, 0x7b2, 0x4, 0x355e, 0x2, 0xfffffff8, 0x8, 0x4, 0x969, 0x5, 0x8, 0x6, 0x6, 0x3, 0x10, 0x10, 0x4, 0x3, 0x7, 0xb12, 0x9, 0x7, 0x7e9a, 0x9, 0xffffffff, 0x8, 0xd3, 0x9, 0x4, 0x0, 0x8, 0x3, 0x7, 0x8, 0x10001, 0x7, 0x7, 0x1, 0x4, 0x6, 0x1, 0xffffffff, 0xd74, 0x80000001, 0x5, 0x7, 0x80000000, 0xfffffff9, 0x7f, 0x4, 0x6, 0x1, 0xc4ff, 0x5, 0x800, 0x1, 0x7, 0x8, 0x6, 0xc, 0x7, 0x8, 0x4, 0x9, 0x6, 0x7, 0x9, 0xcc, 0x4, 0x1, 0x8, 0x5, 0x3, 0x2, 0xa, 0x3, 0x8, 0x88e, 0x6, 0x7fff, 0xa, 0x7, 0x5, 0xfffffffa, 0x0, 0xd, 0x74d5, 0xac6e, 0x6, 0x9ff8, 0x80000000, 0x0, 0x1, 0x2, 0x318, 0x5, 0x4, 0x0, 0x5, 0x4, 0x1, 0x5, 0x1000000, 0x6, 0x0, 0x0, 0x8000, 0x9, 0x3, 0x7, 0x2, 0x100, 0x670146b7, 0x8, 0x2000000, 0x8, 0x3ff, 0x40, 0x6, 0x2, 0x3, 0x4, 0x40, 0x6, 0x1000, 0x9, 0x2, 0x3ff, 0x8a3e, 0x1000, 0x3, 0x0, 0x81, 0xfffffffb, 0x7, 0x9, 0x2, 0x220, 0x5, 0xae7cc2a, 0x2, 0x1, 0x4, 0x0, 0x40000, 0x8, 0x7, 0x2, 0x6, 0x4, 0x3ff, 0x2, 0xff, 0xfffffffb, 0x5, 0x7, 0x1, 0x10000, 0xfffffffe, 0x4, 0x1ff, 0x837, 0x1, 0x7, 0xf952, 0x8d08, 0x5, 0x0, 0x8000, 0x80000000, 0x3, 0x4, 0x4000, 0x1, 0x3, 0x0, 0xfffffff9, 0xc0, 0x4000, 0x3, 0x1f39, 0x0, 0x212cd1ae, 0x4, 0xf8f9, 0x8, 0x9, 0x7ff, 0x7, 0x4, 0x4, 0x3, 0x0, 0x1, 0x3, 0x5, 0x0, 0xd15b, 0x4, 0x2, 0x4, 0x7, 0x4, 0x2204, 0xfffffffd, 0x3115, 0x3, 0xfffffffe, 0x9, 0x10, 0x9, 0x84d7, 0x0, 0x81, 0x2, 0x5, 0x910c, 0x5, 0x3c000, 0x6, 0x3, 0x8001, 0x1, 0x9, 0x3, 0x80, 0xb, 0x800, 0x3, 0x101, 0x9, 0xffffffff, 0x9, 0x5, 0x1, 0x125, 0x7f, 0xdc, 0x4, 0x4, 0x5, 0x8ba, 0x1, 0x6, 0x9, 0xe8e, 0x2, 0x7f, 0x1ff, 0x5, 0x58, 0x4, 0x2, 0xfffffffd, 0xffff, 0x4, 0x3586, 0xe, 0xfffffff8, 0xdc3d, 0x4, 0x9, 0x800, 0x7, 0x0, 0x6, 0xfff, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0xfffffffa, 0x99, 0x3, 0x4, 0x1650, 0x7, 0x1, 0xb, 0x1000, 0x2, 0xe, 0x2, 0xffffffc5, 0xfffffff9, 0x5037dc94, 0xfffffffe, 0x9, 0x6, 0x3, 0xa4, 0x2, 0x7, 0x3, 0x100, 0x3, 0x80000000, 0x9, 0x0, 0x1df4, 0x0, 0x3, 0xb3, 0x1, 0x2, 0x441, 0xff, 0x1, 0xf, 0x0, 0x2, 0x5, 0x2, 0x8, 0x0, 0x5, 0xd493, 0x4, 0x4, 0x8, 0x0, 0x401, 0x0, 0x7fffffff, 0x64, 0xc, 0x0, 0xa, 0x39faae31, 0x8, 0x1, 0x2, 0x6, 0x1, 0x8000, 0x7ff, 0x7779eb99, 0xf4ce, 0x1, 0x0, 0x4af761a8, 0x6, 0x0, 0x8, 0x6, 0x6, 0x8, 0x7, 0x0, 0xfd64, 0x7e47, 0x6e7c, 0x7, 0x19f9, 0x5, 0x4, 0x3fe000, 0x81, 0x7, 0x1b, 0x29, 0x3bfd, 0x1, 0x800, 0xff, 0x401, 0xe41, 0x1ff, 0xfffffff7, 0x9, 0x30, 0x3, 0x9, 0xd, 0x5, 0x10, 0xf, 0xfffffffc, 0x3, 0xb166, 0x74, 0x8, 0x0, 0x9, 0x8001, 0x7e, 0x6, 0x5, 0x9, 0x3ff, 0x3, 0x8, 0x2, 0x0, 0xde1, 0xfffffff7, 0x6, 0x0, 0x80000001, 0x80000001, 0x6, 0x1, 0x4, 0x2, 0x9, 0x1, 0xb, 0x0, 0x5, 0xb, 0x11, 0x4, 0x9, 0xd, 0x6, 0x5, 0x846, 0x9, 0x8, 0xffffffff, 0x8000, 0xd44, 0x5c, 0x8, 0x5, 0x9, 0x5, 0x5, 0x6, 0x7, 0xfffff097, 0x0, 0x3, 0x8, 0x7, 0x8, 0x731, 0xb, 0x0, 0x0, 0x1ff, 0x6380, 0x9, 0x74288b37, 0x10, 0x9, 0x9, 0x88b, 0xd6ec, 0x454864e8, 0x3, 0x0, 0xb62a, 0xd, 0x4a, 0x7d, 0x80000000, 0x5, 0x2, 0xff, 0x7, 0x1, 0x3ff, 0x7f, 0xb727, 0x2, 0x2, 0xee7a, 0x8, 0x7, 0x8, 0x8, 0x6, 0x8, 0x1, 0x6, 0x2, 0x10000, 0xf, 0xfffffffd, 0x9], 0x2, 0x400, 0x401})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000003100)={0x8, 'pim6reg\x00', {'bridge0\x00'}, 0xf20})
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000003140), &(0x7f0000003180)=0x4)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r10, 0x4068aea3, &(0x7f00000031c0)={0xa8, 0x0, 0x3})
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x885ee534f94b5327, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x550130cd}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40004001)

1m19.564337219s ago: executing program 4 (id=6936):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)
r1 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x305800, 0x48) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001180)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) (async)
r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000cc0))
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f00009f1000/0x4000)=nil, 0x4000})
open(&(0x7f0000000080)='./file0\x00', 0x468140, 0x49)

1m19.421499543s ago: executing program 4 (id=6937):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00')
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
readv(r1, &(0x7f0000003380)=[{&(0x7f0000000000)=""/86, 0x56}, {0x0}, {0x0}], 0x3)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4)
r5 = syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x7, 0x80, 0x97, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffd, 0x2}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x6, 0x10, "2ea8"}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0xe, "53846e19"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x4, 0x4, 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x5, "4eebde16e3"}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x1], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x81, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x0, 0x6, {0x7, 0x25, 0x1, 0x82, 0x7f, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0xa, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x6, 0x7, {0x7, 0x25, 0x1, 0x1, 0x9, 0xffff}}}}}}}]}}, &(0x7f00000024c0)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x200, 0xf6, 0xc, 0x81, 0xd7, 0x9}, 0x56, &(0x7f00000023c0)={0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xd0, "dcf6c1b16b22c5c28ec74a2dbfb91d95"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "eb84fd9b1dd330e55f9bab28382c0438"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3b81fe6f965af128db7c39d644a396a3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x55, 0x7, 0x2, 0x9e}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x4, 0x3}]}, 0x1, [{0x64, &(0x7f0000002440)=@string={0x64, 0x3, "ecc2855a0292eefd89d4ba0c4c82d6737c568402c2cd2f0f247d6316a41e53518904ee67a60173855ac28330a45f920dc00ca84bb9bdd091329aa81867962ca925a292bdfaa70885f37790522937b8208c6efe8d46031229e532ec7991b9c929bad6"}}]})
syz_usb_control_io$uac1(r5, &(0x7f00000026c0)={0x14, &(0x7f0000002500)={0x40, 0xc, 0xde, {0xde, 0xb, "f9299a37be3fb7f485841c774324016bbdc00ca3f3feba5eef2c00399fa551d851577fe111501730869c0bde25790083355097d2742e5b292de123687e5c968a6226b0714994c601a4747b67509c5ebde40fa20b6275c58d397c3558d7f12ecb648dfbad08f0df5da75124eda748af5af8237c2efd5aecd2151e3daca9c4194fe32a80ec72a7ea87609e58478215296fd4578f0d88cbf669b06f61105044f89e5a2d477eb3be594a00dfcde69ca96cf1c66063fb1dbac396d650d1ed93501dacdb5376a799116c6e7f1a56ab7c9ab2510202c5ab2e53e7996a51d7ff"}}, &(0x7f0000002600)={0x0, 0x3, 0x90, @string={0x90, 0x3, "62ef49e7235ac5a876016a00f1fb5a0e73be1669a60031495bf16502b27f44ed6cb51ed8570713df1f1ab114345899a15bbf2be60605c63a46a54db6e3a5c631547c33433d9c8e4f488572e462e5873a075337e4df8f180d70052ece6d5717cf962e8f7e9848fb12bc10c01c5b52573ccd497534d85b112f642d98fd348b34229e899f9decb4b1113617532b08d6"}}}, &(0x7f0000002980)={0x44, &(0x7f0000002700)={0x40, 0xc, 0xb4, "ef82c84f4ff581503f67794f58632bb32ba59a654e45a121d1e14181b4d62f4088e3a5a59cdd193fffd978a021b5a7a0259c382b6550f7a1b02020d6757969c4b64f48dd514e8f81b109abdedde706afdd94bfad75ec2a42649e53f4413859ff61c3e34679bbc4c295c6a782185f781ea130a7487ee97dc085f3be283e83e393ccbca44f9cad7a69f019254561f20fe15c87ac73722cdabebc7f115771edf1c68e1e6c5c67efcbef48a1a06d39d96faad48fc5c6"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x76}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002840)={0x20, 0x81, 0x2, "99bf"}, &(0x7f0000002880)={0x20, 0x82, 0x1, "c5"}, &(0x7f00000028c0)={0x20, 0x83, 0x2, "22f8"}, &(0x7f0000002900)={0x20, 0x84, 0x2, "f871"}, &(0x7f0000002940)={0x20, 0x85, 0x3, "d70408"}})
shutdown(r4, 0x2)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x4, 0x398, 0xfffffffd, 0x6, 0x0, [{0x2, 0x81, 0x6, '\x00', 0xff}, {0x2, 0x6, 0x7, '\x00', 0x8}, {0x9, 0x4, 0x6, '\x00', 0x8}, {0x4, 0x8, 0x1}, {0x8, 0x4, 0x9, '\x00', 0x9}, {0x7, 0x5, 0x10, '\x00', 0x7}, {0xff, 0x0, 0x8, '\x00', 0x6}, {0x4, 0x1, 0x7, '\x00', 0xfd}, {0xb0, 0x13, 0x9, '\x00', 0x51}, {0xfa, 0xb, 0x2, '\x00', 0x7}, {0xff, 0x5, 0x8}, {0x6, 0xc, 0xa, '\x00', 0xb}, {0x9, 0xb4, 0x84, '\x00', 0xd7}, {0xf1, 0xd, 0xd2, '\x00', 0x10}, {0x7f, 0x48, 0x1, '\x00', 0x4}, {0x7f, 0x9, 0x19, '\x00', 0x4}, {0x3, 0x8, 0x2, '\x00', 0x9}, {0x1b, 0x40, 0xcf, '\x00', 0xff}, {0x8, 0x3, 0x8, '\x00', 0x6}, {0x2, 0x81, 0xc7, '\x00', 0x34}, {0x7f, 0x0, 0x3, '\x00', 0x2}, {0x7f, 0xa4, 0x9, '\x00', 0x8}, {0x8, 0x9, 0xc, '\x00', 0xf8}, {0x4, 0xe, 0x8, '\x00', 0x6}]}})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002140)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000022c0)=0xe8)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000080)=@sr0, r6, &(0x7f0000002280))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000)

1m16.236796169s ago: executing program 4 (id=6951):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040081000000000100000000000008", 0x1d)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)={0x28, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x52}, @void, @val={0xc, 0x99, {0x2, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}]]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf731870fe34ba2b}, 0x48080)
r7 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

1m16.15751044s ago: executing program 4 (id=6952):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000280)=0xa354, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "e73d924d4b1fa0141555909d6357f7e6a019b9836fee0416b8e25b1622ecfab7", "75d1536b4553d07138dff241fa2b6652829393d7cc7528867d178a0f797d95a6", "624968dcaef91107ed2e11c12dfea4db74fd14034418e55246239bf117f1a9d2", "13d2d543f715de9edc88033e0d621acfd4ba72deb1ee3ae50587c26b9d73cbe9", "5c92f21472bf8147cf79ee7c122feb46c0f5c79b9b07c9d756710967e182671f", "05c12b6342cc20c30dd131e8", 0x6, 0x8, 0xfff, 0xfffffffa, 0x2}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000005bc0), 0x12)
openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)

1m1.034390196s ago: executing program 36 (id=6952):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000280)=0xa354, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "e73d924d4b1fa0141555909d6357f7e6a019b9836fee0416b8e25b1622ecfab7", "75d1536b4553d07138dff241fa2b6652829393d7cc7528867d178a0f797d95a6", "624968dcaef91107ed2e11c12dfea4db74fd14034418e55246239bf117f1a9d2", "13d2d543f715de9edc88033e0d621acfd4ba72deb1ee3ae50587c26b9d73cbe9", "5c92f21472bf8147cf79ee7c122feb46c0f5c79b9b07c9d756710967e182671f", "05c12b6342cc20c30dd131e8", 0x6, 0x8, 0xfff, 0xfffffffa, 0x2}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000005bc0), 0x12)
openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)

16.028076784s ago: executing program 1 (id=7255):
syz_open_dev$hiddev(0x0, 0x9, 0x3a180)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000014c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0xb4, 0x5, 0xa4, 0x10, 0x6e}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x38, 0xa5, 0xa3, 0x20, 0x2c7c, 0x125, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
read$char_usb(r2, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_disconnect(r1)

15.665002978s ago: executing program 7 (id=7256):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x9c, 0x4f, 0x20, 0x7c9, 0xe, 0x5d4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12.443403917s ago: executing program 7 (id=7260):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0x4, "1df73cc1"}, 0x0, 0x0, 0x0, 0x0})

12.394105392s ago: executing program 1 (id=7261):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.297128334s ago: executing program 6 (id=7265):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})

9.258092763s ago: executing program 7 (id=7266):
syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x351, 0xd5, 0x1, 0xab, 0x40, 0x7c4, 0xa001, 0x4b19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0x5a, 0x9, 0x0, 0x36, 0xe4, 0x33, 0x40}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

8.371146408s ago: executing program 6 (id=7267):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)

7.685098254s ago: executing program 1 (id=7268):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d21534081e041c409c1d0102030109021200d9000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_disconnect(r0)

6.871901274s ago: executing program 6 (id=7269):
syz_usb_connect(0x3, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009a714820da0b12c83a8a01020301090229000100ff10000904b80001ffffffd9"], 0x0)

6.160232622s ago: executing program 7 (id=7270):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r3, &(0x7f0000006800)="10", 0x1)
write$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r1)

5.701073309s ago: executing program 8 (id=7271):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40f4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)

5.587067689s ago: executing program 6 (id=7272):
syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22"], 0x0)
syz_usb_connect(0x0, 0x5d, 0x0, 0x0)

5.042396034s ago: executing program 1 (id=7273):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.169105395s ago: executing program 6 (id=7274):
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

3.090828767s ago: executing program 7 (id=7275):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000002c0)={0x0, "c82bf59ac78c16b4ff99af4b1de7092cd7c684a0132f9d50aa5f41f356e186e5", 0x7, 0x200, 0x3, 0x10000, 0x10, 0x2, 0x1, 0xd})
r2 = dup(r0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_int(r3, &(0x7f0000001500)=0xffffffffffffffff, 0x12)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r4 = dup(r0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}}, 0x0, 0xbffa, 0xe652, 0x2, 0x4, 0x8, 0xfc}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.739081143s ago: executing program 6 (id=7276):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.557113673s ago: executing program 8 (id=7277):
r0 = syz_open_dev$hidraw(&(0x7f0000002040), 0x6, 0x80000)
write$hidraw(r0, 0x0, 0x0)

2.543723084s ago: executing program 8 (id=7278):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
read$hiddev(r0, &(0x7f0000000080)=""/102, 0x18)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120110017f7a72082f070022bdf8010203010902240001a200003f090609090003ff0308400400"/51], 0x0)

1.925291552s ago: executing program 1 (id=7279):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db9be9010203010902120001000000000904"], 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

1.153146115s ago: executing program 8 (id=7280):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xb, 0x16, 0x0, 0x3, "eaa951582439c86d48342eb1fffcd318d133bfcd445b818825874f8204c406fa"})

627.639349ms ago: executing program 8 (id=7281):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)

616.788148ms ago: executing program 1 (id=7282):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, 0x0, 0x0)
write$char_usb(r2, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000000240))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r4, 0x5452, &(0x7f0000000240)=""/77)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000cc0))

473.077833ms ago: executing program 8 (id=7283):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "bbbb5b6e"}]}}, 0x0}, 0x0)

0s ago: executing program 7 (id=7284):
syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]})
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

kernel console output (not intermixed with test programs):

5] usb 7-1: SerialNumber: syz
[ 1456.513403][T20175] usb 7-1: config 0 descriptor??
[ 1456.521550][T20175] smsc95xx v2.0.0
[ 1456.653179][T29236] ft260 0003:0403:6030.0043: unknown main item tag 0x7
[ 1456.844101][T29236] ft260 0003:0403:6030.0043: chip code: 6424 8183
[ 1456.932059][T20175] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1456.943234][T20175] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1457.045892][T29236] ft260 0003:0403:6030.0043: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[ 1457.246497][T29236] ft260 0003:0403:6030.0043: failed to retrieve status: -32, no wakeup
[ 1457.252836][T30036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1457.264209][T30036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.280306][T29236] ft260 0003:0403:6030.0043: failed to retrieve status: -71
[ 1457.293123][T29236] ft260 0003:0403:6030.0043: failed to reset I2C controller: -71
[ 1457.319844][T29236] usb 2-1: USB disconnect, device number 98
[ 1457.394494][T20175] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1457.406307][T20175] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1457.419021][T20175] usb 7-1: USB disconnect, device number 121
[ 1458.350575][T30069] program syz.1.7015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1458.368649][T30069] program syz.1.7015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1458.425601][T30074] /dev/rnullb0: Can't open blockdev
[ 1458.801999][T30081] /dev/rnullb0: Can't open blockdev
[ 1459.105507][ T5867] usb 7-1: new high-speed USB device number 122 using dummy_hcd
[ 1459.154133][T30089] netlink: 'syz.7.7021': attribute type 4 has an invalid length.
[ 1459.161923][T30089] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.7021'.
[ 1459.264701][ T5867] usb 7-1: Using ep0 maxpacket: 32
[ 1459.279363][ T5867] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1459.288238][ T5867] usb 7-1: config 0 has no interface number 0
[ 1459.299137][ T5867] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1459.316488][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.325421][ T5867] usb 7-1: Product: syz
[ 1459.329623][ T5867] usb 7-1: Manufacturer: syz
[ 1459.337646][ T5867] usb 7-1: SerialNumber: syz
[ 1459.346706][ T5867] usb 7-1: config 0 descriptor??
[ 1459.377860][ T5867] smsc95xx v2.0.0
[ 1459.511508][T30096] /dev/rnullb0: Can't open blockdev
[ 1459.709238][T30101] ntfs3(loop7): try to read out of volume at offset 0x0
[ 1459.813862][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1459.832190][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1460.229097][T30111] /dev/rnullb0: Can't open blockdev
[ 1460.589810][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1460.608858][ T5867] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1460.632905][ T5867] usb 7-1: USB disconnect, device number 122
[ 1461.758307][T30141] /dev/rnullb0: Can't open blockdev
[ 1461.954918][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7040'.
[ 1462.111197][T29580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1462.121860][T29580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1462.133306][T29580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1462.145531][T29580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1462.155826][T29580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1462.237984][T30148] wg0 speed is unknown, defaulting to 1000
[ 1462.522822][T20176] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1462.576470][T30148] chnl_net:caif_netlink_parms(): no params data found
[ 1462.666914][T30148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1462.675128][T30148] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1462.682424][T30148] bridge_slave_0: entered allmulticast mode
[ 1462.689791][T30148] bridge_slave_0: entered promiscuous mode
[ 1462.696304][T20176] usb 2-1: Using ep0 maxpacket: 32
[ 1462.700099][T30148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1462.710833][T20176] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1462.711201][T30148] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1462.719485][T20176] usb 2-1: config 0 has no interface number 0
[ 1462.735058][T20176] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1462.737386][T30148] bridge_slave_1: entered allmulticast mode
[ 1462.744819][T20176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.759092][T20176] usb 2-1: Product: syz
[ 1462.763627][T20176] usb 2-1: Manufacturer: syz
[ 1462.765279][T30148] bridge_slave_1: entered promiscuous mode
[ 1462.768253][T20176] usb 2-1: SerialNumber: syz
[ 1462.780348][T20176] usb 2-1: config 0 descriptor??
[ 1462.791069][T20176] smsc95xx v2.0.0
[ 1462.826097][T30148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1462.839611][T30148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1462.890182][T30148] team0: Port device team_slave_0 added
[ 1462.901463][T30148] team0: Port device team_slave_1 added
[ 1462.946930][T30148] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1462.955236][T30148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1462.982140][T30148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1462.995907][T30148] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1463.006542][T30148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1463.032852][T30148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1463.100720][T30148] hsr_slave_0: entered promiscuous mode
[ 1463.107770][T30148] hsr_slave_1: entered promiscuous mode
[ 1463.115086][T30148] debugfs: 'hsr0' already exists in 'hsr'
[ 1463.120844][T30148] Cannot create hsr debugfs directory
[ 1463.205919][T20176] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1463.223680][T20176] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1463.383016][T30148] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1463.399707][T30148] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1463.417600][T30148] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1463.434128][T30148] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1463.579592][T30148] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1463.610754][T30148] 8021q: adding VLAN 0 to HW filter on device team0
[ 1463.655735][T29740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.663051][T29740] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1463.689170][T29740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1463.696486][T29740] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1463.914780][T20176] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1463.941172][T20176] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1463.973410][T20176] usb 2-1: USB disconnect, device number 99
[ 1464.199203][T30148] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1464.238499][ T5875] Bluetooth: hci3: command tx timeout
[ 1464.467764][T30205] /dev/rnullb0: Can't open blockdev
[ 1464.590965][T30209] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1464.825488][T30148] veth0_vlan: entered promiscuous mode
[ 1464.849931][T30148] veth1_vlan: entered promiscuous mode
[ 1464.873720][T30214] /dev/rnullb0: Can't open blockdev
[ 1464.974780][T30148] veth0_macvtap: entered promiscuous mode
[ 1464.998240][T30148] veth1_macvtap: entered promiscuous mode
[ 1465.057402][T30148] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1465.068018][T30218] /dev/rnullb0: Can't open blockdev
[ 1465.097464][T30148] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1465.138325][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1465.159007][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1465.180605][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1465.205040][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1465.408421][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1465.434143][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1465.536318][T29740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1465.552121][T29740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1465.575042][T30228] /dev/rnullb0: Can't open blockdev
[ 1465.680267][T30230] loop2: detected capacity change from 0 to 7
[ 1465.738468][T30230] Dev loop2: unable to read RDB block 7
[ 1465.756980][T30230]  loop2: unable to read partition table
[ 1465.763460][T30230] loop2: partition table beyond EOD, truncated
[ 1465.772379][T26824] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1465.785581][T30230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1465.821482][T30233] /dev/rnullb0: Can't open blockdev
[ 1465.927115][T26824] usb 2-1: Using ep0 maxpacket: 32
[ 1465.940534][T26824] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1465.963576][T26824] usb 2-1: config 0 has no interface number 0
[ 1465.973138][T26824] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1465.994622][T26824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.005632][T26824] usb 2-1: Product: syz
[ 1466.009844][T26824] usb 2-1: Manufacturer: syz
[ 1466.014814][T26824] usb 2-1: SerialNumber: syz
[ 1466.030403][T26824] usb 2-1: config 0 descriptor??
[ 1466.051320][T26824] smsc95xx v2.0.0
[ 1466.222601][T29236] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1466.302532][ T5875] Bluetooth: hci3: command tx timeout
[ 1466.382518][T29236] usb 9-1: Using ep0 maxpacket: 32
[ 1466.390058][T29236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1466.401985][T20176] usb 7-1: new high-speed USB device number 123 using dummy_hcd
[ 1466.409960][T29236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1466.420304][T29236] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1466.429991][T29236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.440894][T29236] usb 9-1: config 0 descriptor??
[ 1466.448689][T26824] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1466.461000][T26824] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1466.592560][T20176] usb 7-1: Using ep0 maxpacket: 32
[ 1466.602383][T20176] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1466.616467][T20176] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1466.628184][T20176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.636689][T20176] usb 7-1: Product: syz
[ 1466.640917][T20176] usb 7-1: Manufacturer: syz
[ 1466.645657][T20176] usb 7-1: SerialNumber: syz
[ 1466.654743][T20176] usb 7-1: config 0 descriptor??
[ 1466.665916][T20176] usb 7-1: no audio or video endpoints found
[ 1466.856737][T29236] ft260 0003:0403:6030.0044: unknown main item tag 0x7
[ 1466.872357][T20176] usb 7-1: USB disconnect, device number 123
[ 1467.033496][T26824] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1467.052761][T29236] ft260 0003:0403:6030.0044: chip code: 6424 8183
[ 1467.052807][T26824] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1467.080176][T26824] usb 2-1: USB disconnect, device number 100
[ 1467.260058][T29236] ft260 0003:0403:6030.0044: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[ 1467.464023][T30238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.464669][T29236] ft260 0003:0403:6030.0044: failed to retrieve status: -32, no wakeup
[ 1467.500285][T30238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.522825][T29236] ft260 0003:0403:6030.0044: failed to retrieve status: -71
[ 1467.541983][T29236] ft260 0003:0403:6030.0044: failed to reset I2C controller: -71
[ 1467.593396][T29236] usb 9-1: USB disconnect, device number 2
[ 1468.247627][T30263] netlink: 'syz.1.7071': attribute type 2 has an invalid length.
[ 1468.268895][T30263] netlink: 'syz.1.7071': attribute type 9 has an invalid length.
[ 1468.296945][T30263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7071'.
[ 1468.382694][ T5875] Bluetooth: hci3: command tx timeout
[ 1468.731238][T30281] /dev/sg0: Can't lookup blockdev
[ 1468.893927][T14082] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1469.012937][ T5867] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1469.052627][T14082] usb 9-1: Using ep0 maxpacket: 32
[ 1469.062790][T14082] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1469.070937][T14082] usb 9-1: config 0 has no interface number 0
[ 1469.079498][T14082] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1469.088798][T14082] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1469.097321][T14082] usb 9-1: Product: syz
[ 1469.101505][T14082] usb 9-1: Manufacturer: syz
[ 1469.107920][T14082] usb 9-1: SerialNumber: syz
[ 1469.123025][T14082] usb 9-1: config 0 descriptor??
[ 1469.132029][T14082] smsc95xx v2.0.0
[ 1469.176314][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1469.188539][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1469.198484][ T5867] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[ 1469.208259][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.222375][   T44] usb 7-1: new high-speed USB device number 124 using dummy_hcd
[ 1469.222889][ T5867] usb 2-1: config 0 descriptor??
[ 1469.383498][   T44] usb 7-1: Using ep0 maxpacket: 16
[ 1469.390983][   T44] usb 7-1: config 53 has an invalid interface number: 240 but max is 0
[ 1469.402304][   T44] usb 7-1: config 53 has no interface number 0
[ 1469.408549][   T44] usb 7-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[ 1469.420619][   T44] usb 7-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[ 1469.432113][   T44] usb 7-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1469.443140][   T44] usb 7-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1469.460683][   T44] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[ 1469.469970][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1469.478162][   T44] usb 7-1: Product: syz
[ 1469.482433][   T44] usb 7-1: Manufacturer: syz
[ 1469.487048][   T44] usb 7-1: SerialNumber: syz
[ 1469.500705][T30290] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1469.537147][T14082] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1469.548114][T14082] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1469.666786][ T5867] aquacomputer_d5next 0003:0C70:F00D.0045: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0
[ 1469.804349][   T44] kvaser_usb 7-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[ 1469.824282][   T44] usb 7-1: USB disconnect, device number 124
[ 1469.868003][ T5913] usb 2-1: USB disconnect, device number 101
[ 1470.073738][T14082] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1470.085212][T14082] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[ 1470.097978][T14082] usb 9-1: USB disconnect, device number 3
[ 1470.350403][T30296] /dev/rnullb0: Can't open blockdev
[ 1470.465761][T30300] /dev/rnullb0: Can't open blockdev
[ 1470.477529][ T5875] Bluetooth: hci3: command tx timeout
[ 1470.490881][T30298] /dev/rnullb0: Can't open blockdev
[ 1470.609217][T30307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.774016][T19837] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1470.942380][T19837] usb 2-1: Using ep0 maxpacket: 8
[ 1470.956078][T19837] usb 2-1: too many configurations: 124, using maximum allowed: 8
[ 1470.978180][T19837] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38
[ 1471.013487][T19837] usb 2-1: can't read configurations, error -22
[ 1471.142413][T19837] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1471.303650][T19837] usb 2-1: Using ep0 maxpacket: 8
[ 1471.309561][T19837] usb 2-1: too many configurations: 124, using maximum allowed: 8
[ 1471.321072][T19837] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38
[ 1471.334408][T19837] usb 2-1: can't read configurations, error -22
[ 1471.341195][T19837] usb usb2-port1: attempt power cycle
[ 1471.692377][T19837] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1471.723056][T19837] usb 2-1: Using ep0 maxpacket: 8
[ 1471.728952][T19837] usb 2-1: too many configurations: 124, using maximum allowed: 8
[ 1471.739471][T19837] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38
[ 1471.776191][T19837] usb 2-1: can't read configurations, error -22
[ 1471.927339][T19837] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1471.971227][T19837] usb 2-1: Using ep0 maxpacket: 8
[ 1471.998711][T19837] usb 2-1: too many configurations: 124, using maximum allowed: 8
[ 1472.020392][T19837] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38
[ 1472.051856][T19837] usb 2-1: can't read configurations, error -22
[ 1472.067958][T19837] usb usb2-port1: unable to enumerate USB device
[ 1472.723062][T30344] /dev/rnullb0: Can't open blockdev
[ 1472.748928][T30347] /dev/rnullb0: Can't open blockdev
[ 1472.843516][T30349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1472.863179][T30349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1472.902924][T26824] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1473.062356][T26824] usb 9-1: Using ep0 maxpacket: 32
[ 1473.069328][T26824] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1473.077642][T26824] usb 9-1: config 0 has no interface number 0
[ 1473.086969][T26824] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1473.096113][T26824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1473.105149][T26824] usb 9-1: Product: syz
[ 1473.109339][T26824] usb 9-1: Manufacturer: syz
[ 1473.114061][T26824] usb 9-1: SerialNumber: syz
[ 1473.121192][T26824] usb 9-1: config 0 descriptor??
[ 1473.129685][T26824] smsc95xx v2.0.0
[ 1473.212518][T19837] usb 7-1: new high-speed USB device number 125 using dummy_hcd
[ 1473.372419][T19837] usb 7-1: Using ep0 maxpacket: 32
[ 1473.379781][T19837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1473.390915][T19837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1473.400858][T19837] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1473.410662][T19837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.423474][T19837] usb 7-1: config 0 descriptor??
[ 1473.535318][T26824] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1473.546546][T26824] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1473.744202][T30362] /dev/rnullb0: Can't open blockdev
[ 1473.851521][T19837] ft260 0003:0403:6030.0046: unknown main item tag 0x7
[ 1474.041596][T19837] ft260 0003:0403:6030.0046: chip code: 6424 8183
[ 1474.136964][T26824] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1474.157437][T26824] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[ 1474.174577][T26824] usb 9-1: USB disconnect, device number 4
[ 1474.249382][T19837] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[ 1474.449872][T19837] ft260 0003:0403:6030.0046: failed to retrieve status: -32, no wakeup
[ 1474.456510][T30355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.485899][T30355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1474.506089][T19837] ft260 0003:0403:6030.0046: failed to retrieve status: -71
[ 1474.513140][   T44] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1474.516261][T19837] ft260 0003:0403:6030.0046: failed to reset I2C controller: -71
[ 1474.544908][T19837] usb 7-1: USB disconnect, device number 125
[ 1474.685895][   T44] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1474.696305][   T44] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1474.707225][   T44] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.720355][   T44] usb 2-1: config 220 has no interface number 2
[ 1474.733211][   T44] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1474.753597][   T44] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1474.760439][   T44] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1474.771227][   T44] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1474.782778][   T44] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1474.798267][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.807915][   T44] usb 2-1: Product: syz
[ 1474.812732][   T44] usb 2-1: Manufacturer: syz
[ 1474.817366][   T44] usb 2-1: SerialNumber: syz
[ 1475.056221][T19837] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1475.103640][T30374] /dev/rnullb0: Can't open blockdev
[ 1475.194605][   T44] usb 2-1: selecting invalid altsetting 0
[ 1475.206917][   T44] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[ 1475.214103][   T44] usb 2-1: No valid video chain found.
[ 1475.225889][T19837] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1475.234446][   T44] usb 2-1: selecting invalid altsetting 0
[ 1475.239149][T19837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1475.247280][   T44] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1475.265240][T19837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1475.281988][T19837] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1475.302115][T19837] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1475.318386][T19837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.332717][   T44] usb 2-1: USB disconnect, device number 106
[ 1475.347009][T19837] usb 9-1: config 0 descriptor??
[ 1475.379351][T30380] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1475.820730][T19837] usbhid 9-1:0.0: can't add hid device: -71
[ 1475.849706][T19837] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1475.879263][T19837] usb 9-1: USB disconnect, device number 5
[ 1476.020581][T30398] /dev/rnullb0: Can't open blockdev
[ 1476.892870][ T5913] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1477.051688][ T5875] Bluetooth: hci0: connection err: -111
[ 1477.063559][ T5913] usb 9-1: Using ep0 maxpacket: 32
[ 1477.077143][ T5913] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1477.089228][ T5913] usb 9-1: config 0 has no interface number 0
[ 1477.143599][ T5913] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1477.175971][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.192339][ T5913] usb 9-1: Product: syz
[ 1477.198872][ T5913] usb 9-1: Manufacturer: syz
[ 1477.211485][ T5913] usb 9-1: SerialNumber: syz
[ 1477.250596][ T5913] usb 9-1: config 0 descriptor??
[ 1477.271697][ T5913] smsc95xx v2.0.0
[ 1477.482549][T30417] netlink: 'syz.1.7120': attribute type 13 has an invalid length.
[ 1477.490434][T30417] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7120'.
[ 1477.545673][T30417] syz_tun: refused to change device tx_queue_len
[ 1477.601104][T30420] /dev/rnullb0: Can't open blockdev
[ 1477.701377][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1477.727295][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1477.842494][ T5867] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1477.918895][T30425] /dev/rnullb0: Can't open blockdev
[ 1478.002341][ T5867] usb 2-1: Using ep0 maxpacket: 32
[ 1478.027970][ T5867] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0
[ 1478.045025][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.055518][ T5867] usb 2-1: Product: syz
[ 1478.059737][ T5867] usb 2-1: Manufacturer: syz
[ 1478.066997][ T5867] usb 2-1: SerialNumber: syz
[ 1478.084718][ T5867] usb 2-1: config 0 descriptor??
[ 1478.099844][ T5867] usb 2-1: ucan: probing device on interface #0
[ 1478.110512][ T5867] usb 2-1: ucan: invalid endpoint configuration
[ 1478.126031][ T5867] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1478.273407][T20176] usb 7-1: new full-speed USB device number 126 using dummy_hcd
[ 1478.329085][ T5867] usb 2-1: USB disconnect, device number 107
[ 1478.340352][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1478.373371][ T5913] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[ 1478.397213][ T5913] usb 9-1: USB disconnect, device number 6
[ 1478.454784][T20176] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[ 1478.469797][T20176] usb 7-1: config 0 has no interface number 0
[ 1478.483850][T20176] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64
[ 1478.502667][T20176] usb 7-1: New USB device found, idVendor=083a, idProduct=e503, bcdDevice=a9.ad
[ 1478.518425][T20176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.527049][T20176] usb 7-1: Product: syz
[ 1478.531253][T20176] usb 7-1: Manufacturer: syz
[ 1478.537561][T20176] usb 7-1: SerialNumber: syz
[ 1478.547228][T20176] usb 7-1: config 0 descriptor??
[ 1478.559641][T30428] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1479.174648][ T5867] usb 7-1: USB disconnect, device number 126
[ 1479.229205][ T5875] Bluetooth: hci2: connection err: -111
[ 1479.323838][T30446] FAULT_INJECTION: forcing a failure.
[ 1479.323838][T30446] name failslab, interval 1, probability 0, space 0, times 0
[ 1479.359821][T30446] CPU: 0 UID: 0 PID: 30446 Comm: syz.8.7127 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1479.359852][T30446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1479.359866][T30446] Call Trace:
[ 1479.359875][T30446]  <TASK>
[ 1479.359885][T30446]  dump_stack_lvl+0x189/0x250
[ 1479.359924][T30446]  ? __pfx____ratelimit+0x10/0x10
[ 1479.359957][T30446]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1479.359987][T30446]  ? __pfx__printk+0x10/0x10
[ 1479.360027][T30446]  ? __pfx___might_resched+0x10/0x10
[ 1479.360054][T30446]  ? fs_reclaim_acquire+0x7d/0x100
[ 1479.360087][T30446]  should_fail_ex+0x414/0x560
[ 1479.360129][T30446]  should_failslab+0xa8/0x100
[ 1479.360157][T30446]  __kmalloc_noprof+0xcb/0x4f0
[ 1479.360178][T30446]  ? kfree+0x4d/0x440
[ 1479.360195][T30446]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1479.360235][T30446]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1479.360271][T30446]  ? tomoyo_domain+0xd9/0x130
[ 1479.360309][T30446]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1479.360336][T30446]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1479.360368][T30446]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1479.360414][T30446]  ? __lock_acquire+0xab9/0xd20
[ 1479.360463][T30446]  ? __fget_files+0x2a/0x420
[ 1479.360498][T30446]  ? __fget_files+0x2a/0x420
[ 1479.360527][T30446]  ? __fget_files+0x3a0/0x420
[ 1479.360557][T30446]  ? __fget_files+0x2a/0x420
[ 1479.360592][T30446]  security_file_ioctl+0xcb/0x2d0
[ 1479.360621][T30446]  __se_sys_ioctl+0x47/0x170
[ 1479.360646][T30446]  do_syscall_64+0xfa/0x3b0
[ 1479.360666][T30446]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1479.360698][T30446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.360721][T30446]  ? clear_bhb_loop+0x60/0xb0
[ 1479.360749][T30446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.360771][T30446] RIP: 0033:0x7fee0d98ebe9
[ 1479.360792][T30446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1479.360812][T30446] RSP: 002b:00007fee0bbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1479.360836][T30446] RAX: ffffffffffffffda RBX: 00007fee0dbb6090 RCX: 00007fee0d98ebe9
[ 1479.360854][T30446] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1479.360868][T30446] RBP: 00007fee0bbd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1479.360882][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1479.360896][T30446] R13: 00007fee0dbb6128 R14: 00007fee0dbb6090 R15: 00007ffe4a9b95e8
[ 1479.360932][T30446]  </TASK>
[ 1479.360942][T30446] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1479.895762][T30457] netlink: 'syz.8.7132': attribute type 12 has an invalid length.
[ 1479.911173][T30457] /dev/rnullb0: Can't open blockdev
[ 1479.926825][T30457] netlink: 'syz.8.7132': attribute type 12 has an invalid length.
[ 1480.122943][ T5867] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1480.182483][T19837] usb 7-1: new high-speed USB device number 127 using dummy_hcd
[ 1480.272424][ T5867] usb 2-1: Using ep0 maxpacket: 32
[ 1480.287072][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1480.301160][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1480.318658][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1480.328907][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.352385][T19837] usb 7-1: Using ep0 maxpacket: 32
[ 1480.358086][ T5867] usb 2-1: config 0 descriptor??
[ 1480.365423][T19837] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1480.375353][T19837] usb 7-1: config 0 has no interface number 0
[ 1480.387168][ T5867] hub 2-1:0.0: USB hub found
[ 1480.405276][T19837] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1480.419353][T19837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.428448][T19837] usb 7-1: Product: syz
[ 1480.433093][T19837] usb 7-1: Manufacturer: syz
[ 1480.437802][T19837] usb 7-1: SerialNumber: syz
[ 1480.461328][T19837] usb 7-1: config 0 descriptor??
[ 1480.479378][T19837] smsc95xx v2.0.0
[ 1480.577601][T30476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.587414][ T5867] hub 2-1:0.0: 1 port detected
[ 1480.607554][T30476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.707198][ T5875] Bluetooth: hci3: connection err: -111
[ 1480.848211][ T5867] usb 2-1: USB disconnect, device number 108
[ 1480.888978][T19837] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1480.901852][T19837] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1480.927459][T30486] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7139'.
[ 1480.979626][T30489] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7139'.
[ 1481.053283][T30488] FAULT_INJECTION: forcing a failure.
[ 1481.053283][T30488] name failslab, interval 1, probability 0, space 0, times 0
[ 1481.098332][T30488] CPU: 0 UID: 0 PID: 30488 Comm: syz.1.7140 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1481.098363][T30488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1481.098377][T30488] Call Trace:
[ 1481.098386][T30488]  <TASK>
[ 1481.098395][T30488]  dump_stack_lvl+0x189/0x250
[ 1481.098432][T30488]  ? __pfx____ratelimit+0x10/0x10
[ 1481.098466][T30488]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1481.098498][T30488]  ? __pfx__printk+0x10/0x10
[ 1481.098533][T30488]  ? __pfx___might_resched+0x10/0x10
[ 1481.098559][T30488]  ? fs_reclaim_acquire+0x7d/0x100
[ 1481.098663][T30488]  should_fail_ex+0x414/0x560
[ 1481.098699][T30488]  should_failslab+0xa8/0x100
[ 1481.098725][T30488]  __kmalloc_noprof+0xcb/0x4f0
[ 1481.098748][T30488]  ? tomoyo_encode+0x28b/0x550
[ 1481.098784][T30488]  tomoyo_encode+0x28b/0x550
[ 1481.098820][T30488]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1481.098852][T30488]  ? tomoyo_domain+0xd9/0x130
[ 1481.098900][T30488]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1481.098926][T30488]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1481.098956][T30488]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1481.099000][T30488]  ? __lock_acquire+0xab9/0xd20
[ 1481.099046][T30488]  ? __fget_files+0x2a/0x420
[ 1481.099077][T30488]  ? __fget_files+0x2a/0x420
[ 1481.099103][T30488]  ? __fget_files+0x3a0/0x420
[ 1481.099130][T30488]  ? __fget_files+0x2a/0x420
[ 1481.099161][T30488]  security_file_ioctl+0xcb/0x2d0
[ 1481.099189][T30488]  __se_sys_ioctl+0x47/0x170
[ 1481.099215][T30488]  do_syscall_64+0xfa/0x3b0
[ 1481.099234][T30488]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1481.099266][T30488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.099287][T30488]  ? clear_bhb_loop+0x60/0xb0
[ 1481.099331][T30488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.099354][T30488] RIP: 0033:0x7fe8ec58ebe9
[ 1481.099375][T30488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1481.099394][T30488] RSP: 002b:00007fe8ed493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1481.099418][T30488] RAX: ffffffffffffffda RBX: 00007fe8ec7b5fa0 RCX: 00007fe8ec58ebe9
[ 1481.099435][T30488] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1481.099449][T30488] RBP: 00007fe8ed493090 R08: 0000000000000000 R09: 0000000000000000
[ 1481.099463][T30488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1481.099477][T30488] R13: 00007fe8ec7b6038 R14: 00007fe8ec7b5fa0 R15: 00007ffcb943ef08
[ 1481.099511][T30488]  </TASK>
[ 1481.099564][T30488] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1481.110634][T30496] Invalid source name
[ 1481.360842][T30496] UBIFS error (pid: 30496): cannot open "./file0", error -22
[ 1481.536948][ T5875] Bluetooth: hci0: connection err: -111
[ 1481.559691][T30508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7145'.
[ 1481.794822][T19837] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1481.837368][T19837] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1481.865230][T19837] usb 7-1: USB disconnect, device number 127
[ 1482.020767][T30521] netlink: 'syz.8.7150': attribute type 1 has an invalid length.
[ 1482.039170][T30521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7150'.
[ 1482.061212][T30521] netlink: 'syz.8.7150': attribute type 1 has an invalid length.
[ 1482.071130][T30521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1482.154557][T29236] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1482.322361][T19837] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1482.323671][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1482.355174][T29236] usb 2-1: too many configurations: 178, using maximum allowed: 8
[ 1482.366667][T29236] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1482.383082][T29236] usb 2-1: can't read configurations, error -61
[ 1482.522363][T29236] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1482.534043][T19837] usb 9-1: config 2 has an invalid interface number: 2 but max is 0
[ 1482.559280][T19837] usb 9-1: config 2 has no interface number 0
[ 1482.573278][T19837] usb 9-1: config 2 interface 2 has no altsetting 0
[ 1482.590327][T19837] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4
[ 1482.610027][T19837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.632161][T19837] usb 9-1: Product: syz
[ 1482.649020][T19837] usb 9-1: Manufacturer: syz
[ 1482.662570][T19837] usb 9-1: SerialNumber: syz
[ 1482.682462][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1482.698645][T29236] usb 2-1: too many configurations: 178, using maximum allowed: 8
[ 1482.714614][T29236] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1482.723274][T29236] usb 2-1: can't read configurations, error -61
[ 1482.753255][T29236] usb usb2-port1: attempt power cycle
[ 1482.884799][T30528] 9pnet: Could not find request transport: 0xffffffffffffffff
[ 1483.075088][T19837] usb 9-1: USB disconnect, device number 7
[ 1483.113155][T29236] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1483.163661][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1483.178167][T29236] usb 2-1: too many configurations: 178, using maximum allowed: 8
[ 1483.197595][T29236] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1483.205660][T29236] usb 2-1: can't read configurations, error -61
[ 1483.271415][T30536] FAULT_INJECTION: forcing a failure.
[ 1483.271415][T30536] name failslab, interval 1, probability 0, space 0, times 0
[ 1483.287178][T30536] CPU: 1 UID: 0 PID: 30536 Comm: syz.7.7154 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1483.287209][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1483.287224][T30536] Call Trace:
[ 1483.287233][T30536]  <TASK>
[ 1483.287242][T30536]  dump_stack_lvl+0x189/0x250
[ 1483.287280][T30536]  ? __pfx____ratelimit+0x10/0x10
[ 1483.287314][T30536]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1483.287346][T30536]  ? __pfx__printk+0x10/0x10
[ 1483.287386][T30536]  ? __pfx___might_resched+0x10/0x10
[ 1483.287413][T30536]  ? fs_reclaim_acquire+0x7d/0x100
[ 1483.287445][T30536]  should_fail_ex+0x414/0x560
[ 1483.287482][T30536]  should_failslab+0xa8/0x100
[ 1483.287509][T30536]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1483.287532][T30536]  ? vhost_task_create+0xf6/0x290
[ 1483.287568][T30536]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1483.287593][T30536]  vhost_task_create+0xf6/0x290
[ 1483.287626][T30536]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1483.287661][T30536]  ? __pfx_vhost_task_create+0x10/0x10
[ 1483.287711][T30536]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1483.287766][T30536]  kvm_mmu_post_init_vm+0x14c/0x300
[ 1483.287797][T30536]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[ 1483.287825][T30536]  ? __mutex_trylock_common+0x153/0x260
[ 1483.287860][T30536]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1483.287892][T30536]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1483.287917][T30536]  ? rcu_is_watching+0x15/0xb0
[ 1483.287946][T30536]  ? trace_contention_end+0x39/0x120
[ 1483.287976][T30536]  ? look_up_lock_class+0x74/0x170
[ 1483.288012][T30536]  ? register_lock_class+0x51/0x320
[ 1483.288044][T30536]  ? __lock_acquire+0xab9/0xd20
[ 1483.288103][T30536]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1483.288144][T30536]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1483.288176][T30536]  ? __lock_acquire+0xab9/0xd20
[ 1483.288223][T30536]  ? __fget_files+0x2a/0x420
[ 1483.288258][T30536]  ? __fget_files+0x2a/0x420
[ 1483.288287][T30536]  ? __fget_files+0x3a0/0x420
[ 1483.288316][T30536]  ? __fget_files+0x2a/0x420
[ 1483.288350][T30536]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1483.288372][T30536]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1483.288407][T30536]  __se_sys_ioctl+0xfc/0x170
[ 1483.288446][T30536]  do_syscall_64+0xfa/0x3b0
[ 1483.288465][T30536]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1483.288497][T30536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.288519][T30536]  ? clear_bhb_loop+0x60/0xb0
[ 1483.288547][T30536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.288569][T30536] RIP: 0033:0x7f4e4e38ebe9
[ 1483.288589][T30536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1483.288608][T30536] RSP: 002b:00007f4e4f1c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1483.288631][T30536] RAX: ffffffffffffffda RBX: 00007f4e4e5b5fa0 RCX: 00007f4e4e38ebe9
[ 1483.288649][T30536] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1483.288663][T30536] RBP: 00007f4e4f1c0090 R08: 0000000000000000 R09: 0000000000000000
[ 1483.288684][T30536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1483.288698][T30536] R13: 00007f4e4e5b6038 R14: 00007f4e4e5b5fa0 R15: 00007fff8609a638
[ 1483.288735][T30536]  </TASK>
[ 1483.638354][T29236] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1483.729144][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1483.747632][T29236] usb 2-1: too many configurations: 178, using maximum allowed: 8
[ 1483.761156][T29236] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1483.767168][ T5875] Bluetooth: hci2: connection err: -111
[ 1483.768914][T29236] usb 2-1: can't read configurations, error -61
[ 1483.781109][T29236] usb usb2-port1: unable to enumerate USB device
[ 1483.883268][T30545] syzkaller1: entered promiscuous mode
[ 1483.888802][T30545] syzkaller1: entered allmulticast mode
[ 1484.342370][ T5913] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1484.372627][T14082] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1484.512619][ T5913] usb 9-1: Using ep0 maxpacket: 32
[ 1484.522573][T14082] usb 7-1: Using ep0 maxpacket: 32
[ 1484.525214][ T5913] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1484.530362][T14082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1484.542014][ T5913] usb 9-1: config 0 has no interface number 0
[ 1484.547681][T14082] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1484.562524][ T5913] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1484.563076][T14082] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1484.572045][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.572075][ T5913] usb 9-1: Product: syz
[ 1484.572093][ T5913] usb 9-1: Manufacturer: syz
[ 1484.572112][ T5913] usb 9-1: SerialNumber: syz
[ 1484.580028][ T5913] usb 9-1: config 0 descriptor??
[ 1484.582644][T14082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.615682][ T5913] smsc95xx v2.0.0
[ 1484.695679][T14082] usb 7-1: config 0 descriptor??
[ 1485.021469][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1485.033118][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1485.130529][T14082] ft260 0003:0403:6030.0047: unknown main item tag 0x7
[ 1485.232548][T19837] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 1485.321822][T14082] ft260 0003:0403:6030.0047: chip code: 6424 8183
[ 1485.345316][ T5913] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1485.362828][ T5913] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[ 1485.382730][ T5913] usb 9-1: USB disconnect, device number 8
[ 1485.400871][T19837] usb 2-1: config 0 has an invalid interface number: 107 but max is 0
[ 1485.419042][T19837] usb 2-1: config 0 has no interface number 0
[ 1485.425485][T19837] usb 2-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1485.436616][T19837] usb 2-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1485.449245][T19837] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64
[ 1485.460540][T19837] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1485.470506][T19837] usb 2-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1485.486599][T19837] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a
[ 1485.496861][T19837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1485.505235][T19837] usb 2-1: Product: syz
[ 1485.509452][T19837] usb 2-1: Manufacturer: syz
[ 1485.514228][T19837] usb 2-1: SerialNumber: syz
[ 1485.521763][T19837] usb 2-1: config 0 descriptor??
[ 1485.532159][T14082] ft260 0003:0403:6030.0047: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[ 1485.544651][T30557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1485.554811][T19837] kvaser_usb 2-1:0.107: error -EMSGSIZE: Cannot get software info
[ 1485.562798][T19837] kvaser_usb 2-1:0.107: probe with driver kvaser_usb failed with error -90
[ 1485.735347][T14082] ft260 0003:0403:6030.0047: failed to retrieve status: -32, no wakeup
[ 1485.739810][T30551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1485.764635][T30551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1485.767241][T30557] /dev/rnullb0: Can't open blockdev
[ 1485.780414][ T5913] usb 2-1: USB disconnect, device number 113
[ 1485.789705][T14082] ft260 0003:0403:6030.0047: failed to retrieve status: -71
[ 1485.807283][T14082] ft260 0003:0403:6030.0047: failed to reset I2C controller: -71
[ 1485.837054][T14082] usb 7-1: USB disconnect, device number 2
[ 1485.930703][T30559] CIFS mount error: No usable UNC path provided in device string!
[ 1485.930703][T30559] 
[ 1485.943554][T30559] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1485.958858][T30559] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[ 1486.012731][T30560] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�zR'
[ 1486.025356][T30560] CPU: 1 UID: 0 PID: 30560 Comm: syz.8.7164 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1486.025386][T30560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1486.025401][T30560] Call Trace:
[ 1486.025410][T30560]  <TASK>
[ 1486.025420][T30560]  dump_stack_lvl+0x189/0x250
[ 1486.025463][T30560]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1486.025496][T30560]  ? __pfx__printk+0x10/0x10
[ 1486.025535][T30560]  ? kernfs_path_from_node+0x2f/0x290
[ 1486.025558][T30560]  ? kernfs_path_from_node+0x250/0x290
[ 1486.025578][T30560]  ? kernfs_path_from_node+0x2f/0x290
[ 1486.025605][T30560]  sysfs_warn_dup+0x8e/0xa0
[ 1486.025639][T30560]  sysfs_do_create_link_sd+0xc0/0x110
[ 1486.025678][T30560]  device_add_class_symlinks+0x1cf/0x240
[ 1486.025707][T30560]  device_add+0x475/0xb50
[ 1486.025736][T30560]  wiphy_register+0x1ba6/0x28d0
[ 1486.025789][T30560]  ? __pfx_wiphy_register+0x10/0x10
[ 1486.025820][T30560]  ? minstrel_ht_alloc+0x6dd/0x7e0
[ 1486.025855][T30560]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[ 1486.025890][T30560]  ieee80211_register_hw+0x3425/0x4080
[ 1486.025936][T30560]  ? ieee80211_register_hw+0x14d1/0x4080
[ 1486.025973][T30560]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1486.026004][T30560]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1486.026045][T30560]  ? __hrtimer_setup+0x187/0x210
[ 1486.026078][T30560]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1486.026115][T30560]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[ 1486.026182][T30560]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1486.026211][T30560]  ? trace_kmalloc+0x1f/0xd0
[ 1486.026230][T30560]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[ 1486.026254][T30560]  ? kstrndup+0xbf/0x160
[ 1486.026296][T30560]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1486.026331][T30560]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1486.026383][T30560]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1486.026429][T30560]  ? __nla_parse+0x40/0x60
[ 1486.026468][T30560]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1486.026507][T30560]  genl_family_rcv_msg_doit+0x212/0x300
[ 1486.026544][T30560]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1486.026593][T30560]  ? bpf_lsm_capable+0x9/0x20
[ 1486.026615][T30560]  ? security_capable+0x7e/0x2e0
[ 1486.026652][T30560]  genl_rcv_msg+0x60e/0x790
[ 1486.026688][T30560]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1486.026714][T30560]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1486.026762][T30560]  netlink_rcv_skb+0x208/0x470
[ 1486.026794][T30560]  ? __lock_acquire+0xab9/0xd20
[ 1486.026820][T30560]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1486.026849][T30560]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1486.026906][T30560]  ? down_read+0x1ad/0x2e0
[ 1486.026932][T30560]  genl_rcv+0x28/0x40
[ 1486.026956][T30560]  netlink_unicast+0x82f/0x9e0
[ 1486.026999][T30560]  ? __pfx_netlink_unicast+0x10/0x10
[ 1486.027033][T30560]  ? netlink_sendmsg+0x642/0xb30
[ 1486.027052][T30560]  ? skb_put+0x11b/0x210
[ 1486.027085][T30560]  netlink_sendmsg+0x805/0xb30
[ 1486.027117][T30560]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1486.027144][T30560]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1486.027178][T30560]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1486.027209][T30560]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1486.027232][T30560]  __sock_sendmsg+0x21c/0x270
[ 1486.027267][T30560]  ____sys_sendmsg+0x505/0x830
[ 1486.027299][T30560]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1486.027336][T30560]  ? import_iovec+0x74/0xa0
[ 1486.027368][T30560]  ___sys_sendmsg+0x21f/0x2a0
[ 1486.027395][T30560]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1486.027466][T30560]  ? __fget_files+0x2a/0x420
[ 1486.027495][T30560]  ? __fget_files+0x3a0/0x420
[ 1486.027540][T30560]  __x64_sys_sendmsg+0x19b/0x260
[ 1486.027568][T30560]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1486.027608][T30560]  ? do_user_addr_fault+0xc8a/0x1390
[ 1486.027640][T30560]  ? do_syscall_64+0xbe/0x3b0
[ 1486.027664][T30560]  do_syscall_64+0xfa/0x3b0
[ 1486.027677][T30560]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1486.027700][T30560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.027716][T30560]  ? clear_bhb_loop+0x60/0xb0
[ 1486.027735][T30560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.027751][T30560] RIP: 0033:0x7fee0d98ebe9
[ 1486.027765][T30560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1486.027779][T30560] RSP: 002b:00007fee0bbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1486.027796][T30560] RAX: ffffffffffffffda RBX: 00007fee0dbb6090 RCX: 00007fee0d98ebe9
[ 1486.027808][T30560] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1486.027819][T30560] RBP: 00007fee0da11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1486.027829][T30560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1486.027838][T30560] R13: 00007fee0dbb6128 R14: 00007fee0dbb6090 R15: 00007ffe4a9b95e8
[ 1486.027864][T30560]  </TASK>
[ 1486.925476][T30579] /dev/rnullb0: Can't open blockdev
[ 1486.938077][T30574] /dev/rnullb0: Can't open blockdev
[ 1487.252367][T30597] /dev/rnullb0: Can't open blockdev
[ 1487.259198][T30598] /dev/rnullb0: Can't open blockdev
[ 1487.548156][T30606] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1487.575048][T30604] wg0 speed is unknown, defaulting to 1000
[ 1487.632808][T20176] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1487.782787][T20176] usb 7-1: Using ep0 maxpacket: 32
[ 1487.815029][T20176] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1487.837449][T20176] usb 7-1: config 0 has no interface number 0
[ 1487.905435][T20176] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1487.949893][T20176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.018779][T20176] usb 7-1: Product: syz
[ 1488.062400][T20176] usb 7-1: Manufacturer: syz
[ 1488.083284][T20176] usb 7-1: SerialNumber: syz
[ 1488.108151][T20176] usb 7-1: config 0 descriptor??
[ 1488.161226][T20176] smsc95xx v2.0.0
[ 1488.263446][T30623] hugetlbfs: Bad value 'ßø‰' for mount option 'size'
[ 1488.263446][T30623] 
[ 1488.581257][T20176] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1488.598906][T20176] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1488.986585][T20176] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1489.001143][T30638] sp0: Synchronizing with TNC
[ 1489.008637][T30639] sp0: Found TNC
[ 1489.015121][T20176] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1489.028574][T30638] /dev/rnullb0: Can't open blockdev
[ 1489.042073][T20176] usb 7-1: USB disconnect, device number 3
[ 1489.048080][T30636] [U] è`
[ 1489.167996][T30642] /dev/rnullb0: Can't open blockdev
[ 1489.389699][T30651] /dev/rnullb0: Can't open blockdev
[ 1489.831011][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.871038][T30667] CUSE: info not properly terminated
[ 1489.880849][T30667] /dev/rnullb0: Can't open blockdev
[ 1490.014949][T30670] /dev/rnullb0: Can't open blockdev
[ 1490.022820][T19837] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1490.124331][T30675] /dev/rnullb0: Can't open blockdev
[ 1490.162341][T19837] usb 7-1: device descriptor read/64, error -71
[ 1490.412388][T19837] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1490.562527][T19837] usb 7-1: device descriptor read/64, error -71
[ 1490.602563][T29236] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1490.672889][T19837] usb usb7-port1: attempt power cycle
[ 1490.737207][T30695] /dev/rnullb0: Can't open blockdev
[ 1490.752562][T29236] usb 2-1: Using ep0 maxpacket: 32
[ 1490.759601][T29236] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1490.768189][T29236] usb 2-1: config 0 has no interface number 0
[ 1490.779070][T29236] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1490.789054][T29236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.798409][T29236] usb 2-1: Product: syz
[ 1490.804212][T29236] usb 2-1: Manufacturer: syz
[ 1490.808844][T29236] usb 2-1: SerialNumber: syz
[ 1490.820931][T29236] usb 2-1: config 0 descriptor??
[ 1490.842958][T29236] smsc95xx v2.0.0
[ 1491.012377][T19837] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1491.042681][T19837] usb 7-1: device descriptor read/8, error -71
[ 1491.249441][T29236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1491.268871][T29236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1491.284794][T19837] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1491.338237][T19837] usb 7-1: device descriptor read/8, error -71
[ 1491.452854][T19837] usb usb7-port1: unable to enumerate USB device
[ 1491.595241][T29236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1491.607054][T29236] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1491.628486][T29236] usb 2-1: USB disconnect, device number 114
[ 1492.817664][T30721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7207'.
[ 1493.168466][T19837] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1493.332527][T19837] usb 7-1: Using ep0 maxpacket: 32
[ 1493.358236][T19837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1493.382492][T14082] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1493.390373][T19837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1493.412393][T19837] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1493.421493][T19837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.445638][T19837] usb 7-1: config 0 descriptor??
[ 1493.572839][T14082] usb 2-1: Using ep0 maxpacket: 32
[ 1493.590516][T14082] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1493.599619][T14082] usb 2-1: config 0 has no interface number 0
[ 1493.615559][T30733] /dev/rnullb0: Can't open blockdev
[ 1493.634211][T14082] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1493.652497][T14082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.680259][T14082] usb 2-1: Product: syz
[ 1493.692402][T14082] usb 2-1: Manufacturer: syz
[ 1493.697094][T14082] usb 2-1: SerialNumber: syz
[ 1493.706499][T14082] usb 2-1: config 0 descriptor??
[ 1493.733822][T14082] smsc95xx v2.0.0
[ 1493.867409][T19837] ft260 0003:0403:6030.0048: unknown main item tag 0x7
[ 1494.062117][T19837] ft260 0003:0403:6030.0048: chip code: 6424 8183
[ 1494.133578][T14082] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1494.167785][T14082] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1494.271309][T19837] ft260 0003:0403:6030.0048: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0
[ 1494.473064][T19837] ft260 0003:0403:6030.0048: failed to retrieve status: -32, no wakeup
[ 1494.493077][T30724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1494.517705][T14082] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1494.530410][T30724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.543267][T19837] ft260 0003:0403:6030.0048: failed to retrieve status: -71
[ 1494.552897][T19837] ft260 0003:0403:6030.0048: failed to reset I2C controller: -71
[ 1494.570111][T14082] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1494.593415][T19837] usb 7-1: USB disconnect, device number 8
[ 1494.599442][T14082] usb 2-1: USB disconnect, device number 115
[ 1494.686010][T30749] siw: device registration error -23
[ 1495.278310][T30756] FAULT_INJECTION: forcing a failure.
[ 1495.278310][T30756] name failslab, interval 1, probability 0, space 0, times 0
[ 1495.311887][T30756] CPU: 1 UID: 0 PID: 30756 Comm: syz.6.7220 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1495.311918][T30756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1495.311931][T30756] Call Trace:
[ 1495.311940][T30756]  <TASK>
[ 1495.311950][T30756]  dump_stack_lvl+0x189/0x250
[ 1495.311986][T30756]  ? __pfx____ratelimit+0x10/0x10
[ 1495.312018][T30756]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1495.312048][T30756]  ? __pfx__printk+0x10/0x10
[ 1495.312085][T30756]  ? __pfx___might_resched+0x10/0x10
[ 1495.312121][T30756]  ? fs_reclaim_acquire+0x7d/0x100
[ 1495.312152][T30756]  should_fail_ex+0x414/0x560
[ 1495.312186][T30756]  should_failslab+0xa8/0x100
[ 1495.312211][T30756]  __kmalloc_node_noprof+0xd1/0x4e0
[ 1495.312236][T30756]  ? __vmalloc_node_range_noprof+0x5a9/0x12f0
[ 1495.312267][T30756]  __vmalloc_node_range_noprof+0x5a9/0x12f0
[ 1495.312305][T30756]  ? percpu_ref_get_many+0x19/0x140
[ 1495.312344][T30756]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1495.312374][T30756]  ? memcpy_and_pad+0x48/0x80
[ 1495.312409][T30756]  __vmalloc_node_noprof+0xc2/0x110
[ 1495.312434][T30756]  ? copy_process+0x54b/0x3c00
[ 1495.312459][T30756]  ? copy_process+0x54b/0x3c00
[ 1495.312509][T30756]  dup_task_struct+0x3e7/0x860
[ 1495.312546][T30756]  copy_process+0x54b/0x3c00
[ 1495.312608][T30756]  ? __pfx_copy_process+0x10/0x10
[ 1495.312651][T30756]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1495.312677][T30756]  vhost_task_create+0x1c4/0x290
[ 1495.312712][T30756]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1495.312738][T30756]  ? __pfx_vhost_task_create+0x10/0x10
[ 1495.312781][T30756]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1495.312835][T30756]  kvm_mmu_post_init_vm+0x14c/0x300
[ 1495.312864][T30756]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[ 1495.312902][T30756]  ? __mutex_trylock_common+0x153/0x260
[ 1495.312936][T30756]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1495.312968][T30756]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1495.312993][T30756]  ? rcu_is_watching+0x15/0xb0
[ 1495.313022][T30756]  ? trace_contention_end+0x39/0x120
[ 1495.313053][T30756]  ? look_up_lock_class+0x74/0x170
[ 1495.313088][T30756]  ? register_lock_class+0x51/0x320
[ 1495.313127][T30756]  ? __lock_acquire+0xab9/0xd20
[ 1495.313185][T30756]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1495.313227][T30756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1495.313258][T30756]  ? __lock_acquire+0xab9/0xd20
[ 1495.313307][T30756]  ? __fget_files+0x2a/0x420
[ 1495.313342][T30756]  ? __fget_files+0x2a/0x420
[ 1495.313371][T30756]  ? __fget_files+0x3a0/0x420
[ 1495.313400][T30756]  ? __fget_files+0x2a/0x420
[ 1495.313446][T30756]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1495.313467][T30756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1495.313501][T30756]  __se_sys_ioctl+0xfc/0x170
[ 1495.313527][T30756]  do_syscall_64+0xfa/0x3b0
[ 1495.313546][T30756]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1495.313578][T30756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.313621][T30756]  ? clear_bhb_loop+0x60/0xb0
[ 1495.313662][T30756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.313684][T30756] RIP: 0033:0x7f3fe878ebe9
[ 1495.313722][T30756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1495.313742][T30756] RSP: 002b:00007f3fe9633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1495.313766][T30756] RAX: ffffffffffffffda RBX: 00007f3fe89b6090 RCX: 00007f3fe878ebe9
[ 1495.313784][T30756] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1495.313798][T30756] RBP: 00007f3fe9633090 R08: 0000000000000000 R09: 0000000000000000
[ 1495.313813][T30756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1495.313827][T30756] R13: 00007f3fe89b6128 R14: 00007f3fe89b6090 R15: 00007ffe2094fee8
[ 1495.313863][T30756]  </TASK>
[ 1495.390066][T30760] Bluetooth: MGMT ver 1.23
[ 1495.431269][T30756] syz.6.7220: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[ 1495.718215][T30756] CPU: 1 UID: 0 PID: 30756 Comm: syz.6.7220 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1495.718244][T30756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1495.718257][T30756] Call Trace:
[ 1495.718267][T30756]  <TASK>
[ 1495.718276][T30756]  dump_stack_lvl+0x189/0x250
[ 1495.718317][T30756]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1495.718350][T30756]  ? __pfx__printk+0x10/0x10
[ 1495.718384][T30756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1495.718420][T30756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1495.718457][T30756]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1495.718494][T30756]  warn_alloc+0x214/0x310
[ 1495.718522][T30756]  ? __pfx___might_resched+0x10/0x10
[ 1495.718548][T30756]  ? fs_reclaim_acquire+0x7d/0x100
[ 1495.718580][T30756]  ? __pfx_warn_alloc+0x10/0x10
[ 1495.718613][T30756]  ? rcu_is_watching+0x15/0xb0
[ 1495.718643][T30756]  ? trace_kmalloc+0x1f/0xd0
[ 1495.718663][T30756]  ? __kmalloc_node_noprof+0x293/0x4e0
[ 1495.718686][T30756]  ? __vmalloc_node_range_noprof+0x5a9/0x12f0
[ 1495.718719][T30756]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1495.718779][T30756]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1495.718811][T30756]  ? memcpy_and_pad+0x48/0x80
[ 1495.718849][T30756]  __vmalloc_node_noprof+0xc2/0x110
[ 1495.718876][T30756]  ? copy_process+0x54b/0x3c00
[ 1495.718905][T30756]  ? copy_process+0x54b/0x3c00
[ 1495.718939][T30756]  dup_task_struct+0x3e7/0x860
[ 1495.718976][T30756]  copy_process+0x54b/0x3c00
[ 1495.719038][T30756]  ? __pfx_copy_process+0x10/0x10
[ 1495.719091][T30756]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1495.719115][T30756]  vhost_task_create+0x1c4/0x290
[ 1495.719150][T30756]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1495.719176][T30756]  ? __pfx_vhost_task_create+0x10/0x10
[ 1495.719218][T30756]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1495.719274][T30756]  kvm_mmu_post_init_vm+0x14c/0x300
[ 1495.719304][T30756]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[ 1495.719334][T30756]  ? __mutex_trylock_common+0x153/0x260
[ 1495.719369][T30756]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1495.719400][T30756]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1495.719425][T30756]  ? rcu_is_watching+0x15/0xb0
[ 1495.719453][T30756]  ? trace_contention_end+0x39/0x120
[ 1495.719483][T30756]  ? look_up_lock_class+0x74/0x170
[ 1495.719518][T30756]  ? register_lock_class+0x51/0x320
[ 1495.719551][T30756]  ? __lock_acquire+0xab9/0xd20
[ 1495.719609][T30756]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1495.719651][T30756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1495.719682][T30756]  ? __lock_acquire+0xab9/0xd20
[ 1495.719730][T30756]  ? __fget_files+0x2a/0x420
[ 1495.719765][T30756]  ? __fget_files+0x2a/0x420
[ 1495.719794][T30756]  ? __fget_files+0x3a0/0x420
[ 1495.719823][T30756]  ? __fget_files+0x2a/0x420
[ 1495.719858][T30756]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1495.719878][T30756]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1495.719913][T30756]  __se_sys_ioctl+0xfc/0x170
[ 1495.719941][T30756]  do_syscall_64+0xfa/0x3b0
[ 1495.719958][T30756]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1495.719989][T30756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.720011][T30756]  ? clear_bhb_loop+0x60/0xb0
[ 1495.720039][T30756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1495.720061][T30756] RIP: 0033:0x7f3fe878ebe9
[ 1495.720106][T30756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1495.720126][T30756] RSP: 002b:00007f3fe9633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1495.720149][T30756] RAX: ffffffffffffffda RBX: 00007f3fe89b6090 RCX: 00007f3fe878ebe9
[ 1495.720166][T30756] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1495.720180][T30756] RBP: 00007f3fe9633090 R08: 0000000000000000 R09: 0000000000000000
[ 1495.720195][T30756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1495.720209][T30756] R13: 00007f3fe89b6128 R14: 00007f3fe89b6090 R15: 00007ffe2094fee8
[ 1495.720244][T30756]  </TASK>
[ 1496.106896][T30756] Mem-Info:
[ 1496.138568][T30756] active_anon:9108 inactive_anon:34 isolated_anon:0
[ 1496.138568][T30756]  active_file:17445 inactive_file:40958 isolated_file:0
[ 1496.138568][T30756]  unevictable:768 dirty:236 writeback:0
[ 1496.138568][T30756]  slab_reclaimable:11710 slab_unreclaimable:106110
[ 1496.138568][T30756]  mapped:32125 shmem:2742 pagetables:1803
[ 1496.138568][T30756]  sec_pagetables:0 bounce:0
[ 1496.138568][T30756]  kernel_misc_reclaimable:0
[ 1496.138568][T30756]  free:1274894 free_pcp:31218 free_cma:0
[ 1496.195501][T30756] Node 0 active_anon:36232kB inactive_anon:136kB active_file:69780kB inactive_file:163604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128472kB dirty:944kB writeback:0kB shmem:9432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:6884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1496.235129][T30756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1496.266708][T30756] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1496.273148][T19837] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1496.295592][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1496.295838][T30756] lowmem_reserve[]: 0 2495 2497 2497 2497
[ 1496.295900][T30756] Node 0 DMA32 free:1238820kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37184kB inactive_anon:136kB active_file:69780kB inactive_file:162532kB unevictable:1536kB writepending:944kB present:3129332kB managed:2555812kB mlocked:0kB bounce:0kB free_pcp:68000kB local_pcp:36888kB free_cma:0kB
[ 1496.295972][T30756] lowmem_reserve[]: 0 0 1 1 1
[ 1496.296023][T30756] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1072kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1496.296123][T30756] lowmem_reserve[]: 0 0 0 0 0
[ 1496.296173][T30756] Node 1 Normal free:3846460kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55728kB local_pcp:27220kB free_cma:0kB
[ 1496.296242][T30756] lowmem_reserve[]: 0 0 0 0 0
[ 1496.296290][T30756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1496.296485][T30756] Node 0 DMA32: 5469*4kB (UME) 2218*8kB (UME) 2144*16kB (UME) 1057*32kB 
[ 1496.377715][T30769] /dev/rnullb0: Can't open blockdev
[ 1496.383445][T30756] (UME) 410*64kB (UME) 108*128kB (UME) 108*256kB (UME) 67*512kB (UME) 63*1024kB (UME) 25*2048kB (UME) 223*4096kB (UM) = 1238884kB
[ 1496.464265][T30756] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1496.476335][T30756] Node 1 Normal: 7*4kB (UM) 4*8kB (UME) 4*16kB (UME) 64*32kB (UM) 87*64kB (UME) 12*128kB (UME) 3*256kB (UE) 7*512kB (UME) 1*1024kB (M) 3*2048kB (UE) 934*4096kB (UM) = 3846460kB
[ 1496.494570][T30756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1496.504249][T30756] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1496.513756][T30756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1496.523820][T30756] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1496.534249][T30756] 61175 total pagecache pages
[ 1496.538983][T30756] 34 pages in swap cache
[ 1496.543812][T30756] Free swap  = 124860kB
[ 1496.548002][T30756] Total swap = 124996kB
[ 1496.552189][T30756] 2097051 pages RAM
[ 1496.556733][T30756] 0 pages HighMem/MovableOnly
[ 1496.561437][T30756] 426200 pages reserved
[ 1496.566093][   T30] audit: type=1400 audit(1754789619.613:172): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=30762 comm="syz.8.7222"
[ 1496.592811][T30756] 0 pages cma reserved
[ 1496.852400][T29236] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1497.087293][T29236] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[ 1497.100679][T29236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.109348][T29236] usb 2-1: Product: syz
[ 1497.113948][T29236] usb 2-1: Manufacturer: syz
[ 1497.118662][T29236] usb 2-1: SerialNumber: syz
[ 1497.129715][T29236] usb 2-1: config 0 descriptor??
[ 1497.152609][T14082] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1497.153079][T29236] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[ 1497.393969][T14082] usb 7-1: Using ep0 maxpacket: 32
[ 1497.404617][T14082] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1497.432310][T14082] usb 7-1: config 0 has no interface number 0
[ 1497.441532][T14082] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1497.463734][T14082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.482405][T14082] usb 7-1: Product: syz
[ 1497.486654][T14082] usb 7-1: Manufacturer: syz
[ 1497.497617][T14082] usb 7-1: SerialNumber: syz
[ 1497.510119][T14082] usb 7-1: config 0 descriptor??
[ 1497.535099][T14082] smsc95xx v2.0.0
[ 1497.579833][T29236] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115
[ 1497.671237][T30786] /dev/rnullb0: Can't open blockdev
[ 1497.775737][T29236] usb 2-1: USB disconnect, device number 116
[ 1497.817840][T26132] udevd[26132]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1497.942010][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1497.962444][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1498.280012][T19837] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1498.300706][T19837] usb 9-1: no configurations
[ 1498.311556][T19837] usb 9-1: can't read configurations, error -22
[ 1498.334703][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1498.355687][T14082] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1498.381574][T14082] usb 7-1: USB disconnect, device number 9
[ 1498.915429][T30793] /dev/rnullb0: Can't open blockdev
[ 1499.153624][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.183232][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.193966][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.213411][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.363929][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.410955][T30806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.429105][T30806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.503852][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.510525][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.521057][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.532675][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.538884][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.547612][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.556523][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.564926][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.571034][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.581268][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.588304][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.600326][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.611982][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.626785][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.632424][T19837] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1499.646259][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.653807][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.659895][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.671166][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.677381][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.688160][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.695334][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.701385][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.722196][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.731235][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.748764][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.768923][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.782683][T19837] usb 7-1: device descriptor read/64, error -71
[ 1499.797123][T30801] /dev/rnullb0: Can't open blockdev
[ 1499.804970][T30801] /dev/rnullb0: Can't open blockdev
[ 1500.040655][T19837] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1500.226691][T19837] usb 7-1: device descriptor read/64, error -71
[ 1500.365411][T19837] usb usb7-port1: attempt power cycle
[ 1500.542546][T26804] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1500.698297][T26804] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1500.709469][T26824] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1500.722430][T19837] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1500.743524][T26804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.754098][T26804] usb 2-1: Product: syz
[ 1500.758320][T26804] usb 2-1: Manufacturer: syz
[ 1500.772298][T26804] usb 2-1: SerialNumber: syz
[ 1500.777888][T19837] usb 7-1: device descriptor read/8, error -71
[ 1500.789136][T26804] usb 2-1: config 0 descriptor??
[ 1500.908930][T26824] usb 9-1: Using ep0 maxpacket: 16
[ 1500.929355][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11
[ 1500.968870][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024
[ 1500.993264][T26824] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1501.008815][T26824] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1501.021184][T26804] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1501.030160][T19837] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1501.037978][T26824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.054023][T26824] usb 9-1: config 0 descriptor??
[ 1501.072908][T19837] usb 7-1: device descriptor read/8, error -71
[ 1501.196221][T19837] usb usb7-port1: unable to enumerate USB device
[ 1501.277349][T30819] /dev/rnullb0: Can't open blockdev
[ 1501.337121][T19837] usb 2-1: USB disconnect, device number 117
[ 1502.540609][T30784] kexec: Could not allocate control_code_buffer
[ 1502.827309][T30852] /dev/rnullb0: Can't open blockdev
[ 1503.399557][T30822] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1503.412710][T30822] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1503.419635][T30822] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1503.428689][T30822] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1503.440474][T30822] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1503.451684][T30822] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1503.458236][T30822] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1503.467384][T30822] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1503.489469][T30822] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1503.506152][T30822] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1503.528426][T30822] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1503.697596][T26824] usbhid 9-1:0.0: can't add hid device: -71
[ 1503.711706][T26824] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1503.753254][T26824] usb 9-1: USB disconnect, device number 11
[ 1503.802397][T14082] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1503.822412][ T5875] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1503.963013][T14082] usb 7-1: Using ep0 maxpacket: 32
[ 1503.970270][T14082] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1503.978830][T14082] usb 7-1: config 0 has no interface number 0
[ 1503.987587][T14082] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1503.998099][T14082] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.004616][T30865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1504.006819][T14082] usb 7-1: Product: syz
[ 1504.020115][T14082] usb 7-1: Manufacturer: syz
[ 1504.025783][T14082] usb 7-1: SerialNumber: syz
[ 1504.033549][T14082] usb 7-1: config 0 descriptor??
[ 1504.042076][T14082] smsc95xx v2.0.0
[ 1504.192378][T26824] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1504.375275][T26824] usb 9-1: config 1 has an invalid interface number: 166 but max is 0
[ 1504.384240][T26824] usb 9-1: config 1 has no interface number 0
[ 1504.390503][T26824] usb 9-1: config 1 interface 166 has no altsetting 0
[ 1504.407977][T26824] usb 9-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a
[ 1504.417130][T26824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.425425][T26824] usb 9-1: Product: syz
[ 1504.429664][T26824] usb 9-1: Manufacturer: syz
[ 1504.435127][T26824] usb 9-1: SerialNumber: syz
[ 1504.447930][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1504.458846][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1504.789076][T14082] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1504.806931][T14082] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[ 1504.838104][T14082] usb 7-1: USB disconnect, device number 14
[ 1504.860966][T26824] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state.
[ 1504.888325][T26824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1504.898526][T26824] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T)
[ 1504.909588][T26824] usb 9-1: media controller created
[ 1504.931846][T26824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1505.062916][T30861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1505.073091][T29236] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1505.078039][T30861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1505.092813][T30861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1505.101881][T30861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1505.232473][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1505.244734][T26824] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T'
[ 1505.244887][T29236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1505.270177][T29236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1505.272455][T26824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1505.305345][T26824] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T)
[ 1505.311812][T29236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1505.322490][T26824] usb 9-1: media controller created
[ 1505.357591][T29236] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 1505.378953][T26824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1505.383064][T29236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.424740][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1505.431003][T29580] Bluetooth: hci0: command 0x0419 tx timeout
[ 1505.435122][T29236] usb 2-1: config 0 descriptor??
[ 1505.475957][T26824] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T'
[ 1505.502635][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1505.508763][T29580] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1505.713973][T26824] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1505.721488][T26824] Registered IR keymap rc-empty
[ 1505.731400][T26824] dvb-usb: could not initialize remote control.
[ 1505.751389][T26824] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected.
[ 1505.799973][T26824] usb 9-1: USB disconnect, device number 12
[ 1505.861318][T30868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1505.879797][T30868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1505.905242][T29236] usbhid 2-1:0.0: can't add hid device: -71
[ 1505.916465][T29236] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1505.939036][T29236] usb 2-1: USB disconnect, device number 118
[ 1505.978728][T26824] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected.
[ 1506.342377][T26824] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1506.496859][T26824] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1506.511547][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1506.529084][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1506.552064][T26824] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1506.570141][T26824] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1506.579806][T26824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1506.598152][T26824] usb 9-1: config 0 descriptor??
[ 1506.606883][T30875] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1506.922402][T29236] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1506.942479][T14082] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1507.046570][T26824] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd
[ 1507.062591][T26824] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1507.085006][T29236] usb 2-1: too many configurations: 13, using maximum allowed: 8
[ 1507.096834][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.107336][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.114777][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.122021][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.136827][T14082] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1507.141381][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.149348][T14082] usb 7-1: config 0 has no interfaces?
[ 1507.159616][T14082] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1507.169078][T14082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.173574][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.188326][T14082] usb 7-1: config 0 descriptor??
[ 1507.198294][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.215762][T29236] usb 2-1: config 0 has no interfaces?
[ 1507.230338][T29236] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1507.239683][T29236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.251813][T29236] usb 2-1: Product: syz
[ 1507.256451][T29236] usb 2-1: Manufacturer: syz
[ 1507.261163][T29236] usb 2-1: SerialNumber: syz
[ 1507.268774][T29236] usb 2-1: config 0 descriptor??
[ 1507.315933][T14082] usb 9-1: USB disconnect, device number 13
[ 1507.405341][T30882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1507.414436][T30882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1507.423930][T30882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1507.436107][T30882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1507.445770][T26824] usb 7-1: USB disconnect, device number 15
[ 1507.479199][T29236] usb 2-1: USB disconnect, device number 119
[ 1507.502365][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1507.582728][T29580] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1507.588920][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1507.902556][   T44] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1508.052647][   T44] usb 7-1: Using ep0 maxpacket: 16
[ 1508.060866][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1508.074438][   T44] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00
[ 1508.084549][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.096430][   T44] usb 7-1: config 0 descriptor??
[ 1508.107241][   T44] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1508.123591][T26824] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1508.131268][T14082] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1508.282403][T26824] usb 9-1: Using ep0 maxpacket: 32
[ 1508.290936][T14082] usb 2-1: Using ep0 maxpacket: 32
[ 1508.298792][T14082] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1508.309390][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1508.320529][T26824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1508.331410][T26824] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1508.344496][T26824] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1508.354002][T26824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.363305][T14082] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1508.373720][T14082] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1508.384192][T26824] usb 9-1: config 0 descriptor??
[ 1508.401626][T14082] usb 2-1: Product: syz
[ 1508.407358][T14082] usb 2-1: Manufacturer: syz
[ 1508.412035][T14082] usb 2-1: SerialNumber: syz
[ 1508.422446][T14082] usb 2-1: config 0 descriptor??
[ 1508.429170][T30880] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1508.643378][T30880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1508.656443][T30880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1508.828397][T26824] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.004A/input/input118
[ 1508.913576][   T44] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input120
[ 1508.942013][T26824] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.004A/input/input119
[ 1508.944160][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.960677][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.967781][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.974697][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.981598][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.988497][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1508.995458][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.002366][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.009366][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.016300][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.023274][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.030213][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.037132][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.044135][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.051121][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.058048][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.065037][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.071987][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.078941][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.085895][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.092834][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.099768][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.106706][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.113645][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.120550][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.127446][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.134355][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.141292][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.148181][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.156843][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.163793][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.170701][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.177617][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.184612][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.191538][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.198442][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.205381][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.212312][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.219209][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.226122][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.233051][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.239962][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.246927][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.253936][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.260841][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.260850][T26824] kye 0003:0458:5011.004A: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0
[ 1509.267785][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.268003][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.268231][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.300715][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.307736][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.314883][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.321810][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.328761][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.335698][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.342601][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.349496][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.356554][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.363703][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.370606][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.377502][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.384392][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.391291][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.398231][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.405167][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.412105][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.419008][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.423853][T26824] usb 9-1: USB disconnect, device number 14
[ 1509.426039][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.442308][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.449237][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.456145][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.463046][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.469964][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.476880][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.483817][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.490863][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.497782][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.504772][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.511681][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.518613][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.525528][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.532476][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.539409][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.546327][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.553271][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.560192][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.567138][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.574107][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.581005][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.587883][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.594828][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.601750][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.608716][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.615655][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.615936][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1509.622551][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.622754][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.622970][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.649244][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.656200][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.663530][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.670548][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.677459][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.680226][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1509.684360][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.691203][T29580] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1509.697722][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.710398][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.717375][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.724277][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.731184][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.738165][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.745163][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.752081][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.759021][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.766011][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.773050][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.779956][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.786958][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.793885][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.800804][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.812938][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.820363][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.827382][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.834341][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.841344][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.848264][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.855198][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.862118][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.869028][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.875946][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.883234][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.890301][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.897227][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.904227][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.911137][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.918147][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.925036][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.931926][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.938834][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.945772][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.952734][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.959633][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.966627][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.973543][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.980544][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.987531][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1509.994464][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.001359][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.008263][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.015275][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.022161][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.029100][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.036004][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.042901][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.049804][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.057196][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.064672][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.071591][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.078495][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.085381][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.092288][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.099178][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.106073][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.112980][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.119887][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.126797][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.133679][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.140627][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.147652][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.154548][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.161443][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.168451][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.175397][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.182347][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.189253][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.196424][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.203422][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.210339][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.217799][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.225306][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.232229][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.239175][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.246099][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.251790][T19837] usb 2-1: USB disconnect, device number 120
[ 1510.253004][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.267077][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.274463][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.281577][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.288500][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.295504][   T44] usb 7-1: USB disconnect, device number 16
[ 1510.303226][    C1] gspca_pac7302 7-1:0.0: URB error -71, resubmitting
[ 1510.309957][    C1] gspca_main: Resubmit URB failed with error -19
[ 1510.364107][T30891] fido_id[30891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[ 1510.722345][T19837] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1510.762427][T26824] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1510.862512][   T44] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1510.872574][T19837] usb 2-1: Using ep0 maxpacket: 8
[ 1510.883733][T19837] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 1510.893231][T19837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.901393][T19837] usb 2-1: Product: syz
[ 1510.905989][T19837] usb 2-1: Manufacturer: syz
[ 1510.910595][T19837] usb 2-1: SerialNumber: syz
[ 1510.919637][T26824] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1510.929716][T19837] usb 2-1: config 0 descriptor??
[ 1510.934913][T26824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.947655][T19837] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 1510.959046][T26824] usb 9-1: config 0 descriptor??
[ 1510.971344][T26824] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1511.022346][   T44] usb 7-1: Using ep0 maxpacket: 16
[ 1511.030078][   T44] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1511.039621][   T44] usb 7-1: config 0 has an invalid interface number: 63 but max is 0
[ 1511.047877][   T44] usb 7-1: config 0 has no interface number 0
[ 1511.057133][   T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=4e.ba
[ 1511.066425][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.074598][   T44] usb 7-1: Product: syz
[ 1511.078904][   T44] usb 7-1: Manufacturer: syz
[ 1511.083628][   T44] usb 7-1: SerialNumber: syz
[ 1511.092124][   T44] usb 7-1: config 0 descriptor??
[ 1511.102479][   T44] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1511.109637][   T44] pvrusb2: **********
[ 1511.114253][   T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1511.125508][   T44] pvrusb2: Important functionality might not be entirely working.
[ 1511.133418][   T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1511.144960][   T44] pvrusb2: **********
[ 1511.308702][ T2346] pvrusb2: Invalid write control endpoint
[ 1511.321476][   T44] usb 7-1: USB disconnect, device number 17
[ 1511.387685][ T2346] pvrusb2: Invalid write control endpoint
[ 1511.394403][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1511.407613][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1511.415303][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1511.425550][ T2346] pvrusb2: Device being rendered inoperable
[ 1511.431550][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1511.438858][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_m)
[ 1511.447531][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1511.455314][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1511.465570][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1512.322381][T26804] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[ 1512.496274][T26804] usb 7-1: config 0 has an invalid interface number: 46 but max is 0
[ 1512.504548][T26804] usb 7-1: config 0 has no interface number 0
[ 1512.510745][T26804] usb 7-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1512.525586][T26804] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[ 1512.534866][T26804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.543056][T26804] usb 7-1: Product: syz
[ 1512.547269][T26804] usb 7-1: Manufacturer: syz
[ 1512.551916][T26804] usb 7-1: SerialNumber: syz
[ 1512.560149][T26804] usb 7-1: config 0 descriptor??
[ 1512.568987][T30903] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1512.580801][T26804] ums-karma 7-1:0.46: USB Mass Storage device detected
[ 1512.590699][T26824] usb 9-1: USB disconnect, device number 15
[ 1512.651474][T26804] ums-karma 7-1:0.46: probe with driver ums-karma failed with error -5
[ 1512.784713][   T44] usb 7-1: USB disconnect, device number 18
[ 1513.492906][   T44] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1513.652477][   T44] usb 9-1: Using ep0 maxpacket: 8
[ 1513.659468][   T44] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1513.667893][   T44] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1513.677828][   T44] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1513.688955][   T44] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1513.699021][   T44] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1513.712122][   T44] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1513.721363][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.939576][   T44] usb 9-1: GET_CAPABILITIES returned 0
[ 1513.945217][   T44] usbtmc 9-1:16.0: can't read capabilities
[ 1514.330633][T30909] usbtmc 9-1:16.0: usb_control_msg returned -71
[ 1514.330725][T26804] usb 9-1: USB disconnect, device number 16
[ 1514.389670][T19837] gspca_sonixj: reg_w1 err -71
[ 1514.396355][T19837] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[ 1514.406966][T19837] usb 2-1: USB disconnect, device number 121
[ 1514.592364][   T44] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1514.742444][   T44] usb 7-1: Using ep0 maxpacket: 8
[ 1514.749383][   T44] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[ 1514.757951][   T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1514.769194][   T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1514.779319][   T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1514.789565][   T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1514.805541][T26804] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[ 1514.805567][   T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1514.825807][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.974932][T26804] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1514.985621][T26804] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1514.996560][T26804] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1515.010183][T26804] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1515.019568][T26804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.046501][   T44] usb 7-1: GET_CAPABILITIES returned 0
[ 1515.052068][   T44] usbtmc 7-1:16.0: can't read capabilities
[ 1515.192380][T29236] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1515.235427][T26804] usb 9-1: usb_control_msg returned -32
[ 1515.241079][T26804] usbtmc 9-1:16.0: can't read capabilities
[ 1515.257465][T14082] usb 7-1: USB disconnect, device number 19
[ 1515.352497][T29236] usb 2-1: Using ep0 maxpacket: 8
[ 1515.360665][T29236] usb 2-1: config 0 has too many interfaces: 217, using maximum allowed: 32
[ 1515.369771][T29236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 217
[ 1515.381084][T29236] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c
[ 1515.390262][T29236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.398325][T29236] usb 2-1: Product: syz
[ 1515.402574][T29236] usb 2-1: Manufacturer: syz
[ 1515.407193][T29236] usb 2-1: SerialNumber: syz
[ 1515.414813][T29236] usb 2-1: config 0 descriptor??
[ 1515.430926][T29236] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c
[ 1515.793950][T30915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1515.815992][T30915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.072373][T26804] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1516.222608][T26804] usb 7-1: Using ep0 maxpacket: 32
[ 1516.231253][T26804] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1516.240698][T26804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.250975][T26804] usb 7-1: config 0 has no interface number 0
[ 1516.257282][T26804] usb 7-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1516.278361][T26804] usb 7-1: New USB device found, idVendor=0bda, idProduct=c812, bcdDevice=8a.3a
[ 1516.287601][T26804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.295888][T26804] usb 7-1: Product: syz
[ 1516.300085][T26804] usb 7-1: Manufacturer: syz
[ 1516.304800][T26804] usb 7-1: SerialNumber: syz
[ 1516.313766][T26804] usb 7-1: config 0 descriptor??
[ 1516.567050][T26804] usb 7-1: USB disconnect, device number 20
[ 1516.845834][T29236] gspca_zc3xx: reg_w_i err -71
[ 1516.907859][   T44] usb 9-1: USB disconnect, device number 17
[ 1517.272489][   T44] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1517.342516][T26804] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1517.423971][   T44] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1517.432910][   T44] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1517.443231][   T44] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1517.452329][   T44] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1517.463458][T29236] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1517.469830][T29236] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1517.478646][   T44] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1517.491647][   T44] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1517.502663][T26804] usb 7-1: Using ep0 maxpacket: 16
[ 1517.503112][T29236] usb 2-1: USB disconnect, device number 122
[ 1517.514179][   T44] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1517.525749][   T44] usb 9-1: Product: syz
[ 1517.532362][   T44] usb 9-1: Manufacturer: syz
[ 1517.538199][T26804] usb 7-1: config 8 has an invalid interface number: 206 but max is 0
[ 1517.549185][   T44] cdc_wdm 9-1:1.0: skipping garbage
[ 1517.559273][T26804] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.562371][   T44] cdc_wdm 9-1:1.0: skipping garbage
[ 1517.573902][T26804] usb 7-1: config 8 has no interface number 0
[ 1517.581172][T26804] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1517.594670][   T44] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1517.600611][   T44] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1517.617645][T26804] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1517.634159][T26804] usb 7-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1517.650595][T26804] usb 7-1: config 8 interface 206 has no altsetting 0
[ 1517.663713][T26804] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[ 1517.677844][T26804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.686070][T26804] usb 7-1: Product: syz
[ 1517.690530][T26804] usb 7-1: Manufacturer: syz
[ 1517.698726][T26804] usb 7-1: SerialNumber: syz
[ 1517.754960][   T44] usb 9-1: USB disconnect, device number 18
[ 1517.919286][T26804] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected
[ 1517.929679][T26804] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1517.944860][T26804] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 1517.958637][T26804] usb 7-1: USB disconnect, device number 21
[ 1517.968354][T26804] garmin_gps 7-1:8.206: device disconnected
[ 1517.992659][T29236] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1518.144587][T29236] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.155138][T29236] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1518.164334][T29236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1518.184597][T29236] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[ 1518.422374][T26804] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1518.574134][T26804] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1518.583072][T26804] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1518.593640][T26804] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1518.602732][T26804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1518.613966][T26804] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1518.627955][T26804] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1518.637129][T26804] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1518.645187][T26804] usb 9-1: Product: syz
[ 1518.649369][T26804] usb 9-1: Manufacturer: syz
[ 1518.660026][T26804] cdc_wdm 9-1:1.0: skipping garbage
[ 1518.666612][T26804] cdc_wdm 9-1:1.0: skipping garbage
[ 1518.676824][T26804] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1518.682899][T26804] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1518.922532][T29236] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1519.106567][T29236] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1519.114776][T29236] usb 7-1: config 0 has no interface number 0
[ 1519.123810][T29236] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1519.133741][T29236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.141769][T29236] usb 7-1: Product: syz
[ 1519.146263][T29236] usb 7-1: Manufacturer: syz
[ 1519.150903][T29236] usb 7-1: SerialNumber: syz
[ 1519.158676][T29236] usb 7-1: config 0 descriptor??
[ 1519.216024][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.221760][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.228777][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.234900][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.240581][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.246959][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.252844][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.258838][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.265932][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.271797][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.277645][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.283717][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.289444][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.295342][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.303790][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.309488][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.315343][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.321261][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.326954][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.332767][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.338624][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.344314][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.350137][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.355981][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.361849][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.367730][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.373592][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.379527][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.385369][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.391236][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.396942][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.402777][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.408695][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.414590][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.420325][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.426304][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.431998][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.437763][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.443759][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.449615][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.455546][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.461349][T29236] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[ 1519.461413][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.476049][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.481892][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.487590][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.493400][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.499126][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.506968][    C1] cdc_wdm 9-1:1.0: Stall on int endpoint
[ 1519.512685][    C1] cdc_wdm 9-1:1.0: Cannot schedule work
[ 1519.518312][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 1519.529885][T29236] usb 7-1: USB disconnect, device number 22
[ 1519.542913][T26804] usb 9-1: USB disconnect, device number 19
[ 1520.192654][T26804] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1520.352484][T26804] usb 7-1: Using ep0 maxpacket: 32
[ 1520.362668][T26804] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1520.371796][T26804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.379886][T26804] usb 7-1: Product: syz
[ 1520.385195][T26804] usb 7-1: Manufacturer: syz
[ 1520.389834][T26804] usb 7-1: SerialNumber: syz
[ 1520.397877][T26804] usb 7-1: config 0 descriptor??
[ 1520.406983][T26804] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1520.442416][T19837] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1520.592424][T19837] usb 9-1: Using ep0 maxpacket: 8
[ 1520.599220][T19837] usb 9-1: config 162 has an invalid descriptor of length 64, skipping remainder of the config
[ 1520.612320][T19837] usb 9-1: config 162 has 0 interfaces, different from the descriptor's value: 1
[ 1520.624390][T19837] usb 9-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=f8.bd
[ 1520.633667][T19837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.641702][T19837] usb 9-1: Product: syz
[ 1520.645974][T19837] usb 9-1: Manufacturer: syz
[ 1520.650616][T19837] usb 9-1: SerialNumber: syz
[ 1520.726707][T20176] usb 2-1: USB disconnect, device number 123
[ 1520.864933][T29236] usb 9-1: USB disconnect, device number 20
[ 1521.082357][T20176] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1521.232371][T20176] usb 2-1: Using ep0 maxpacket: 8
[ 1521.242003][T20176] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b
[ 1521.251519][T20176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.260806][T20176] usb 2-1: Product: syz
[ 1521.265526][T20176] usb 2-1: Manufacturer: syz
[ 1521.270162][T20176] usb 2-1: SerialNumber: syz
[ 1521.278317][T20176] usb 2-1: config 0 descriptor??
[ 1521.289118][T20176] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state.
[ 1521.297883][T20176] dvb-usb: bulk message failed: -22 (2/0)
[ 1521.306645][T20176] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1521.318372][T20176] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2)
[ 1521.327503][T20176] usb 2-1: media controller created
[ 1521.355341][T20176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1521.493060][T20176] cxusb: set interface failed
[ 1521.513010][T20176] dvb-usb: bulk message failed: -22 (1/0)
[ 1521.556962][T20176] DVB: Unable to find symbol mt352_attach()
[ 1521.563587][T20176] dvb-usb: bulk message failed: -22 (5/0)
[ 1521.569903][T20176] zl10353_read_register: readreg error (reg=127, ret==-121)
[ 1521.578626][T20176] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2'
[ 1521.656118][T20176] rc_core: IR keymap rc-dvico-mce not found
[ 1521.662083][T20176] Registered IR keymap rc-empty
[ 1521.668266][T20176] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1521.682509][T20176] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input122
[ 1521.697252][T20176] dvb-usb: schedule remote query interval to 100 msecs.
[ 1521.709080][T20176] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected.
[ 1521.728174][T20176] usb 2-1: USB disconnect, device number 124
[ 1521.845830][T20176] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected.
[ 1522.302938][T20176] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1522.412534][T20175] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1522.465994][T20176] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1522.474850][T20176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1522.485060][T20176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1522.495772][T20176] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1522.509565][T20176] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1522.518858][T20176] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1522.527016][T20176] usb 2-1: Product: syz
[ 1522.531214][T20176] usb 2-1: Manufacturer: syz
[ 1522.548959][T20176] cdc_wdm 2-1:1.0: skipping garbage
[ 1522.555751][T20176] cdc_wdm 2-1:1.0: skipping garbage
[ 1522.563243][T20176] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1522.569193][T20176] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1522.580027][T20175] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1522.591474][T20175] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[ 1522.601061][T20175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.629445][T20175] usb 9-1: config 0 descriptor??
[ 1522.705733][T30966] 
[ 1522.708135][T30966] =====================================================
[ 1522.715082][T30966] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1522.722561][T30966] 6.16.0-next-20250808-syzkaller #0 Not tainted
[ 1522.728823][T30966] -----------------------------------------------------
[ 1522.735770][T30966] syz.7.7284/30966 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1522.743502][T30966] ffff888077c069f0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1522.751300][T14082] usb 2-1: USB disconnect, device number 125
[ 1522.752233][T30966] 
[ 1522.752233][T30966] and this task is already holding:
[ 1522.752245][T30966] ffff888022a80028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1522.752302][T30966] which would create a new lock dependency:
[ 1522.752312][T30966]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1522.752367][T30966] 
[ 1522.752367][T30966] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1522.752379][T30966]  (&dev->event_lock#2){..-.}-{3:3}
[ 1522.752407][T30966] 
[ 1522.752407][T30966] ... which became SOFTIRQ-irq-safe at:
[ 1522.752419][T30966]   lock_acquire+0x120/0x360
[ 1522.752444][T30966]   _raw_spin_lock_irqsave+0xa7/0xf0
[ 1522.752474][T30966]   input_inject_event+0xa5/0x340
[ 1522.752502][T30966]   led_trigger_event+0x138/0x210
[ 1522.752523][T30966]   kbd_bh+0x1c6/0x2e0
[ 1522.752546][T30966]   tasklet_action_common+0x369/0x580
[ 1522.752577][T30966]   handle_softirqs+0x283/0x870
[ 1522.846159][T30966]   __irq_exit_rcu+0xca/0x1f0
[ 1522.850855][T30966]   irq_exit_rcu+0x9/0x30
[ 1522.855199][T30966]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1522.860932][T30966]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1522.867010][T30966]   _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1522.872838][T30966]   vt_do_kdskled+0x386/0x4c0
[ 1522.877549][T30966]   vt_ioctl+0xf1b/0x1f00
[ 1522.881943][T30966]   tty_ioctl+0x926/0xde0
[ 1522.886347][T30966]   __se_sys_ioctl+0xfc/0x170
[ 1522.891056][T30966]   do_syscall_64+0xfa/0x3b0
[ 1522.895665][T30966]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.901660][T30966] 
[ 1522.901660][T30966] to a SOFTIRQ-irq-unsafe lock:
[ 1522.908693][T30966]  (tasklist_lock){.+.+}-{3:3}
[ 1522.908728][T30966] 
[ 1522.908728][T30966] ... which became SOFTIRQ-irq-unsafe at:
[ 1522.921380][T30966] ...
[ 1522.921391][T30966]   lock_acquire+0x120/0x360
[ 1522.928578][T30966]   _raw_read_lock+0x36/0x50
[ 1522.933203][T30966]   __do_wait+0xde/0x740
[ 1522.937461][T30966]   do_wait+0x1f8/0x520
[ 1522.941625][T30966]   kernel_wait+0xab/0x170
[ 1522.946062][T30966]   call_usermodehelper_exec_work+0xbe/0x230
[ 1522.952057][T30966]   process_scheduled_works+0xade/0x17b0
[ 1522.957705][T30966]   worker_thread+0x8a0/0xda0
[ 1522.962419][T30966]   kthread+0x711/0x8a0
[ 1522.966585][T30966]   ret_from_fork+0x3f9/0x770
[ 1522.971286][T30966]   ret_from_fork_asm+0x1a/0x30
[ 1522.976148][T30966] 
[ 1522.976148][T30966] other info that might help us debug this:
[ 1522.976148][T30966] 
[ 1522.986401][T30966] Chain exists of:
[ 1522.986401][T30966]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1522.986401][T30966] 
[ 1522.999989][T30966]  Possible interrupt unsafe locking scenario:
[ 1522.999989][T30966] 
[ 1523.008312][T30966]        CPU0                    CPU1
[ 1523.013679][T30966]        ----                    ----
[ 1523.019051][T30966]   lock(tasklist_lock);
[ 1523.023309][T30966]                                local_irq_disable();
[ 1523.030069][T30966]                                lock(&dev->event_lock#2);
[ 1523.037298][T30966]                                lock(&client->buffer_lock);
[ 1523.044686][T30966]   <Interrupt>
[ 1523.048147][T30966]     lock(&dev->event_lock#2);
[ 1523.053032][T30966] 
[ 1523.053032][T30966]  *** DEADLOCK ***
[ 1523.053032][T30966] 
[ 1523.061183][T30966] 7 locks held by syz.7.7284/30966:
[ 1523.066397][T30966]  #0: ffff888147f95118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 1523.075565][T30966]  #1: ffff888146ef3230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 1523.085724][T30966]  #2: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 1523.095410][T30966]  #3: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1523.105016][T30966]  #4: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1523.114183][T30966]  #5: ffff888022a80028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1523.124393][T30966]  #6: ffffffff8e539ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1523.133458][T30966] 
[ 1523.133458][T30966] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1523.143874][T30966]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1523.149629][T30966]     IN-SOFTIRQ-W at:
[ 1523.153707][T30966]                       lock_acquire+0x120/0x360
[ 1523.160041][T30966]                       _raw_spin_lock_irqsave+0xa7/0xf0
[ 1523.167072][T30966]                       input_inject_event+0xa5/0x340
[ 1523.173882][T30966]                       led_trigger_event+0x138/0x210
[ 1523.180694][T30966]                       kbd_bh+0x1c6/0x2e0
[ 1523.186878][T30966]                       tasklet_action_common+0x369/0x580
[ 1523.194011][T30966]                       handle_softirqs+0x283/0x870
[ 1523.200622][T30966]                       __irq_exit_rcu+0xca/0x1f0
[ 1523.207056][T30966]                       irq_exit_rcu+0x9/0x30
[ 1523.213148][T30966]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1523.220645][T30966]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1523.228458][T30966]                       _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1523.236021][T30966]                       vt_do_kdskled+0x386/0x4c0
[ 1523.242450][T30966]                       vt_ioctl+0xf1b/0x1f00
[ 1523.248531][T30966]                       tty_ioctl+0x926/0xde0
[ 1523.254601][T30966]                       __se_sys_ioctl+0xfc/0x170
[ 1523.261025][T30966]                       do_syscall_64+0xfa/0x3b0
[ 1523.267360][T30966]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.275087][T30966]     INITIAL USE at:
[ 1523.279080][T30966]                      lock_acquire+0x120/0x360
[ 1523.285334][T30966]                      _raw_spin_lock_irqsave+0xa7/0xf0
[ 1523.292283][T30966]                      input_inject_event+0xa5/0x340
[ 1523.298967][T30966]                      kbd_led_trigger_activate+0xbc/0x100
[ 1523.306175][T30966]                      led_trigger_set+0x52a/0x950
[ 1523.312705][T30966]                      led_trigger_set_default+0x260/0x2a0
[ 1523.319941][T30966]                      led_classdev_register_ext+0x73d/0x930
[ 1523.327414][T30966]                      input_leds_connect+0x517/0x790
[ 1523.334189][T30966]                      input_register_device+0xd00/0x1140
[ 1523.341371][T30966]                      atkbd_connect+0x72e/0xa00
[ 1523.347699][T30966]                      serio_driver_probe+0x7f/0xd0
[ 1523.354303][T30966]                      really_probe+0x26d/0x9e0
[ 1523.360550][T30966]                      __driver_probe_device+0x18c/0x2f0
[ 1523.367589][T30966]                      driver_probe_device+0x4f/0x430
[ 1523.374363][T30966]                      __driver_attach+0x452/0x700
[ 1523.380868][T30966]                      bus_for_each_dev+0x233/0x2b0
[ 1523.387486][T30966]                      serio_handle_event+0x1f9/0x8d0
[ 1523.394298][T30966]                      process_scheduled_works+0xade/0x17b0
[ 1523.401592][T30966]                      worker_thread+0x8a0/0xda0
[ 1523.407937][T30966]                      kthread+0x711/0x8a0
[ 1523.413838][T30966]                      ret_from_fork+0x3f9/0x770
[ 1523.420177][T30966]                      ret_from_fork_asm+0x1a/0x30
[ 1523.426696][T30966]   }
[ 1523.429285][T30966]   ... key      at: [<ffffffff9a26b140>] input_allocate_device.__key.5+0x0/0x20
[ 1523.438421][T30966] -> (&client->buffer_lock){....}-{3:3} {
[ 1523.444165][T30966]    INITIAL USE at:
[ 1523.448066][T30966]                    lock_acquire+0x120/0x360
[ 1523.454143][T30966]                    _raw_spin_lock+0x2e/0x40
[ 1523.460229][T30966]                    evdev_pass_values+0xb9/0xbd0
[ 1523.466667][T30966]                    evdev_events+0x1e6/0x340
[ 1523.472761][T30966]                    input_pass_values+0x285/0x890
[ 1523.479303][T30966]                    input_event_dispose+0x330/0x6b0
[ 1523.485993][T30966]                    input_inject_event+0x1dd/0x340
[ 1523.492591][T30966]                    evdev_write+0x2fc/0x480
[ 1523.498574][T30966]                    vfs_write+0x27e/0xb30
[ 1523.504396][T30966]                    ksys_write+0x145/0x250
[ 1523.510293][T30966]                    do_syscall_64+0xfa/0x3b0
[ 1523.516360][T30966]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.523826][T30966]  }
[ 1523.526330][T30966]  ... key      at: [<ffffffff9a26b3e0>] evdev_open.__key.25+0x0/0x20
[ 1523.534504][T30966]  ... acquired at:
[ 1523.538330][T30966]    lock_acquire+0x120/0x360
[ 1523.543017][T30966]    _raw_spin_lock+0x2e/0x40
[ 1523.547706][T30966]    evdev_pass_values+0xb9/0xbd0
[ 1523.552754][T30966]    evdev_events+0x1e6/0x340
[ 1523.557447][T30966]    input_pass_values+0x285/0x890
[ 1523.562575][T30966]    input_event_dispose+0x330/0x6b0
[ 1523.567878][T30966]    input_inject_event+0x1dd/0x340
[ 1523.573104][T30966]    evdev_write+0x2fc/0x480
[ 1523.577702][T30966]    vfs_write+0x27e/0xb30
[ 1523.582131][T30966]    ksys_write+0x145/0x250
[ 1523.586687][T30966]    do_syscall_64+0xfa/0x3b0
[ 1523.591372][T30966]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.597452][T30966] 
[ 1523.599779][T30966] 
[ 1523.599779][T30966] the dependencies between the lock to be acquired
[ 1523.599790][T30966]  and SOFTIRQ-irq-unsafe lock:
[ 1523.613301][T30966]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1523.618616][T30966]      HARDIRQ-ON-R at:
[ 1523.622774][T30966]                         lock_acquire+0x120/0x360
[ 1523.629315][T30966]                         _raw_read_lock+0x36/0x50
[ 1523.635828][T30966]                         __do_wait+0xde/0x740
[ 1523.642073][T30966]                         do_wait+0x1f8/0x520
[ 1523.648147][T30966]                         kernel_wait+0xab/0x170
[ 1523.654512][T30966]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1523.662425][T30966]                         process_scheduled_works+0xade/0x17b0
[ 1523.669995][T30966]                         worker_thread+0x8a0/0xda0
[ 1523.676596][T30966]                         kthread+0x711/0x8a0
[ 1523.682674][T30966]                         ret_from_fork+0x3f9/0x770
[ 1523.689355][T30966]                         ret_from_fork_asm+0x1a/0x30
[ 1523.696242][T30966]      SOFTIRQ-ON-R at:
[ 1523.700398][T30966]                         lock_acquire+0x120/0x360
[ 1523.706909][T30966]                         _raw_read_lock+0x36/0x50
[ 1523.713425][T30966]                         __do_wait+0xde/0x740
[ 1523.719606][T30966]                         do_wait+0x1f8/0x520
[ 1523.725678][T30966]                         kernel_wait+0xab/0x170
[ 1523.732015][T30966]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1523.739918][T30966]                         process_scheduled_works+0xade/0x17b0
[ 1523.747466][T30966]                         worker_thread+0x8a0/0xda0
[ 1523.754070][T30966]                         kthread+0x711/0x8a0
[ 1523.760136][T30966]                         ret_from_fork+0x3f9/0x770
[ 1523.766741][T30966]                         ret_from_fork_asm+0x1a/0x30
[ 1523.773508][T30966]      INITIAL USE at:
[ 1523.777577][T30966]                        lock_acquire+0x120/0x360
[ 1523.784003][T30966]                        _raw_write_lock_irq+0xa2/0xf0
[ 1523.790860][T30966]                        copy_process+0x224f/0x3c00
[ 1523.797469][T30966]                        kernel_clone+0x21e/0x840
[ 1523.803897][T30966]                        user_mode_thread+0xdd/0x140
[ 1523.810586][T30966]                        rest_init+0x23/0x300
[ 1523.816661][T30966]                        start_kernel+0x3a9/0x410
[ 1523.823100][T30966]                        x86_64_start_reservations+0x24/0x30
[ 1523.830481][T30966]                        x86_64_start_kernel+0x143/0x1c0
[ 1523.837513][T30966]                        common_startup_64+0x13e/0x147
[ 1523.844387][T30966]      INITIAL READ USE at:
[ 1523.848897][T30966]                             lock_acquire+0x120/0x360
[ 1523.855754][T30966]                             _raw_read_lock+0x36/0x50
[ 1523.862615][T30966]                             __do_wait+0xde/0x740
[ 1523.869129][T30966]                             do_wait+0x1f8/0x520
[ 1523.875558][T30966]                             kernel_wait+0xab/0x170
[ 1523.882245][T30966]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1523.890510][T30966]                             process_scheduled_works+0xade/0x17b0
[ 1523.898436][T30966]                             worker_thread+0x8a0/0xda0
[ 1523.905398][T30966]                             kthread+0x711/0x8a0
[ 1523.911844][T30966]                             ret_from_fork+0x3f9/0x770
[ 1523.918799][T30966]                             ret_from_fork_asm+0x1a/0x30
[ 1523.925938][T30966]    }
[ 1523.928624][T30966]    ... key      at: [<ffffffff8e20c058>] tasklist_lock+0x18/0x40
[ 1523.936541][T30966]    ... acquired at:
[ 1523.940524][T30966]    lock_acquire+0x120/0x360
[ 1523.945214][T30966]    _raw_read_lock+0x36/0x50
[ 1523.949932][T30966]    send_sigurg+0x12b/0x420
[ 1523.954528][T30966]    sk_send_sigurg+0x6c/0x2e0
[ 1523.959363][T30966]    queue_oob+0x420/0x4f0
[ 1523.963805][T30966]    unix_stream_sendmsg+0xc3f/0xdf0
[ 1523.969115][T30966]    __sock_sendmsg+0x21c/0x270
[ 1523.973987][T30966]    ____sys_sendmsg+0x505/0x830
[ 1523.978937][T30966]    ___sys_sendmsg+0x21f/0x2a0
[ 1523.983803][T30966]    __x64_sys_sendmsg+0x19b/0x260
[ 1523.988921][T30966]    do_syscall_64+0xfa/0x3b0
[ 1523.993699][T30966]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1523.999776][T30966] 
[ 1524.002103][T30966]  -> (&f_owner->lock){....}-{3:3} {
[ 1524.007432][T30966]     INITIAL USE at:
[ 1524.011449][T30966]                      lock_acquire+0x120/0x360
[ 1524.017726][T30966]                      _raw_write_lock_irq+0xa2/0xf0
[ 1524.024425][T30966]                      __f_setown+0x67/0x370
[ 1524.030423][T30966]                      tty_fasync+0x2dc/0x350
[ 1524.036504][T30966]                      do_fcntl+0x1099/0x1910
[ 1524.042604][T30966]                      __se_sys_fcntl+0xc8/0x150
[ 1524.048947][T30966]                      do_syscall_64+0xfa/0x3b0
[ 1524.055197][T30966]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.062833][T30966]     INITIAL READ USE at:
[ 1524.067253][T30966]                           lock_acquire+0x120/0x360
[ 1524.073945][T30966]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1524.081432][T30966]                           send_sigio+0x38/0x370
[ 1524.087861][T30966]                           kill_fasync+0x24d/0x4d0
[ 1524.094469][T30966]                           fsnotify_insert_event+0x32e/0x3e0
[ 1524.101956][T30966]                           inotify_handle_inode_event+0x3ea/0x5f0
[ 1524.109861][T30966]                           inotify_ignored_and_remove_idr+0x29/0x70
[ 1524.117942][T30966]                           fsnotify_destroy_marks+0x155/0x330
[ 1524.125520][T30966]                           dentry_unlink_inode+0x2c2/0x3f0
[ 1524.132820][T30966]                           vfs_rmdir+0x262/0x520
[ 1524.139248][T30966]                           do_rmdir+0x25f/0x550
[ 1524.145582][T30966]                           __x64_sys_rmdir+0x47/0x50
[ 1524.152364][T30966]                           do_syscall_64+0xfa/0x3b0
[ 1524.159046][T30966]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.167122][T30966]   }
[ 1524.169721][T30966]   ... key      at: [<ffffffff99f6bfe0>] file_f_owner_allocate.__key+0x0/0x20
[ 1524.178676][T30966]   ... acquired at:
[ 1524.182564][T30966]    lock_acquire+0x120/0x360
[ 1524.187251][T30966]    _raw_read_lock_irqsave+0xaf/0x100
[ 1524.192722][T30966]    send_sigio+0x38/0x370
[ 1524.197154][T30966]    kill_fasync+0x24d/0x4d0
[ 1524.201761][T30966]    fsnotify_insert_event+0x32e/0x3e0
[ 1524.207246][T30966]    inotify_handle_inode_event+0x3ea/0x5f0
[ 1524.213245][T30966]    inotify_ignored_and_remove_idr+0x29/0x70
[ 1524.219325][T30966]    fsnotify_destroy_marks+0x155/0x330
[ 1524.224891][T30966]    dentry_unlink_inode+0x2c2/0x3f0
[ 1524.230190][T30966]    vfs_rmdir+0x262/0x520
[ 1524.234623][T30966]    do_rmdir+0x25f/0x550
[ 1524.238959][T30966]    __x64_sys_rmdir+0x47/0x50
[ 1524.243730][T30966]    do_syscall_64+0xfa/0x3b0
[ 1524.248411][T30966]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.254481][T30966] 
[ 1524.256812][T30966] -> (&new->fa_lock){....}-{3:3} {
[ 1524.261967][T30966]    INITIAL USE at:
[ 1524.265869][T30966]                    lock_acquire+0x120/0x360
[ 1524.271947][T30966]                    _raw_write_lock_irq+0xa2/0xf0
[ 1524.278465][T30966]                    fasync_remove_entry+0xf1/0x1c0
[ 1524.285063][T30966]                    __fput+0x89f/0xa70
[ 1524.290611][T30966]                    task_work_run+0x1d1/0x260
[ 1524.296771][T30966]                    exit_to_user_mode_loop+0xec/0x110
[ 1524.303631][T30966]                    do_syscall_64+0x2bd/0x3b0
[ 1524.309800][T30966]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.317277][T30966]    INITIAL READ USE at:
[ 1524.321629][T30966]                         lock_acquire+0x120/0x360
[ 1524.328224][T30966]                         _raw_read_lock_irqsave+0xaf/0x100
[ 1524.335529][T30966]                         kill_fasync+0x199/0x4d0
[ 1524.341950][T30966]                         fsnotify_insert_event+0x32e/0x3e0
[ 1524.349247][T30966]                         inotify_handle_inode_event+0x3ea/0x5f0
[ 1524.356975][T30966]                         inotify_ignored_and_remove_idr+0x29/0x70
[ 1524.364880][T30966]                         fsnotify_destroy_marks+0x155/0x330
[ 1524.372369][T30966]                         dentry_unlink_inode+0x2c2/0x3f0
[ 1524.379483][T30966]                         vfs_rmdir+0x262/0x520
[ 1524.385736][T30966]                         do_rmdir+0x25f/0x550
[ 1524.391901][T30966]                         __x64_sys_rmdir+0x47/0x50
[ 1524.398500][T30966]                         do_syscall_64+0xfa/0x3b0
[ 1524.405032][T30966]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.412933][T30966]  }
[ 1524.415470][T30966]  ... key      at: [<ffffffff99f6c000>] fasync_insert_entry.__key+0x0/0x20
[ 1524.424171][T30966]  ... acquired at:
[ 1524.427982][T30966]    lock_acquire+0x120/0x360
[ 1524.432711][T30966]    _raw_read_lock_irqsave+0xaf/0x100
[ 1524.438184][T30966]    kill_fasync+0x199/0x4d0
[ 1524.442786][T30966]    evdev_pass_values+0x627/0xbd0
[ 1524.447906][T30966]    evdev_events+0x1e6/0x340
[ 1524.452608][T30966]    input_pass_values+0x285/0x890
[ 1524.457747][T30966]    input_event_dispose+0x330/0x6b0
[ 1524.463046][T30966]    input_inject_event+0x1dd/0x340
[ 1524.468256][T30966]    evdev_write+0x2fc/0x480
[ 1524.472860][T30966]    vfs_write+0x27e/0xb30
[ 1524.477287][T30966]    ksys_write+0x145/0x250
[ 1524.481814][T30966]    do_syscall_64+0xfa/0x3b0
[ 1524.486501][T30966]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.492575][T30966] 
[ 1524.494898][T30966] 
[ 1524.494898][T30966] stack backtrace:
[ 1524.500802][T30966] CPU: 1 UID: 0 PID: 30966 Comm: syz.7.7284 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1524.500824][T30966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1524.500837][T30966] Call Trace:
[ 1524.500846][T30966]  <TASK>
[ 1524.500854][T30966]  dump_stack_lvl+0x189/0x250
[ 1524.500887][T30966]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1524.500915][T30966]  ? __pfx__printk+0x10/0x10
[ 1524.500945][T30966]  validate_chain+0x1f05/0x2140
[ 1524.500978][T30966]  __lock_acquire+0xab9/0xd20
[ 1524.501000][T30966]  ? kill_fasync+0x199/0x4d0
[ 1524.501017][T30966]  lock_acquire+0x120/0x360
[ 1524.501039][T30966]  ? kill_fasync+0x199/0x4d0
[ 1524.501060][T30966]  _raw_read_lock_irqsave+0xaf/0x100
[ 1524.501085][T30966]  ? kill_fasync+0x199/0x4d0
[ 1524.501101][T30966]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 1524.501125][T30966]  ? do_raw_spin_lock+0x121/0x290
[ 1524.501164][T30966]  kill_fasync+0x199/0x4d0
[ 1524.501181][T30966]  ? kill_fasync+0x53/0x4d0
[ 1524.501198][T30966]  evdev_pass_values+0x627/0xbd0
[ 1524.501216][T30966]  ? evdev_pass_values+0x621/0xbd0
[ 1524.501234][T30966]  evdev_events+0x1e6/0x340
[ 1524.501260][T30966]  ? evdev_events+0x79/0x340
[ 1524.501288][T30966]  ? input_pass_values+0x8d/0x890
[ 1524.501317][T30966]  input_pass_values+0x285/0x890
[ 1524.501346][T30966]  ? input_handle_event+0x70c/0xf30
[ 1524.501368][T30966]  input_event_dispose+0x330/0x6b0
[ 1524.501400][T30966]  input_inject_event+0x1dd/0x340
[ 1524.501422][T30966]  ? input_inject_event+0xb6/0x340
[ 1524.501449][T30966]  evdev_write+0x2fc/0x480
[ 1524.501463][T30966]  ? futex_private_hash_put+0x245/0x280
[ 1524.501490][T30966]  ? __pfx_evdev_write+0x10/0x10
[ 1524.501506][T30966]  ? bpf_lsm_file_permission+0x9/0x20
[ 1524.501552][T30966]  ? security_file_permission+0x75/0x290
[ 1524.501575][T30966]  ? rw_verify_area+0x255/0x4d0
[ 1524.501596][T30966]  ? __lock_acquire+0xab9/0xd20
[ 1524.501617][T30966]  ? __pfx_evdev_write+0x10/0x10
[ 1524.501637][T30966]  vfs_write+0x27e/0xb30
[ 1524.501664][T30966]  ? __pfx_vfs_write+0x10/0x10
[ 1524.501690][T30966]  ? __fget_files+0x2a/0x420
[ 1524.501718][T30966]  ? __fget_files+0x2a/0x420
[ 1524.501747][T30966]  ? __fget_files+0x3a0/0x420
[ 1524.501778][T30966]  ? __fget_files+0x2a/0x420
[ 1524.501813][T30966]  ksys_write+0x145/0x250
[ 1524.501840][T30966]  ? __pfx_ksys_write+0x10/0x10
[ 1524.501861][T30966]  ? rcu_is_watching+0x15/0xb0
[ 1524.501886][T30966]  ? do_syscall_64+0xbe/0x3b0
[ 1524.501903][T30966]  do_syscall_64+0xfa/0x3b0
[ 1524.501919][T30966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.501936][T30966]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1524.501955][T30966]  ? clear_bhb_loop+0x60/0xb0
[ 1524.501979][T30966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.502001][T30966] RIP: 0033:0x7f4e4e38ebe9
[ 1524.502020][T30966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1524.502041][T30966] RSP: 002b:00007f4e4f1c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1524.502064][T30966] RAX: ffffffffffffffda RBX: 00007f4e4e5b5fa0 RCX: 00007f4e4e38ebe9
[ 1524.502080][T30966] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[ 1524.502095][T30966] RBP: 00007f4e4e411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1524.502111][T30966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1524.502125][T30966] R13: 00007f4e4e5b6038 R14: 00007f4e4e5b5fa0 R15: 00007fff8609a638
[ 1524.502158][T30966]  </TASK>
[ 1524.861534][T26804] gspca_stk1135: reg_w 0x300 err -110
[ 1524.868419][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.877847][T26804] gspca_stk1135: Sensor write failed
[ 1524.886133][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.900081][T26804] gspca_stk1135: Sensor write failed
[ 1524.907970][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.921409][T26804] gspca_stk1135: Sensor read failed
[ 1524.927702][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.939618][T26804] gspca_stk1135: Sensor read failed
[ 1524.951434][T26804] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1524.966016][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.973459][T26804] gspca_stk1135: Sensor read failed
[ 1524.978781][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.985772][T26804] gspca_stk1135: Sensor read failed
[ 1524.991129][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1524.997802][T26804] gspca_stk1135: Sensor write failed
[ 1525.003232][T26804] gspca_stk1135: serial bus timeout: status=0x00
[ 1525.009583][T26804] gspca_stk1135: Sensor write failed
[ 1525.015546][T26804] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110
[ 1525.026377][T26804] usb 7-1: USB disconnect, device number 23
[ 1525.192923][T14082] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1525.344096][T14082] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1525.352893][T14082] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.354095][T20175] razer 0003:1532:010E.004B: failed to enable macro keys: -71
[ 1525.367399][T14082] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1525.377351][T20175] razer 0003:1532:010E.004B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0
[ 1525.379728][T14082] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1525.396409][T20175] usb 9-1: USB disconnect, device number 21
[ 1525.414670][T14082] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1525.426751][T14082] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1525.435498][T14082] usb 2-1: Product: syz
[ 1525.439863][T14082] usb 2-1: Manufacturer: syz
[ 1525.452862][T14082] cdc_wdm 2-1:1.0: skipping garbage
[ 1525.458505][T14082] cdc_wdm 2-1:1.0: skipping garbage
[ 1525.467670][T14082] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1525.476573][T30969] fido_id[30969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1525.488450][T14082] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1526.258360][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 1526.258678][T20175] usb 2-1: USB disconnect, device number 126
[ 1526.265022][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 1526.265044][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1526.703523][T14082] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1526.865435][T14082] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1526.874121][T14082] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.884305][T14082] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1526.893854][T14082] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1526.906079][T14082] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1526.915220][T14082] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1526.923425][T14082] usb 2-1: Product: syz
[ 1526.927607][T14082] usb 2-1: Manufacturer: syz
[ 1526.936056][T14082] cdc_wdm 2-1:1.0: skipping garbage
[ 1526.941293][T14082] cdc_wdm 2-1:1.0: skipping garbage
[ 1526.951282][T14082] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1526.958308][T14082] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1527.083874][T14082] usb 2-1: USB disconnect, device number 127