last executing test programs:

4m54.566850616s ago: executing program 1 (id=1042):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) (async)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x2, 0x3957f1cd0312c117}, 0x18, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20)
r8 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r9) (async)
syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r9, 0xc0085508, 0x0)
bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
close_range(r6, 0xffffffffffffffff, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf256600000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) (async)
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) (async)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r11, 0x0, 0x0)
r12 = openat$uhid(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$UHID_INPUT(r12, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$ax25_int(r10, 0x101, 0x3, &(0x7f0000000100)=0x780a, 0x4)

4m54.563082268s ago: executing program 1 (id=1043):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x6, 0x1000, "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"})
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000014c0)={0x0, &(0x7f0000001080)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xbcbb}}, @rdmsr={0x66, 0x18, {0x2eb}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x3, 0x9}}, @in_dx={0x69, 0x20, {0x199f, 0x4}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x6b, {0x0, "66f0460030c7442400c1000000c7442402ee060000ff1c2436656666654e980fc738c4e2213d2366baf80cb82af55680ef66bafc0c66edc0cbe0c4210f5efb0f20d835200000000f22d83e2e440f8fd540b3d4"}}, @uexit={0x0, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x3, 0x1000}}, @nested_load_code={0x12e, 0x54, {0x0, "0fc76a0066bad104b0afee440f20c68f09100277f5410fc72dfd2d0000c4a188585bd266b8b0000f00d8362e650f35264b0fc799ba16dbf1420f01c2"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0xfce3}}, @out_dx={0x6a, 0x28, {0x122d, 0x5, 0xc}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x6251}}, @nested_amd_invlpga={0x17d, 0x20, {0x5004, 0x5c2a}}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0xa649}}, @rdmsr={0x66, 0x18, {0x237}}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xce7e, 0x7}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x62, {0x3, "f30fc7b10000000067670f1b070f20c035000000400f22c0b9800000c00f3235000100000f30d0840c030000000f0866470f22070fc71fc4a2d94599f9ffffff66450fc290da0000008b"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x411})
ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000001500)={0x8, 0x80000000, [{0xd2f, 0x0, 0x3}, {0x8, 0x0, 0x7}, {0x3bfc, 0x0, 0x800}, {0x1, 0x0, 0x4c6}, {0x7, 0x0, 0x5}, {0x3, 0x0, 0x8}, {0x7, 0x0, 0x7}, {0x5, 0x0, 0xe}, {0x2, 0x0, 0x7}, {0x0, 0x0, 0x8001}, {0x0, 0x0, 0x2}, {0x81, 0x0, 0xc}, {0xdbfa, 0x0, 0xb}, {0x0, 0x0, 0x100000001}, {0x4, 0x0, 0x7a}, {0x3, 0x0, 0x4}]})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001780)={'gre0\x00', &(0x7f00000016c0)={'sit0\x00', <r2=>0x0, 0x7800, 0x7800, 0x7, 0x4, {{0x22, 0x4, 0x1, 0x7, 0x88, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x1d, 0xfffffffffffffffc, [{0x5, 0x8, "d68839dc9a6e"}, {0x1, 0x3, "fc"}, {0x1, 0x8, "c008d39ecc53"}, {0x0, 0x4, "cc71"}]}, @timestamp_addr={0x44, 0x54, 0x8, 0x1, 0x0, [{@multicast2, 0x8b0}, {@local, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@multicast2, 0x7}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0xa}, {@broadcast, 0x6}, {@remote, 0xf}, {@multicast2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001840)={'ip6tnl0\x00', &(0x7f00000017c0)={'ip6gre0\x00', r2, 0x2f, 0x3, 0x80, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x3, 0x1ff}})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001880), 0x80000, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000018c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xf, 0x1, '$]]&)-,}+/\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000001a00))
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x74, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x401}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa00000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000000)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000001b80))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000001bc0))
r6 = syz_open_procfs(r4, &(0x7f0000001c00)='net/vlan/vlan0\x00')
ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000001c40))
exit(0xffffffffffffffff)
sendmsg$NFT_BATCH(r5, &(0x7f0000003a80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000001cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x901, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x58, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x2a, 0x6, "4d411775dd0061a15f67472a10a5ca14366bc62df2d43642c4a66f6f1fcf652a4216e9c9f7fa"}]}, @NFT_MSG_DELOBJ={0xac, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x97, 0x8, "30ae4f7f66dc4bdedabee1676745cea29a94ecb181083299cc1aec46c3688eb01f951da55b07cb50f87f31b3c5bec56224a02f426d9c46741e6316a1b7f7d26b426bdcd01a5e1cea812acdd32e2a8ad709198a5b3ba344d7cf7a752f220e8be18c601cd2ecbc738ccf8ee944293e6bc0c7aedbce8d24bb2e7df4f1865af7bf1a9935b53e052464409f86187619c0e0e58db465"}]}, @NFT_MSG_DELSETELEM={0x1a98, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1a68, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "33bb9218630d1e547a7e32fe7af5dc29536454ba0380578159cb79dcaa5e95c74fabc9ee07751a0cd81556226f60598908bc16db5855383ba7c78cc0669396f58e3d1c30e0eeb47efd308d68c7b38be6aeeff93e6ad7bc5ba554631195d8d23539275d3ff0fc0b1ad982c9eb14a0beb56457bf1a194813c661adecfef615af445cd7145dd17e771e269f714ea0fe9d379535f2739073f76537ee"}, @NFTA_DATA_VALUE={0x59, 0x1, "c0131d3fe9e66dd4552e7d598d9c37ab187d94fbb9922940517b0b76a0aa6771cba69f5c8330fea4896ba089eefda47ec1cd5acb52fa63c893a45883a920c5b92a894a7f38ca5ab9802d98f212482d1c95f38b86b8"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x21, 0x1, "9f0fad6183049c869fb19661545b0fc9117b58f79b62fcf1970957f4c3"}, @NFTA_DATA_VALUE={0xe6, 0x1, "3a414fd9f83059c8e3df81c49bc439121dabc774a221604b4f9bb51145070b93cc781fce89b5add1faa9e6f2f8455cf31d837a3ed31df05dac7a40c9f3fcba6bd2ecd01eec0dee7f568a071c5b1dc57ad98673c1de55cc32708c373b11e72c38915f9d5ad50db998b506b4899b49339cb0031092841c34c447923795e59e5c3ed23f052f1504eb2cf65b3ec1cfde2e5b8706e94cfa634f81f624ba1e6548b360c81ff00fc867986e812caa46107b7c8b0724065965dd54b5dce44e00c61d9c2036351f4fc629fdc929de9ad3f1b870bbab2900e2acd8bb08bd0f362d011a74ce21b4"}, @NFTA_DATA_VALUE={0x4e, 0x1, "9d2df98653155e2946963942a1ab03f236e76cd22989f261e6ab0138bdfe5223f5797bbd6c1139deb4f6dfd2c176e8718e54a22820ae32d345d83de0d7b040b4c6cecdb38b3ae435e730"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x2b, 0x1, "1d17c782eeb4ba0917a2a3a1cc0a4a2fa1199f03c47212e68059dbc5acca153d0969c51e741b68"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x33}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "485e18b18da3473cb7e58e73"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xed}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "4b1a4246434c4b290b0a62a78e62544839b4ca1b0958533d1ba5e911749b20e18752c85c66ddd6609128afc01bffbef290ef0fbada5e9761dd41867c3074da1853d0e1b87b6c05bd72637f5fe472b60ef6da3687f1af59b749994725a1453002c1c5b6fb1a3d6469be762c7e312e0938e600af4dbef3d078bbc6c7eb539ae845b9ebcd537984a06e8386d5ebd418afd2c0a5c43d014f9f2cbf83e05af394368f85c368fadbd10a2908a8e2b38cbc01d165d08b45c5021859e5e4b25fa70f583e8b064fe390737ec4be23fb620b7b6739eb"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2c, 0x6, 0x1, 0x0, "27883ee3e020f4854a995966b9efa3f7a7e8719ec3c0b55ecc844b471509cf5f861280fed82273cc"}, @NFTA_SET_ELEM_USERDATA={0xa4, 0x6, 0x1, 0x0, "ffe23d5a2a4696cf21e1a2c064457c8093ed441629fcb1ee788395e36d38dd1100db2bc2a863d3d5452178f5a32e98a6fd2becd5881382573e6da6b44c1b01b2c42edcf22e6efe7d76d655ef58fe75c679967dc1de813c547295a53b414c6b2c72eb8664952a71c442997dabd10261bf8f46aaa3b062f505b6de27b3983e9a8b443f6f58e122ed9da2a889e0e698b9e69fab0137bb5c7da56f15979a43cea474"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3b35bd54}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x12a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1264, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "5faf67d52d0010aa2903316bf776465af16f56c67e72a4ef9fecd982d1fd2a3cab5aa68d0b252f5eccbab069b85f50c675bcab1dd12f9977f43662da"}, @NFTA_DATA_VALUE={0xfe, 0x1, "903a9c69ad6f07e8fe93e09d390ae294c4de001abf9f7326e3c3a1898a4787009111ff2e351ad02a932e8d78289a6b19a4265e908ff26885aebed1fbb89a748a631da7e3a7ad83f09bfee610db26fd56a6e7e61de534c045f2166606e9dc0956f8e89675cc8498ae9efb9f53a7aa4602e4a375b4708b4caede4af8510a86f05127da4fc5ed8f38e484cba5dbf9cbb6dfc49f76ba22913cbe8f8dddab0e18d4b1d63e3347a436c229298fbe077229034178fde5ddaa9e1acbbd041a1a869ab1fabda918a09f9b253ef492765af6589f3285adf7a5f6b4d8c1a92f96e44ccf6d73c794332427f10aa19e9db1adf058aaaad81d636115875d42812a"}, @NFTA_DATA_VALUE={0xb5, 0x1, "101eb2766bdac45f63d4c58a91bc516cbfd3d31a147f7269a78eda8a41ea6dd89a7bbd28cd58de0db2280311e16b69749e33b9890f1bb38a1132da8fb0e3f6e9be133bf62ad2c00cfa56228ffbd75aa3fec422353703f015fed36765adabe8c4fddac2d43164082ca8f09a5eab59fa9c9168fab4e3ec9c5f022bd2238a53da8e8cab52d3cdd6d51950db8f49d968b22f8aceed3da584add6629b7babdeb287f27ae7a5d9d47797b6ad4ae361cef3b7e833"}, @NFTA_DATA_VALUE={0x1004, 0x1, "bd1da7dabb8712969623712ad1e21291c39c86d0bc2ab8cd06fee93e411f947df93ce71ba34d1567e0dcbb8441ccab73061843bdb0e0dc33df8d80b1e250586e9a7d69b5b06b9b0286ae13069e3564c4ce6e579a6feb6afe79461bdae062ccbc56fb920876c7f16cb941ecd4e3c43e82a4d49f0520e4325ac39e18ed62176d44b78f83252e4d8dc61002aa59e9e7dbd663f4c9922a5625a0a1068f43d56e1e0923e6ff8449b6f6d2ebdd9a2ecfa43feceea9de70a16f8f40aca2fef48174a48aecf0497925a633598bad91962fcfb416308e90a4fbbdf66c7eb5eb3be2c6355c84d721d648e34ef3164c32b194ea297448d548ac57d1dc082eda61058b0d95bc8acd1351cd3dd849b0d1c9bd7e4225c94db9bcfa8165cd157b3998269a5c2ec06f0d94d8db421a0af5e14eae2cd0577802c4e1c2146f04f42c805375a7d2096a0393f6eecbc9b48e0a1ec1c85519138297293c7128da6fdc7b8394f1b03c503081d28871210a9c64bb235fbc797c870ab1e971ecffce6724f1663891ca979d002cd36b8351f052a52158d23d1454220fe25541311587f8389f2d660b6e70441e578df300b4599ed6b1c0b805aeaf327e6cf7ac8a1606076391beb1b5424f17a8937d8369b18cdd68da276026c2d952b23d14f35a5b9110a8f7be671aa54b823f2763681f54dfb4df2a92f1e166b4864156dafab1d21f3ef2f1db6e67e997da3f721b3dad5902b9a005089c3536ef15c1647a6772fd263874db18cc7da16adf84cc798ce085d53f5ca1278c6bf3713147114a9ddeb143f54995c3ce8b54b07e2ddb9d408ca1c7f7f76e14252c4a1f6abf174e7757bcbf819dc151cf7f5470c8d09f3f03f7f83b7105ffecae65d3c3cd14cc07a3459bdad7a263a461a0db0efa80479804153a14364801aceb7a5e750ba3186f911b642d243233a109b48e6dc2bc8c4b0bf19db0897ee6b2340441d334128caf2863eb1e57181dcc9a99687a6c8879ff0022510772c0a47d92947980d1bb7c3382a44ee4e6a006f315c23e2f1d0a41c13a22a8e95720aaa21750028122e533f1f59375797f56e6b9d5c65084bda928555f4367c9f129d08c093e0c2883c9e8518cdf1de942664303fc1da9db7a02b2aef48c183180c3216caffb4d558110135c1d879e7c41be118d636f3229cdb51f3221e5c200370c96c77563757e24c6032449975e7dcf25d1cf19b139dfdcf58c2ba044959508316f8a0f4ec27a3a168a5c39855cc650ec3f971348c201833d2161e07e87b5e5cc84b1538d713287fc45295a19843e0863c85422924d67df0e370f5d5de519bb2e50f4695fcea1ef5ae5c8bc33cb0c8d04027ba4e4409104b6e515204a6d8782133c7c881416ef851d71ebecfff1b92c6327dd0f5d2b1780fd8fe7b7d494a18908f9d9312a16613e005f83f24fa9a021f64e11ad86c1469f7a7327f2a9ed145031169ebf847582022aa1d5e0754a6f2c82e781414b8d24d017476bba3e6bfa511d8ea32abef7fb8db716a609501e29d9788289875547cf95a9737c7b7267525c6c50036ec923b96b239019e3f40500f228e7042f5efa50bd97e240d2a39a181ed52d6d0450a14fa0416ff49d9d6bcd09e34a3b08b0b8a2fe068f163dbf5a9c22f214cc0307b9f3499588bf4092c27dff7a90523ca73def60629985b6fbe07c367777ee816cb2b827f75cae661a1c66b67d7f2074becf96728f99e9c0b56e3d128cf1b0e077a70ea6d0be885abc25442ae5b89d1d64221070ccb57600271428012d1012576dd336ba996c21031b02b8d3bda9038ebf97d91dcb4c6a749000321e08a98215ee5af5592c299c8addc8442c6dfdb03827ffe10b7b2aa1f7317dbc30d1007a15bbcc5edf4d4bca0f0922529b5811a46569ee1505cf7950c8b1397549841a9ad989d669b5c89a680ff1ebe7a8422626c9bf4de1629379ef5d4bbdf629c2b5f0433b877e1aa6e86f1ff08ddd7f61d92a8bad2b1b5253f06481b6ceec912b50fa36550639b21263ad9edb3c9c5a347f773c363087a969c7a9a50392f989954105b6b22562b66387e31d1479afa10746909fba4b8eadb422fcf3fcaf249825078f6e36380aadfcebd36e1d7bbf2a522405f9a2792b4bc7329e06e2720a11ae960b2b8e96a90cb6f60f8f85661c8bc98233a5a4d5b345f2a8ca7ee934bee624b113625c6186330394099e409c8d3721834d6756805eab3e4149e7f8654a5868e986c44e1784ff7d6616a1e9eaa92057ae0fd741d24d5c6f35029ea4aaab5a953242ce7cca2d1665526ba071525a6c9895c8209ad076e329ef8d12fc053c18bee1e5ab3e41500c04685965a8baea791144f63cd05f58966211a3ad8beadefa0d0503e983a9b9d368f9f9b49fdfa86413b4d74f7e249be2258edf1f052d9808ab37ee415fef9baa3a83ab9daa038422719a7064b103e3f998a45986b72c9785ce744be1400aeccf1ca9c09a5fcab808e3600f3f27d937103d132993c9b99eb13e1f280cb396c3c0d3877330c95f7284a101d3b3697df70ca63cac0b6f019c9402b8039f575cfdaaa2a00fe49b50eb3b664525d232f3d416cded55be0c7daf1a28d164c50f64262f69c69c060c3c8f30110606ebe65f8851b4f3673eb512ecd7316a057caa788de7c990391ea15d7d690498c0026555e8f962d0c7fba1a47163161aaab67b9029a20cc57a6bdb4132a9166f190daa204dcb36a6608be264eabb7a8b5ab1092f3fa5e12c21accfdd86370cb16b6cd899af884cb9c1abed15292c7fad8e6126e8d9637d8e9ed00becd6db2fd201ad8f41522f242ae0f75ba12d47d762ddacec2f1d89e107c3491394abf95ef900f90c5c5c3fbf812b77694b5ce459de976445608b4a74eab104cf6514d231b65b5e3d3a402c887d2c76c2c3e908c6a7b785d9cb335b938959c0841fa3a3db9357beebe609b1cd9f940c93c0e91143f5b35c0b3ca0d102a05b723acba7013e2eca073e3ab0ee6208cd7e78174e3ec71d329581906b3e47c383eda4d29db659640fa9525dbe7f8f930f22535f44a21a18fa1c63ec88ec8e6c6e08982edc92e763820037d93c68e456ad72d0259a9b939c3368242f1fca324d474a768b85426a89639b84568bafdbe4cbc5567b381b6a4e7fe73705af15dab85a33fe4881c2c247ce29329ccb02530aa19bd6470495bc147d40efdf4e56987d8f88b1461a3e8bce9eae0c44c67f9b84b44e34f28fb9ff61e283a3c530c539b935ca5711b06f99302d1689e043b1d95309b632676ec00a20f7bb4dd9e47aaf341bd67a47e65aa2370c6888bcc4ccffec1011ed1ca47218267598c9d8b6265b8e39f4d74cc8cc715235da36434ddee42b33252bd87de621663a7d9d02fb8376d53896deeb9cef409ad09b12799c127af3cff2ef4066a06e5c0467064f0860209f77aa733e9baae740ea2c0f370256d9e32b7b85484805634b2991655e09a62e815db9af6056aba29a871ac8ac80d3be9a8bfd5c6263b6ac6f060d14113d544015026c22d4e43db32a50e53c1fff12e5a1b4fbd86fac97dd6dfe4aba5b3fd8c8cd767cdd08f01a05d62228603cab84fdf90872ed9c0295cae580a8dd4ceaa8acbc31842cbb2a9b6b6aceba1c524e7d7ffa6523e0813e2f1d279253fe6244c13f772315a209429d920bce87fc9f0808a5902b7677a88ebebd80e4f898a646a5d3c33624a59915026b182082f5251776a78606a33f333121ab09b77a3bc18dc1c8952f028a40abaf9d7cc578b7de2e8401a24cfa59c8f36297f720a96646d5309cd4b4531192e34133c51bef4e0f01d6ffb4ac0b6a5c4fdea09a9df669b00904f6345565472d4a87332e5368cc154d6baefcffd6d0fd9e1dc8d42f09ab33ebc89741882fcffa18bc1abc19596bd290cde8503755cc6777ff55ae46b4d1c50b8d7e54aa4d2ab40293fb5f6e3524f6c4242f753f46a277a484b7393f46578007ded244437ffe72de6c1e2d8104fe69fbc58c778288ff65d694eaeb5205c0cc682936d92e636b61430177eb51c4f0c96597cce113fa5ca79efeb2104bbd664af6a0863519ddbd92e71a8c5b2ef03c5f26e12a88126a17355215644d9cc34825eb5030dd515db5f0a3ca52d81f405b7e736614d24c626af900b6cf953812519c59ddb81c79c6413f239599a360a9662a12d41dace5a16fb504fc68a95ee4c804365c6439a983583329c131d575d339b68eed302a5a813ec4146bee6dabf16ac799c341e692dec16ceddeb8996f4283484566bc66337770369a86191f231fa87433b06d5ffaab9368115e3f40db56ecd41be470aacf309573b965df25f0d3942d9df3a58c2feea6f823461e3f5307f3d854c6785e42a0e161288bdc253b96153cbd3cda8ee4a55de4a28abf3ad08f24bfde4ecaebd407d318f9206e75350b2030a22d65425df0024dc2a3d5d439acfa11cff39a8fa7077abf28b1ff0c030b3c2607d39d5c0d3f2542d0be7f3207b91696a36a4b950031dff320c0f2e52c1ea39f40b2de38e7ef6bac9692c29d1c35b259a5fe6ee493f16fd0fde0167e9cf950acd0e69853d18b3b85b87015892b530adf7adde26bdce9b68955d4cbe850b195c67757825f2de4c1e973b1e8b3e563cf984b9a668de1eca7b4cf84d6d843d6895878e23a70ba450a5477ce4c340e712fa94a3265196b6507e346b2f9dd364407f5d91219c60f165ddffaed94328dbce9e1994cefa562ffec4515eb1a4e49ff3bdea1ec07018e119afa1d4347f67ea768a60aa68c12e4b10cd4e3f73906efa254304d5da27438febcd5abf57fddab5a02e454d1a3a588ff68a7d17adc141b902d02f0a238de0ea579592b46df8111027538ec944a20e40da4fcd7baa9d238c8857fbfd9437af96c9322f597ac44a91de808370c93f232449609ab49a30e5b8280a8fa2b3388c2508456ea8a3c446ed858778efb6faabee9c08e9a1cbdb14d7378f530abbb34c991d95954a7adeb28ab30082d8c2acfc297dec19f424720c636ff287604b6e054232cca4a69283782a9019b2d968e20122afb0e50e077aa19d7766506af6b0e9cc49930a577886fb06ffb96e3093d73474edb724be85a3f23f88482a5da328184236cd924cd858a90cd4781455d533b78fe47358137626a15271b9b57770687bd78191e322337155cdc767014be0772a4ce71753b8b1b70b03f87a0d7fa5dd2942ff78cedf0b9301b0e6981c869007a7ef006a2e4086c1a17273f3375c7222fc541f1468796f579615c8763cd8ac41881cd848c43630de250ca4d8a369d4ef1e3359159ad811edcba5694509b94bbdb8f3c10ac08ea974050abff604a2b577de9e42b904c1a4fc56a64091c607c41bb65a885fa1a478cd909cb4b70bb0cc411be2d44755462e063567890a527e5e94ad1c3f32aaa60e7c430d256d282c5e960ab4dafb37e656aa2fd23b7f143e91b47f7534eee057160d820453573ed66696a5808374e24339c40a3f391d01d0b68146e2bd83c5efaa6c8611925c06380ce0d818252bf03cd6c71dc45d166cebd9071edc55b5fd02b006d5964d14f832e84178802ad6c62cfbda82d9a2120ecc69fc0d180740c78083e033056ed0b6dd06a8e8c19ea24e62bfeeac17fcd4ad901d906e0d115d53ec19ce51bb68cd5c16ffffd163da33082c341b83c52aea25bd942d7f04cdc63d38a95396de75885f2d372c98008953bf3e76ba842c5e4ecf4954c3c8a8ee1034bf5ed878df0e3c8f5a4f73b28f8cb7a91c68b36f7f1d4837c4efef7565436f0bef8703be6d6208ad15b6dab9b561adeb4e6a5569d894ae4cef270"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x16c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "87ab79435f0182cf82f959b317c4117e7cd46899406e4ee31553b053babc7908ac850ede9fa9db00457c0a20cb3fe12de8ade471dcd42b927b26bc1f8c37fce7ab0222c84b26f6019dea9410256f5a8c75fc27651f02811b1f937964ddba828c5ecbc7ea238c6655cfc1086fc429f35847ab1e3972ceaada084844edbe1ebd812bc4a0838d4b62fcc835381940524c2fe73010090a1d76a9ff44eec13181c4808474fb723730bbf612c8e81ac22bf9d49db39a2cf1feb2d43282"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x55f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2c3310304abc5c62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x51, 0x6, "a29715e563ad8c28a6ff8cd663d07fa048ec3a078c3ee929f6020af37b8ba473ff0b714e4f6849ca9fd24d4062fd946ab8e381b69e3ad36f2f1a94e2b244324caf19366ba951125a49579c1b1c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000003ac0))
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
fstatfs(r7, &(0x7f0000003b00)=""/173)
ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000003bc0)={@null, 0x7, 'nicvf0\x00'})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
write(r7, &(0x7f0000003cc0)="14db39095aa8d68adcf990be828687be8e3fd70ba45247a98ad5ac45d3586489ac2911b9d4827ee58d3ea18e6c8c907615ecad8f00edb91b58531e3b54adff1c16b9e9ebe15aa0fe092d337bfd1e29fed6e3481540b2ebc29b5758c6bc1f8e49c62054ecef6f659e9df4f857ab6ffb4ab1e7a12c47709c6b9697717578fd1c9775b4fa3d2b55608a57d45428ad5feb2bb5e7c2383e527b053bbb6f9955f56bd479454a6e00182166c9433adda40c91ff79a0fe47eafd829a67e8c6f01dd8c2fc6fd723463980eeb2312550125900799631d00d10b9d0847f09f75704ae3ce7", 0xdf)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000003dc0)='/proc/asound/card0/oss_mixer\x00', 0x4000, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000003e00)={{<r9=>0x0, 0x5, 0x0, 0xc25, 0x5, 0xb8, 0xa0, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x1ff, 0xfffffffffffffff7, 0x100}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000003ec0)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000040c0)={{<r11=>0x0, 0x7, 0x4, 0x7, 0x7, 0x7, 0x40, 0x6, 0x5, 0x14000, 0x10001, 0x5b, 0x7, 0x100000000, 0x2}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000050c0)={<r12=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f000010c800)={0x8, [{r9, r10}, {r11, r12}], 0x1, "93940f4a3ea81c"})

4m53.650213699s ago: executing program 1 (id=1050):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x31, 0x67, 0x0, 0x8, 0x2, 0x0, @empty, @empty}, {0x14, 0x42, 0x0, @loopback, "32de7933fd13294453ab81c9835462aa750d7ae91f"}}}}}}, 0x43)
clock_gettime(0xa00, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000003c0)=0x800000001, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xd3, 0x6, "f10046faf4e4a2adbba124986ec9d120a28dedae407b0c753cd42bee785133d69222d2e6b81729c9d9f5de97cc160f71b76969cf5c74f14dcf22f1f23ab2f02b1413ed410912c2c9d50fe1320d8492a99d378addc110660daf9f9f9e3a966dacfd67f19cc1f36c15d2afeea522ce7eaab76bc70088d8715f832361073ad66b5af1b4e027df1cb5eedc06e43515f5ffc9c3885ad79e6672e8afdbbf08a7a18faa6c9e1d3f1fd54031e73af08fe08f124c0aa690c6bc218b6389c199e33d811548331ae3a8fd9caa16073e49b9fb4b09"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xdb, 0xc, "487a7542f023329a58a40569923e04b5eaab15a7b2c8b571f6ebf8d41244826d3d904fd339a48d45b13a0eac6b36cee38ca6bb61f9bbc6c2a62226aea253293a184ae783503bf6b8d47e606c157ef4e392e8be7dd756b9eb113941a0bfbc67121467b53d254cd435a758e38175a451e19b1d5ea7ab50c69a5e3ebb0fe5d84fe7c2f634462957fef5cd8573aba95989d34a280407fc596bff75aa8243412d264141ca720ae3b9af9a7ea6336ec9966508d4dde3c886507e0772792a1ace0c0f3541d0e4b5f1258a4edd4a884bb40bd38ab42bfd08315808"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd8e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d002900f8ff07009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

4m53.520619435s ago: executing program 1 (id=1052):
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x0, 0x5, 0xdc}, 'syz1\x00', 0x43})

4m51.82757774s ago: executing program 1 (id=1062):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b399, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0x5, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)

4m51.523204098s ago: executing program 1 (id=1063):
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)

4m41.896909587s ago: executing program 3 (id=1089):
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmsg$can_raw(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2}, 0x20)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x44, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0x1, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x8001, 0x8, 0xfffffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x1, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x10009, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x100, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x404, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x8, 0x3, 0x0, 0x2, 0x2, 0xc, 0x4, 0xb0f, 0x8, 0x3, 0x800, 0x8, 0x9, 0x3, 0x202d, 0xf4, 0x4, 0xe, 0xfffffffc, 0x6, 0x2ee, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xf1, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x1fffe1, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x7, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)

4m38.845249788s ago: executing program 3 (id=1101):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x801)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

4m38.804937686s ago: executing program 3 (id=1102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'io'}, {0x2b, 'memory'}, {0x6, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'cpuacct'}]}, 0x29)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x6004}, @void, @ipv6=@generic={0xa, 0x6, "5ff58d", 0x204, 0x2f, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x87, 0x6, 0x4, 0x3, 0x7, 0x50, 0x4f9c, [@dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x1, 0x12, 0x4, 0x9, 0x1, 0x20, 0x9, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x32, 0x6, 0x1, 0x6, 0x0, [@mcast1, @local, @loopback]}, @hopopts={0x2, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x0, 0x10, 0x4, 0x8, 0x5, 0x8, 0x7fff, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "36fd4c92adac4f609a445dd904a6c157d49206a8410603b7282f915c60fef85b57e1e972ace1a28f31ece689ba8e763a991b290538ff581b99b3662f5eedc585d5bee713b368aba60eb095520632cbf082a1c17e589c4a2d2358e1ba"}}}, 0x230)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43af5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

4m38.645958942s ago: executing program 3 (id=1103):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getsig(0x4202, r2, 0xa, 0x0)
r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r3, r3, 0x0, 0x7f03)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000b384ff00000000000000000000ffffe0000002ff020000000000000000000000000001"], 0x14c)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000100))

4m38.620742138s ago: executing program 3 (id=1104):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setuid(r3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r3, r6}}, './file0\x00'})

4m38.288342192s ago: executing program 3 (id=1107):
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x1f, 0x8c, 0xea, 0x10, 0x4fc, 0x235, 0xdfc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x2, 0x2, 0xff, 0x36, 0xf4, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)=<r0=>0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f00000000c0))
timer_getoverrun(r0)

4m38.156961376s ago: executing program 32 (id=1107):
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x1f, 0x8c, 0xea, 0x10, 0x4fc, 0x235, 0xdfc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x2, 0x2, 0xff, 0x36, 0xf4, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)=<r0=>0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+10000000}}, &(0x7f00000000c0))
timer_getoverrun(r0)

4m35.873413173s ago: executing program 33 (id=1063):
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)

9.603572451s ago: executing program 2 (id=2211):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10)

8.274916838s ago: executing program 2 (id=2213):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
write$uinput_user_dev(r0, 0x0, 0x0) (fail_nth: 1)

6.92108808s ago: executing program 2 (id=2222):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r1, 0xe37e6000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSBRK(r2, 0x5409, 0xfd)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a2"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xa)
ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000040)={0x1, 0x100, 0xffffffc0, 0xd, 0x80000009, 0x7f, 0x8001, 0x7fff, 0x5, 0x9, 0x5, 0x7fff8, 0x2, 0x7f})

5.943724573s ago: executing program 4 (id=2223):
close(0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x4e22, @multicast2}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
capset(&(0x7f0000000340)={0x20071026}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
brk(0x689d80000000)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x0)
sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80000000}, 0x1c, &(0x7f0000000100)}, 0x800)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = gettid()
r5 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8)
getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=<r9=>0x0)
r10 = epoll_create1(0x0)
sendmmsg$unix(r2, &(0x7f0000000880)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)='I\b', 0x2}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee01}}}], 0x20, 0x10}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x44000}}, {{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="f059e299d8b577af07389d7de4becba51ff8cd96cdaec0e61504cb2180a403efcd7cf02442c18b11a957dea85989ff0163e72b3ae515ddf44de8a9ba95195d2dc1f16e31e077e667aa86a03458816bdbc00952dcdd3bad8f273284ea6f9b55a7f22f02d97e8c1e3eadfe4a13d1b26efae911fd5be296a2961a75d08a5fbaadbffb4ae9e85f3f5a8b2ccc9eb9f2425259dc9da73b58b952f7657458a0b977dfc74bc993f35fb6339896e0d4284e0b1d687e4f7a7f966dac3755cc13f5", 0xbc}], 0x1, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x38, 0x4008000}}], 0x3, 0x80)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000600)={0x40, 0x14, 0x29, "b3ebb369f10e25b7002bfa53d149d714958f8550a1ab36aaefb341248e92888419f651fa18100bd39d"}, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000000100)=ANY=[@ANYBLOB="20001debe4bf044adc220400000010f30900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

5.183471236s ago: executing program 2 (id=2225):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="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", 0x15d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002e000100000016000000000008000085", @ANYRES32, @ANYBLOB="0b000280976b640868603000050001"], 0x2c}], 0x1}, 0xcc000)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0)
close(0x3)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7"], 0x24}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x1ca84765ca243f91)
syz_usb_disconnect(r3)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x0, 0x5, 0xdc}, 'syz1\x00', 0x43})
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/uinput\x00'}], 0xa, "3c6bc8587b5db4ab5193af465db7bc5361d49fd442e292339e9f1607bfc7ab037ba92b37c3f90177b1c9631d3d6803fb76fa7dfa8fb48ebad76b8f4028ce7251518e2fa8885b364c84538bb35d3d0f20ac5cb81226f0b382180811806b72d392d0677ea5cef8223c074de366e34d22b3eaceface20425cbd869bd558773889220006af4915966640a3df514e0e1572cae8b044a21e74b1b0a044a5054c012e09001b2ab578ffccc0b2c2fce342385081ac5f9aaf94b65f494cfefa82b175be79d1167371ca49425f66af4e"}, 0xe3)

4.990120514s ago: executing program 0 (id=2227):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r0)

4.961393368s ago: executing program 0 (id=2228):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)

4.703355624s ago: executing program 0 (id=2229):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={<r1=>0xffffffffffffffff}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
close(r1) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) (async, rerun: 64)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async)
close(r4) (async, rerun: 32)
getpeername(r3, 0x0, 0x0) (async, rerun: 32)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet(0x2, 0x6000000000000001, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (rerun: 64)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@remote, 0xfffffffd, 0x1, 0x3, 0xf, 0x81, 0x7ff}, 0x20) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x1, r8}) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
write(r3, &(0x7f0000000100)="29fa996c2ae2b43160d7bf52af7cdc6b160aaefc1399c18422836f3c3319358eefcba683ee4b9100f737efdc4f334ebb89521d28a2fa29e30b40fde0d6ef3db1fded02aa368df0fd7cf30ae2341e480ba74922a4e452f4dee95e268d208cf4ff23d4a5f232f381f8620a18d55032e5094e58bd37d32209993acb63b0774cfa3426c5ea99316a7ce83f0d497417e69f577820c57ea166016eab66aa430dca301f346b7a1703a1b671128648040d95ec0119cdd2ea25b30c8f9d4d361c2a2a51d9fded7c30a6f6f47421d90d71eb813f7906", 0xd1) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8)
getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

4.551062705s ago: executing program 0 (id=2230):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x15c00000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000017000000040000002200", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

4.516490443s ago: executing program 0 (id=2231):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
write$uinput_user_dev(r0, 0x0, 0x0)

3.830903341s ago: executing program 4 (id=2233):
r0 = socket(0x10, 0x6, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

3.83042365s ago: executing program 4 (id=2234):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x582, 0x0, 0xaf}]})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000080)={0x300000000000000, 0xfec00000, 0x0, 0x1, 0x12})
r5 = dup(r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x6fd3041c41726615, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e24, 0xfff, @loopback, 0x101}, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @private=0xa010100}], 0x68)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x6}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r12 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSWINSZ(r12, 0x5414, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x3c, r11, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4b2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4)
close_range(r9, r8, 0x0)
listen(r8, 0x8)
ioctl$sock_SIOCINQ(r8, 0x541b, 0x0)

3.703367131s ago: executing program 4 (id=2235):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
write$uinput_user_dev(r0, 0x0, 0x0)

2.146439708s ago: executing program 2 (id=2241):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x15c00000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000017000000040000003f00", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

2.069630157s ago: executing program 2 (id=2242):
close(0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xc, 0xc8, {0xc8, 0x9, "97582cd523188cf01ea5fbf544f1c05a784131b0c7c7ce17f096e1f7dbf656cd465d30aaa1045a65d0d979f54b67427b8e759ec6dcab3b4f605e14426313ffd69c59da84e694ff5ff3bba9fe04fbe71592e0ea81fb633f1df1bc1cee598fc78657900f933aab6c8daa0674b5039a9c50e9a74742ef23e7c972ca7505ea2393c5a0a6a0d8005ab73bd47303d03daae2124d39baa6e098fc0ec95a68e151ec3dd2c8d8daffdca0cadb605bf33883055c0650e031f2fe6edb7636bf116769c2c1fb02fa22fe22df"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x60, 0xe, 0x5d, "c8b381607c662d2b64208d3a48a23ffdb1e9ce7a4b06d87018dbff12ec94b1ea86b8c4f682c368f98da7db7e1e2368e4ad8fad4c66176498e72bf13a3d5d33d7491b039414b0d5cbc197e6b0b0df36e521510c92024ebd37c1f1873a49"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0xc0, 0x5, 0x4, "c09b9b0f"}, &(0x7f00000002c0)})
capset(&(0x7f0000000340)={0x20071026}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000d00)={0x84, &(0x7f00000007c0)={0x40, 0x12, 0x7, "a71985969ff6c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200), 0x0, 0x2)
read$hidraw(0xffffffffffffffff, &(0x7f0000000640)=""/165, 0xa5)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r7=>0x0, 0x7800, 0x20, 0x5, 0x7b, {{0x1d, 0x4, 0x1, 0x8, 0x74, 0x64, 0x0, 0x18, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, {[@end, @timestamp_addr={0x44, 0x4c, 0xd4, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010102, 0x3}, {@remote, 0x80000000}, {@broadcast}, {@multicast2, 0x5}, {@loopback, 0xc}, {@rand_addr=0x64010100, 0xc}, {@empty, 0x14e}]}, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x8, [{@multicast2, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}]}, 0x7c}}, 0x20000094)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000600)={0x40, 0x13, 0x29, "b3ebb369f10e25b7002bfa53d149d714958f8550a1ab36aaefb341248e92888419f651fa18100bd39d"}, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB="200054b5e768267dfb3a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.058858478s ago: executing program 4 (id=2243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008855)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xa2a80)
syz_open_dev$sg(&(0x7f0000000280), 0x7ffc, 0xd802)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2101e3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x63a, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0)
r4 = socket(0x11, 0x2, 0x1)
setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000680)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x801)
recvmmsg$unix(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0)
setsockopt(r0, 0x9, 0x5, &(0x7f0000000340)="ccde9defac77c533cd4301e1acbd2e69153f385d128474dbb84d36bb", 0x1c)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0xfffb}, &(0x7f0000000300)=0x8)
syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e780cc08c0070515c5b80102030109023400010000800009040000038e4ee2000905000000041a06010905010300021007c109050c04400003030f07059acb"], 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x4)
ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000040)={0x4, 0x200})

1.385051668s ago: executing program 0 (id=2244):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10)

1.154426825s ago: executing program 5 (id=2246):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7f, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(0xffffffffffffffff)

1.014645555s ago: executing program 5 (id=2247):
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000d00)=""/266, 0x10a}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4057, 0xc35}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002100)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff004)
close_range(r1, 0xffffffffffffffff, 0x0)

780.461579ms ago: executing program 5 (id=2248):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async)
ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

678.967026ms ago: executing program 5 (id=2249):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r1, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x100, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@typed={0x8, 0x2a, 0x0, 0x0, @str='*/^\x00'}, @typed={0x7, 0xc1, 0x0, 0x0, @str=',\xad\x00'}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0x10, 0x803, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046814}, 0x408c0) (async)
recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/237, 0xed}, {0x0}], 0x2}, 0x6}], 0x1, 0x12040, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x84, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x17}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x21}}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xfffffffffffffc1a}, 0x1, 0x0, 0x0, 0x404c000}, 0x800) (async)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x7, 0x2, 0x9}) (async)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000040)={0x3, r10, 0x5, 0x80000001, 0x8, 0x1fd, 0x1}) (async)
r11 = dup(r2)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)

578.625203ms ago: executing program 5 (id=2250):
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="e30b070000003131392cdaab4a"], 0x0, 0x0, 0x0, 0x0}, 0x0)

559.630698ms ago: executing program 4 (id=2251):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0x4, 0xfffffff9}, 0x14)
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x300e})
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x40, 0x2, 0x4d, {0x4d, 0xc, "ab001ba47a23a59ea3e68895450de7900436f454ab531f53ad1ec5d9c8109615765e7dc3d866f5f4c765c1232580fede326fec44345477d1b21a694ec32295584568a1e73ff3d3c6377329"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x0, "1dd9"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_4={0x3, 0x1, 0x8, "b07c81ff"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x504}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0xc, 0xc0, "a1caf36944245109bd53dc59250a91358b21aceb2abd48704a0853dd56b8225e2589df4486e902069a90cf97925e8774470fdfd78775da39459e02e7edac4835f9cad4c374b6d43abb9570c07d1cd52ede3d240ee6998295cef9be46cf5fd7609ea54caff5bbbe02d99a19f57eb553f41eae9141739a3fb7af7b6faac8cef9c8dcb75bf588ead0df5bf0db1e7ac00f14c2b82e906f19e28028bf16046f6dd3d132ee22042c2193a2c01618906edaf0915adfd7484c9745815b35d5b27da78bc4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x5d, "1c025dc67e305d81552a305c4d02d6eddda1439eeba3283bf1acfecfde3f7b30a374e2581517edd043a2a6380d2f22748377e434f086fc6da0752a903a77d8d01605a4995d49c25dc974f7c9e309b4fc9829149649e6b6a846ce5d93fa"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xfd}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x0, 0x5, 0xdc}, 'syz1\x00', 0x43})

0s ago: executing program 5 (id=2252):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x15c00000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000017000000040000005500", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

kernel console output (not intermixed with test programs):

946393][T20998] syzkaller1: tun_chr_ioctl cmd 1074025677
[  485.989856][T20998] syzkaller1: Refused to change device type
[  486.015315][T21021] loop5: detected capacity change from 0 to 7
[  486.022576][T21021]  loop5: [POWERTEC] p1
[  486.026967][T21021] loop5: p1 size 20971520 extends beyond EOD, truncated
[  486.049883][T20976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.061856][T20976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.070281][T20975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.080341][T20975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.106873][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  486.268620][  T799] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  486.388475][ T1227] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  486.398636][  T799] usb 5-1: device descriptor read/64, error -71
[  486.551694][ T1227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.561964][ T1227] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  486.571170][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.582905][ T1227] usb 3-1: config 0 descriptor??
[  486.602231][ T1227] pwc: Askey VC010 type 2 USB webcam detected.
[  486.648492][  T799] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  486.798511][  T799] usb 5-1: device descriptor read/64, error -71
[  486.919318][  T799] usb usb5-port1: attempt power cycle
[  486.996825][ T1227] pwc: recv_control_msg error -32 req 02 val 2b00
[  487.004150][ T1227] pwc: recv_control_msg error -32 req 02 val 2700
[  487.012192][ T1227] pwc: recv_control_msg error -32 req 02 val 2c00
[  487.019849][ T1227] pwc: recv_control_msg error -32 req 04 val 1000
[  487.026871][ T1227] pwc: recv_control_msg error -32 req 04 val 1300
[  487.034117][ T1227] pwc: recv_control_msg error -32 req 04 val 1400
[  487.041319][ T1227] pwc: recv_control_msg error -32 req 02 val 2000
[  487.048225][ T1227] pwc: recv_control_msg error -32 req 02 val 2100
[  487.088571][  T926] usb 6-1: reset high-speed USB device number 124 using dummy_hcd
[  487.258509][  T799] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  487.259647][T21033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.272171][ T1227] pwc: recv_control_msg error -32 req 02 val 2500
[  487.278083][T21033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.300142][  T799] usb 5-1: device descriptor read/8, error -71
[  487.309526][ T1227] pwc: recv_control_msg error -71 req 02 val 2400
[  487.317955][ T1227] pwc: recv_control_msg error -71 req 02 val 2600
[  487.326741][ T1227] pwc: recv_control_msg error -71 req 02 val 2900
[  487.335674][ T1227] pwc: recv_control_msg error -71 req 02 val 2800
[  487.343014][ T1227] pwc: recv_control_msg error -71 req 04 val 1100
[  487.350400][ T1227] pwc: recv_control_msg error -71 req 04 val 1200
[  487.359856][ T1227] pwc: Registered as video103.
[  487.367777][ T1227] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input100
[  487.400431][ T1227] usb 3-1: USB disconnect, device number 36
[  487.548566][  T799] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  487.569910][  T799] usb 5-1: device descriptor read/8, error -71
[  487.678983][  T799] usb usb5-port1: unable to enumerate USB device
[  488.338537][  T926] usb 6-1: device descriptor read/64, error -71
[  488.478472][  T799] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  488.578654][  T926] usb 6-1: reset high-speed USB device number 124 using dummy_hcd
[  488.628497][  T799] usb 3-1: Using ep0 maxpacket: 8
[  488.634075][  T799] usb 3-1: no configurations
[  488.638944][  T799] usb 3-1: can't read configurations, error -22
[  488.729537][  T926] usb 6-1: device firmware changed
[  488.735232][ T5896] usb 6-1: USB disconnect, device number 124
[  488.768484][  T799] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  488.878497][ T5896] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  488.938446][  T799] usb 3-1: Using ep0 maxpacket: 8
[  488.944032][  T799] usb 3-1: no configurations
[  488.949689][  T799] usb 3-1: can't read configurations, error -22
[  488.956144][  T799] usb usb3-port1: attempt power cycle
[  489.030265][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.041428][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.051284][ T5896] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  489.060801][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.075458][ T5896] usb 6-1: config 0 descriptor??
[  489.258462][  T926] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  489.298523][  T799] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  489.299453][ T5896] usbhid 6-1:0.0: can't add hid device: -71
[  489.313168][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  489.323917][ T5896] usb 6-1: USB disconnect, device number 125
[  489.329154][  T799] usb 3-1: Using ep0 maxpacket: 8
[  489.337724][  T799] usb 3-1: no configurations
[  489.344435][  T799] usb 3-1: can't read configurations, error -22
[  489.388493][  T926] usb 5-1: device descriptor read/64, error -71
[  489.488525][  T799] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  489.508971][  T799] usb 3-1: Using ep0 maxpacket: 8
[  489.514531][  T799] usb 3-1: no configurations
[  489.519672][  T799] usb 3-1: can't read configurations, error -22
[  489.526204][  T799] usb usb3-port1: unable to enumerate USB device
[  489.628555][  T926] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  489.758585][  T926] usb 5-1: device descriptor read/64, error -71
[  489.868776][  T926] usb usb5-port1: attempt power cycle
[  490.088574][  T799] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  490.208518][  T926] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  490.229203][  T926] usb 5-1: device descriptor read/8, error -71
[  490.258957][  T799] usb 6-1: Using ep0 maxpacket: 8
[  490.268918][  T799] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  490.283784][  T799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  490.295507][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  490.308583][  T799] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  490.321816][  T799] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  490.332398][  T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.354094][  T799] usbtmc 6-1:16.0: bulk endpoints not found
[  490.468473][  T926] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  490.491299][  T926] usb 5-1: device descriptor read/8, error -71
[  490.608808][  T926] usb usb5-port1: unable to enumerate USB device
[  491.379228][T21175] loop5: detected capacity change from 0 to 7
[  491.392265][T21175]  loop5: [POWERTEC] p1
[  491.398294][T21175] loop5: p1 size 20971520 extends beyond EOD, truncated
[  491.486592][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  491.858461][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  492.021526][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  492.029736][ T5896] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  492.037937][ T5896] usb 3-1: config 0 has no interface number 0
[  492.044476][ T5896] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  492.057821][ T5896] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  492.067138][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.079636][ T5896] usb 3-1: Product: syz
[  492.083838][ T5896] usb 3-1: Manufacturer: syz
[  492.093536][ T5896] usb 3-1: SerialNumber: syz
[  492.106571][ T5896] usb 3-1: config 0 descriptor??
[  492.123275][ T5896] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  492.134103][ T5896] em28xx 3-1:0.132: Video interface 132 found:
[  492.338635][  T799] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  492.500284][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.511262][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.521090][  T799] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  492.521137][ T5896] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  492.530530][  T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.551870][  T799] usb 5-1: config 0 descriptor??
[  492.773157][  T799] usbhid 5-1:0.0: can't add hid device: -71
[  492.779440][  T799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  492.799203][  T799] usb 5-1: USB disconnect, device number 12
[  492.846565][ T5895] usb 6-1: USB disconnect, device number 126
[  493.152792][ T5896] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  493.170077][ T5896] em28xx 3-1:0.132: failed to read eeprom (err=-5)
[  493.176923][ T5896] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  493.238822][ T5896] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  493.246658][ T5896] em28xx 3-1:0.132: analog set to bulk mode.
[  493.254243][  T926] em28xx 3-1:0.132: Registering V4L2 extension
[  493.268842][ T5896] usb 3-1: USB disconnect, device number 41
[  493.279059][ T5896] em28xx 3-1:0.132: Disconnecting em28xx
[  493.308805][ T5895] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  493.386409][  T926] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  493.393868][  T926] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  493.401103][  T926] em28xx 3-1:0.132: No AC97 audio processor
[  493.408034][  T926] usb 3-1: Decoder not found
[  493.413649][  T926] em28xx 3-1:0.132: failed to create media graph
[  493.421831][  T926] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  493.430809][  T926] em28xx 3-1:0.132: Remote control support is not available for this card.
[  493.439573][ T5896] em28xx 3-1:0.132: Closing input extension
[  493.450138][ T5896] em28xx 3-1:0.132: Freeing device
[  493.468943][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  493.476312][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  493.488690][ T5895] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  493.498052][ T5895] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  493.507318][ T5895] usb 6-1: Product: syz
[  493.511726][ T5895] usb 6-1: Manufacturer: syz
[  493.516333][ T5895] usb 6-1: SerialNumber: syz
[  493.618520][  T799] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  493.768951][  T799] usb 5-1: Using ep0 maxpacket: 8
[  493.774929][  T799] usb 5-1: no configurations
[  493.780094][  T799] usb 5-1: can't read configurations, error -22
[  493.788826][ T5895] usb 6-1: Handspring Visor / Palm OS: No valid connect info available
[  493.797224][ T5895] usb 6-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  493.805997][ T5895] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  493.813916][ T5895] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[  493.908461][  T799] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  493.948457][ T5888] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  494.058443][  T799] usb 5-1: Using ep0 maxpacket: 8
[  494.064494][  T799] usb 5-1: no configurations
[  494.069200][  T799] usb 5-1: can't read configurations, error -22
[  494.075689][  T799] usb usb5-port1: attempt power cycle
[  494.098443][ T5888] usb 3-1: Using ep0 maxpacket: 32
[  494.105213][ T5888] usb 3-1: config 0 has an invalid interface number: 230 but max is 0
[  494.113530][ T5888] usb 3-1: config 0 has no interface number 0
[  494.119895][ T5888] usb 3-1: config 0 interface 230 has no altsetting 0
[  494.128845][ T5888] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  494.129878][ T5895] usb 6-1: palm_os_3_probe - error -110 getting bytes available request
[  494.138139][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.147391][ T5895] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  494.155891][ T5888] usb 3-1: Product: syz
[  494.166674][ T5888] usb 3-1: Manufacturer: syz
[  494.167286][ T5895] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  494.172178][ T5888] usb 3-1: SerialNumber: syz
[  494.194923][ T5888] usb 3-1: config 0 descriptor??
[  494.195634][ T5895] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  494.205276][ T5888] ums-usbat 3-1:0.230: USB Mass Storage device detected
[  494.224440][ T5888] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  494.418478][  T799] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  494.448954][  T799] usb 5-1: Using ep0 maxpacket: 8
[  494.454579][  T799] usb 5-1: no configurations
[  494.462056][  T799] usb 5-1: can't read configurations, error -22
[  494.484059][T21332] loop5: detected capacity change from 0 to 7
[  494.492300][ T5961]  loop5: [POWERTEC] p1
[  494.496765][ T5961] loop5: p1 size 20971520 extends beyond EOD, truncated
[  494.531194][T21332]  loop5: [POWERTEC] p1
[  494.536644][T21332] loop5: p1 size 20971520 extends beyond EOD, truncated
[  494.596586][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  494.611631][  T799] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  494.641609][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  494.653905][  T799] usb 5-1: Using ep0 maxpacket: 8
[  494.660197][  T799] usb 5-1: no configurations
[  494.667582][  T799] usb 5-1: can't read configurations, error -22
[  494.683834][  T799] usb usb5-port1: unable to enumerate USB device
[  495.960993][  T799] usb 6-1: USB disconnect, device number 127
[  495.977746][  T799] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  496.015457][  T799] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  496.036913][  T799] visor 6-1:1.0: device disconnected
[  496.338463][  T799] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  496.478663][ T5888] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5
[  496.488445][  T799] usb 6-1: Using ep0 maxpacket: 8
[  496.498760][ T5888] usb 3-1: USB disconnect, device number 42
[  496.505780][  T799] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  496.523222][  T799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  496.535367][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  496.546777][  T799] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  496.560114][  T799] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  496.570425][  T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.584487][  T799] usbtmc 6-1:16.0: bulk endpoints not found
[  496.808596][ T5888] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  496.968618][ T5888] usb 3-1: Using ep0 maxpacket: 32
[  496.976979][ T5888] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  496.985346][ T5888] usb 3-1: config 0 has no interface number 0
[  496.991625][ T5888] usb 3-1: config 0 interface 12 has no altsetting 0
[  497.000738][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  497.009882][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.017868][ T5888] usb 3-1: Product: syz
[  497.022134][ T5888] usb 3-1: Manufacturer: syz
[  497.026722][ T5888] usb 3-1: SerialNumber: syz
[  497.033470][ T5888] usb 3-1: config 0 descriptor??
[  497.652728][ T5888] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  497.661537][ T5888] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  497.669752][ T5888] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  497.677506][ T5888] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  497.690394][ T5888] usb 3-1: USB disconnect, device number 43
[  498.212669][T21416] veth1_to_bridge: entered promiscuous mode
[  498.219669][T21416] veth1_to_bridge: left promiscuous mode
[  498.488502][T21386] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  498.488766][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  499.035464][ T5916] usb 6-1: USB disconnect, device number 2
[  499.384199][T21386] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  499.390345][T21386] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  499.399754][T21386] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  499.405895][T21386] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  499.413557][T21386] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  499.420727][T21386] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  499.428302][T21386] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  499.486678][T21442] loop5: detected capacity change from 0 to 7
[  499.495642][T21442]  loop5: [POWERTEC] p1
[  499.500558][T21442] loop5: p1 size 20971520 extends beyond EOD, truncated
[  499.556231][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  499.678495][ T5943] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  499.698604][ T5916] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  499.818607][ T5943] usb 3-1: device descriptor read/64, error -71
[  499.858477][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  499.865179][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  499.876348][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  499.886417][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  499.897238][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  499.910323][ T5916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  499.919702][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.936971][ T5916] usbtmc 6-1:16.0: bulk endpoints not found
[  500.058473][ T5943] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  500.188451][ T5943] usb 3-1: device descriptor read/64, error -71
[  500.299302][ T5943] usb usb3-port1: attempt power cycle
[  500.569321][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  500.638580][ T5943] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  500.659206][ T5943] usb 3-1: device descriptor read/8, error -71
[  500.698519][ T5916] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  500.850968][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.861506][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  500.874068][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.895012][ T5916] usb 5-1: config 0 descriptor??
[  500.898476][ T5943] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  500.908194][ T5916] pwc: Askey VC010 type 2 USB webcam detected.
[  500.919355][ T5943] usb 3-1: device descriptor read/8, error -71
[  501.028957][ T5943] usb usb3-port1: unable to enumerate USB device
[  501.305946][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00
[  501.313187][ T5916] pwc: recv_control_msg error -32 req 02 val 2700
[  501.320298][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00
[  501.327341][ T5916] pwc: recv_control_msg error -32 req 04 val 1000
[  501.334456][ T5916] pwc: recv_control_msg error -32 req 04 val 1300
[  501.341927][ T5916] pwc: recv_control_msg error -32 req 04 val 1400
[  501.349246][ T5916] pwc: recv_control_msg error -32 req 02 val 2000
[  501.356113][ T5916] pwc: recv_control_msg error -32 req 02 val 2100
[  501.363330][ T5916] pwc: recv_control_msg error -32 req 04 val 1500
[  501.370852][ T5916] pwc: recv_control_msg error -32 req 02 val 2500
[  501.377841][ T5916] pwc: recv_control_msg error -32 req 02 val 2400
[  501.385807][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.392276][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  501.408815][ T5916] pwc: recv_control_msg error -32 req 02 val 2600
[  501.420283][ T5916] pwc: recv_control_msg error -32 req 02 val 2900
[  501.427516][ T5916] pwc: recv_control_msg error -32 req 02 val 2800
[  501.434847][ T5916] pwc: recv_control_msg error -32 req 04 val 1100
[  501.442083][ T5916] pwc: recv_control_msg error -32 req 04 val 1200
[  501.451093][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  501.452333][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  501.463615][ T5916] pwc: Registered as video103.
[  501.474411][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input103
[  501.619524][ T5943] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  501.676612][ T5916] usb 5-1: USB disconnect, device number 17
[  501.768539][ T5943] usb 3-1: device descriptor read/64, error -71
[  502.009065][ T5943] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  502.058494][ T5916] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  502.070653][  T926] usb 6-1: USB disconnect, device number 3
[  502.150226][ T5943] usb 3-1: device descriptor read/64, error -71
[  502.219194][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  502.224795][ T5916] usb 5-1: no configurations
[  502.229695][ T5916] usb 5-1: can't read configurations, error -22
[  502.260082][ T5943] usb usb3-port1: attempt power cycle
[  502.358475][ T5916] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  502.438500][  T926] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  502.509266][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  502.514915][ T5916] usb 5-1: no configurations
[  502.519810][ T5916] usb 5-1: can't read configurations, error -22
[  502.526274][ T5916] usb usb5-port1: attempt power cycle
[  502.588445][  T926] usb 6-1: Using ep0 maxpacket: 16
[  502.595619][  T926] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  502.604008][ T5943] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  502.611670][  T926] usb 6-1: can't read configurations, error -22
[  502.639261][ T5943] usb 3-1: device descriptor read/8, error -71
[  502.648734][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  502.748576][  T926] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  502.878492][ T5943] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  502.889629][ T5916] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  502.898702][  T926] usb 6-1: Using ep0 maxpacket: 16
[  502.904503][ T5943] usb 3-1: device descriptor read/8, error -71
[  502.912647][  T926] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  502.918987][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  502.920892][  T926] usb 6-1: can't read configurations, error -22
[  502.932465][  T926] usb usb6-port1: attempt power cycle
[  502.934999][ T5916] usb 5-1: no configurations
[  502.942731][ T5916] usb 5-1: can't read configurations, error -22
[  503.018663][ T5943] usb usb3-port1: unable to enumerate USB device
[  503.098484][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  503.118979][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  503.124579][ T5916] usb 5-1: no configurations
[  503.130209][ T5916] usb 5-1: can't read configurations, error -22
[  503.136720][ T5916] usb usb5-port1: unable to enumerate USB device
[  503.278523][  T926] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  503.298983][  T926] usb 6-1: Using ep0 maxpacket: 16
[  503.305660][  T926] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  503.313667][  T926] usb 6-1: can't read configurations, error -22
[  503.448621][  T926] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  503.469131][  T926] usb 6-1: Using ep0 maxpacket: 16
[  503.475838][  T926] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  503.483901][  T926] usb 6-1: can't read configurations, error -22
[  503.490528][  T926] usb usb6-port1: unable to enumerate USB device
[  503.528620][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  503.528626][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  504.599408][  T926] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  504.728592][  T926] usb 3-1: device descriptor read/64, error -71
[  504.786101][T21540] loop5: detected capacity change from 0 to 7
[  504.793263][T21540]  loop5: [POWERTEC] p1
[  504.798126][T21540] loop5: p1 size 20971520 extends beyond EOD, truncated
[  504.842272][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  504.968995][  T926] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  505.098934][  T926] usb 3-1: device descriptor read/64, error -71
[  505.132903][ T5895] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  505.209937][  T926] usb usb3-port1: attempt power cycle
[  505.300050][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.311089][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.321642][ T5895] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  505.330766][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.342539][ T5895] usb 5-1: config 0 descriptor??
[  505.528520][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  505.548487][  T926] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  505.574627][ T5895] usbhid 5-1:0.0: can't add hid device: -71
[  505.582711][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  505.591460][  T926] usb 3-1: device descriptor read/8, error -71
[  505.603273][ T5895] usb 5-1: USB disconnect, device number 22
[  505.618507][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  505.678461][   T10] usb 6-1: Using ep0 maxpacket: 32
[  505.686550][   T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  505.694922][   T10] usb 6-1: config 0 has no interface number 0
[  505.701226][   T10] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  505.713835][   T10] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  505.722960][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.731186][   T10] usb 6-1: Product: syz
[  505.735454][   T10] usb 6-1: Manufacturer: syz
[  505.740103][   T10] usb 6-1: SerialNumber: syz
[  505.746548][   T10] usb 6-1: config 0 descriptor??
[  505.755361][   T10] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  505.765472][   T10] em28xx 6-1:0.132: Video interface 132 found:
[  505.839455][  T926] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  505.859193][  T926] usb 3-1: device descriptor read/8, error -71
[  505.968856][  T926] usb usb3-port1: unable to enumerate USB device
[  506.154759][   T10] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  506.368543][ T5888] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  506.518485][ T5888] usb 5-1: Using ep0 maxpacket: 8
[  506.525191][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  506.536622][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  506.546778][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  506.557701][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  506.571317][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  506.580766][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.597231][ T5888] usbtmc 5-1:16.0: bulk endpoints not found
[  506.781431][   T10] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  506.790230][   T10] em28xx 6-1:0.132: failed to read eeprom (err=-5)
[  506.798122][   T10] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  506.858490][   T10] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  506.866392][   T10] em28xx 6-1:0.132: analog set to bulk mode.
[  506.873509][ T5888] em28xx 6-1:0.132: Registering V4L2 extension
[  506.884656][   T10] usb 6-1: USB disconnect, device number 8
[  506.894010][   T10] em28xx 6-1:0.132: Disconnecting em28xx
[  506.991386][   T29] audit: type=1326 audit(6060993284.818:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21601 comm="syz.0.2039" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e7f9aeb9 code=0x0
[  507.022279][ T5888] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  507.031503][ T5888] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  507.039561][ T5888] em28xx 6-1:0.132: No AC97 audio processor
[  507.050933][ T5888] usb 6-1: Decoder not found
[  507.055733][ T5888] em28xx 6-1:0.132: failed to create media graph
[  507.065172][ T5888] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  507.079464][ T5888] em28xx 6-1:0.132: Remote control support is not available for this card.
[  507.089298][   T10] em28xx 6-1:0.132: Closing input extension
[  507.102032][   T10] em28xx 6-1:0.132: Freeing device
[  507.431314][T21623] netlink: 'syz.5.2040': attribute type 83 has an invalid length.
[  507.493832][T21629] netlink: 'syz.5.2040': attribute type 83 has an invalid length.
[  507.748446][   T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  507.852415][T21631] loop5: detected capacity change from 0 to 7
[  507.864346][ T6007]  loop5: [POWERTEC] p1
[  507.869793][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  507.883677][T21631]  loop5: [POWERTEC] p1
[  507.890880][   T10] usb 3-1: device descriptor read/64, error -71
[  507.898959][T21631] loop5: p1 size 20971520 extends beyond EOD, truncated
[  507.967508][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  507.997851][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  508.138703][   T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  508.279494][   T10] usb 3-1: device descriptor read/64, error -71
[  508.409403][   T10] usb usb3-port1: attempt power cycle
[  508.548449][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  508.678518][ T5895] usb 6-1: device descriptor read/64, error -71
[  508.758472][   T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  508.790189][   T10] usb 3-1: device descriptor read/8, error -71
[  508.918513][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  509.028489][   T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  509.048806][ T5895] usb 6-1: device descriptor read/64, error -71
[  509.051239][   T10] usb 3-1: device descriptor read/8, error -71
[  509.120096][ T5943] usb 5-1: USB disconnect, device number 23
[  509.169290][ T5895] usb usb6-port1: attempt power cycle
[  509.171396][   T10] usb usb3-port1: unable to enumerate USB device
[  509.488450][ T5943] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  509.508540][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  509.528948][ T5895] usb 6-1: device descriptor read/8, error -71
[  509.640240][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.651799][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.661641][ T5943] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  509.670736][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.681328][ T5943] usb 5-1: config 0 descriptor??
[  509.768846][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  509.810140][ T5895] usb 6-1: device descriptor read/8, error -71
[  509.903976][ T5943] usbhid 5-1:0.0: can't add hid device: -71
[  509.911418][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  509.919948][ T5895] usb usb6-port1: unable to enumerate USB device
[  509.929603][ T5943] usb 5-1: USB disconnect, device number 24
[  510.668468][ T5888] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  510.818631][ T5888] usb 5-1: Using ep0 maxpacket: 8
[  510.825685][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  510.837138][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  510.847384][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  510.858312][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  510.871473][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  510.880581][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.894858][ T5888] usbtmc 5-1:16.0: bulk endpoints not found
[  511.067270][T21700] /dev/nullb0: Can't open blockdev
[  511.146358][T21705] loop5: detected capacity change from 0 to 7
[  511.160175][ T6007]  loop5: [POWERTEC] p1
[  511.164548][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  511.190958][T21705]  loop5: [POWERTEC] p1
[  511.195701][T21705] loop5: p1 size 20971520 extends beyond EOD, truncated
[  511.245194][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  511.267882][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  511.478569][ T5895] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  511.628428][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  511.634794][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  511.646240][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  511.656669][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  511.666557][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  511.676444][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.690127][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  511.700147][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.718552][ T5888] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  511.720039][ T5895] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  511.890107][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.901328][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.911131][ T5888] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  511.920456][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.931573][ T5888] usb 6-1: config 0 descriptor??
[  512.155598][ T5888] usbhid 6-1:0.0: can't add hid device: -71
[  512.161696][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  512.178077][ T5888] usb 6-1: USB disconnect, device number 13
[  512.578502][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  513.443419][ T5888] usb 5-1: USB disconnect, device number 25
[  513.732598][T21792] loop5: detected capacity change from 0 to 7
[  513.741464][T21792]  loop5: [POWERTEC] p1
[  513.745859][T21792] loop5: p1 size 20971520 extends beyond EOD, truncated
[  513.794846][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  513.898511][   T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  514.061671][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.071984][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  514.081814][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  514.089365][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  514.094815][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  514.111350][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.126026][   T10] usb 6-1: config 0 descriptor??
[  514.243500][ T5895] usb 3-1: USB disconnect, device number 60
[  514.260438][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.281336][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.291274][   T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  514.302601][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.314668][   T24] usb 5-1: config 0 descriptor??
[  514.342445][   T10] usb 6-1: USB disconnect, device number 14
[  514.539477][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  514.545512][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  514.558122][   T24] usb 5-1: USB disconnect, device number 26
[  514.648644][ T5895] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  514.648773][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  514.798517][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  514.805057][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  514.817187][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  514.827444][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  514.841179][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  514.854464][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  514.864550][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.885070][ T5895] usbtmc 3-1:16.0: bulk endpoints not found
[  514.939238][T21847] netlink: 'syz.0.2069': attribute type 29 has an invalid length.
[  514.957474][T21847] netlink: 'syz.0.2069': attribute type 29 has an invalid length.
[  515.199016][ T5895] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  515.348452][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  515.354077][ T5895] usb 6-1: no configurations
[  515.359342][ T5895] usb 6-1: can't read configurations, error -22
[  515.388498][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  515.497299][ T5895] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  515.557231][T21867] loop5: detected capacity change from 0 to 7
[  515.563439][   T10] usb 5-1: Using ep0 maxpacket: 32
[  515.570902][T21867]  loop5: [POWERTEC] p1
[  515.575312][T21867] loop5: p1 size 20971520 extends beyond EOD, truncated
[  515.582693][   T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  515.591928][   T10] usb 5-1: config 0 has no interface number 0
[  515.598060][   T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  515.612541][   T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  515.622754][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.631253][   T10] usb 5-1: Product: syz
[  515.636568][   T10] usb 5-1: Manufacturer: syz
[  515.641964][   T10] usb 5-1: SerialNumber: syz
[  515.649813][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  515.666937][   T10] usb 5-1: config 0 descriptor??
[  515.670517][ T5895] usb 6-1: no configurations
[  515.684957][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  515.702501][   T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  515.703844][ T5895] usb 6-1: can't read configurations, error -22
[  515.712809][   T10] em28xx 5-1:0.132: Video interface 132 found:
[  515.738825][ T5895] usb usb6-port1: attempt power cycle
[  515.883538][T21861] binder: 21860:21861 unknown command 0
[  515.889381][T21861] binder: 21860:21861 ioctl c0306201 2000000002c0 returned -22
[  516.089016][ T5895] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  516.104572][   T10] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  516.109094][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  516.116833][ T5895] usb 6-1: no configurations
[  516.121574][ T5895] usb 6-1: can't read configurations, error -22
[  516.258535][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  516.279142][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  516.284936][ T5895] usb 6-1: no configurations
[  516.289820][ T5895] usb 6-1: can't read configurations, error -22
[  516.296498][ T5895] usb usb6-port1: unable to enumerate USB device
[  516.715141][   T10] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  516.725749][   T10] em28xx 5-1:0.132: failed to read eeprom (err=-5)
[  516.733886][   T10] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  516.798452][   T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  516.806431][   T10] em28xx 5-1:0.132: analog set to bulk mode.
[  516.813045][ T5916] em28xx 5-1:0.132: Registering V4L2 extension
[  516.833786][   T10] usb 5-1: USB disconnect, device number 27
[  516.851448][   T10] em28xx 5-1:0.132: Disconnecting em28xx
[  516.913739][ T5916] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  516.920880][ T5916] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  516.928003][ T5916] em28xx 5-1:0.132: No AC97 audio processor
[  516.941316][ T5916] usb 5-1: Decoder not found
[  516.945968][ T5916] em28xx 5-1:0.132: failed to create media graph
[  516.952997][ T5916] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  516.960919][ T5916] em28xx 5-1:0.132: Remote control support is not available for this card.
[  516.969767][   T10] em28xx 5-1:0.132: Closing input extension
[  516.979110][   T10] em28xx 5-1:0.132: Freeing device
[  517.326723][ T5895] usb 3-1: USB disconnect, device number 61
[  517.668891][ T5895] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  517.808640][ T5895] usb 3-1: device descriptor read/64, error -71
[  518.048639][ T5895] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  518.188449][ T5895] usb 3-1: device descriptor read/64, error -71
[  518.299030][ T5895] usb usb3-port1: attempt power cycle
[  518.388498][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  518.458502][ T5916] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  518.540322][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.551469][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.561256][   T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  518.570313][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.581106][   T10] usb 6-1: config 0 descriptor??
[  518.609899][ T5916] usb 5-1: config 4 has an invalid interface number: 28 but max is 0
[  518.618025][ T5916] usb 5-1: config 4 has no interface number 0
[  518.626507][ T5916] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[  518.636063][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.644233][ T5916] usb 5-1: Product: syz
[  518.648584][ T5916] usb 5-1: Manufacturer: syz
[  518.648797][ T5895] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  518.653442][ T5916] usb 5-1: SerialNumber: syz
[  518.674670][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input107
[  518.679171][ T5895] usb 3-1: device descriptor read/8, error -71
[  518.818972][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  518.828198][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  518.844741][T21956] afs: Unknown parameter 'obj_user'
[  518.850576][   T10] usb 6-1: USB disconnect, device number 19
[  518.865499][ T5836] Bluetooth: hci0: unexpected event for opcode 0x0c6d
[  518.874596][ T5191] bcm5974 5-1:4.28: could not read from device
[  518.891266][ T5191] bcm5974 5-1:4.28: could not read from device
[  518.901172][ T5916] usb 5-1: USB disconnect, device number 28
[  518.938635][ T5895] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  518.962521][T21975] loop5: detected capacity change from 0 to 7
[  518.971088][ T5895] usb 3-1: device descriptor read/8, error -71
[  518.978300][ T5961]  loop5: [POWERTEC] p1
[  518.984325][ T5961] loop5: p1 size 20971520 extends beyond EOD, truncated
[  518.995582][T21975]  loop5: [POWERTEC] p1
[  519.001270][T21975] loop5: p1 size 20971520 extends beyond EOD, truncated
[  519.054359][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  519.076811][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  519.079195][ T5895] usb usb3-port1: unable to enumerate USB device
[  519.588462][ T5895] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  519.619765][T22001] netlink: 'syz.4.2086': attribute type 10 has an invalid length.
[  519.633694][T22001] team0: Device veth1_macvtap failed to register rx_handler
[  519.748510][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  519.755362][ T5895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  519.767154][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  519.777613][ T5895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  519.788072][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  519.798068][ T5895] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  519.811200][ T5895] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  519.820469][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.836751][ T5895] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  519.888459][   T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  520.018442][   T24] usb 5-1: device descriptor read/64, error -71
[  520.258549][   T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  520.389754][   T24] usb 5-1: device descriptor read/64, error -71
[  520.498615][   T24] usb usb5-port1: attempt power cycle
[  520.758510][ T5916] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  520.838438][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  520.858846][   T24] usb 5-1: device descriptor read/8, error -71
[  520.919669][ T5916] usb 3-1: config index 0 descriptor too short (expected 253, got 72)
[  520.930932][ T5916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  520.940073][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.948047][ T5916] usb 3-1: Product: syz
[  520.952239][ T5916] usb 3-1: Manufacturer: syz
[  520.956828][ T5916] usb 3-1: SerialNumber: syz
[  520.967768][ T5916] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  520.988636][   T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  521.098511][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  521.119155][   T24] usb 5-1: device descriptor read/8, error -71
[  521.203596][T22012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.213331][T22012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.223685][T22012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.232484][   T24] usb usb5-port1: unable to enumerate USB device
[  521.240860][T22012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.252396][T22012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  521.261573][T22012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  521.270723][   T24] usb 3-1: USB disconnect, device number 66
[  522.008522][   T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  522.015686][   T10] ath9k_htc: Failed to initialize the device
[  522.023269][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[  522.318435][   T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  522.357201][ T5895] usb 6-1: USB disconnect, device number 20
[  522.404503][T22057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.414086][T22057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.423323][T22057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.431191][T22057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.455954][T22058] loop6: detected capacity change from 0 to 2640
[  522.465388][ T6007] buffer_io_error: 341 callbacks suppressed
[  522.465402][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.480427][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.481383][   T24] usb 3-1: config index 0 descriptor too short (expected 253, got 72)
[  522.488285][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.488321][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.501897][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  522.505018][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.532461][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.540427][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.544576][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.548665][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.558919][   T24] usb 3-1: Product: syz
[  522.564278][ T6007] ldm_validate_partition_table(): Disk read failed.
[  522.571822][   T24] usb 3-1: Manufacturer: syz
[  522.575093][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.579861][   T24] usb 3-1: SerialNumber: syz
[  522.587272][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read
[  522.599984][ T6007] Dev loop6: unable to read RDB block 0
[  522.605710][ T6007]  loop6: unable to read partition table
[  522.611860][   T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  522.622301][T22058] ldm_validate_partition_table(): Disk read failed.
[  522.636872][T22058] Dev loop6: unable to read RDB block 0
[  522.644972][T22058]  loop6: unable to read partition table
[  522.656515][T22058] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  522.724551][T22076] loop5: detected capacity change from 0 to 7
[  522.731709][T22076]  loop5: [POWERTEC] p1
[  522.736517][T22076] loop5: p1 size 20971520 extends beyond EOD, truncated
[  522.788401][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  523.078527][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  523.230453][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.241557][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.251451][ T5916] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  523.262196][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.274970][ T5916] usb 6-1: config 0 descriptor??
[  523.498600][ T5916] usbhid 6-1:0.0: can't add hid device: -71
[  523.505371][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  523.515948][ T5916] usb 6-1: USB disconnect, device number 21
[  524.276137][ T5895] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  524.276537][   T10] usb 3-1: USB disconnect, device number 67
[  524.300887][   T10] usb 3-1: ath9k_htc: USB layer deinitialized
[  524.349263][ T5916] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  524.478451][ T5916] usb 6-1: device descriptor read/64, error -71
[  524.728446][ T5916] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  524.825696][T22126] fuse: Bad value for 'fd'
[  524.858933][ T5916] usb 6-1: device descriptor read/64, error -71
[  524.888524][ T5836] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  524.969400][ T5916] usb usb6-port1: attempt power cycle
[  525.218781][  T799] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  525.318474][ T5916] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  525.339144][ T5916] usb 6-1: device descriptor read/8, error -71
[  525.388522][  T799] usb 5-1: Using ep0 maxpacket: 8
[  525.397096][  T799] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  525.409952][  T799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  525.421399][  T799] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  525.431806][  T799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  525.443138][  T799] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  525.457648][  T799] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  525.467258][  T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.485854][  T799] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  525.578445][ T5916] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  525.599149][ T5916] usb 6-1: device descriptor read/8, error -71
[  525.709198][ T5916] usb usb6-port1: unable to enumerate USB device
[  526.035865][T22128] syz.2.2097 (22128): drop_caches: 3
[  526.164390][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  526.267255][T22160] loop5: detected capacity change from 0 to 7
[  526.277317][T22160]  loop5: [POWERTEC] p1
[  526.282129][T22160] loop5: p1 size 20971520 extends beyond EOD, truncated
[  526.346149][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  526.568575][ T5895] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  526.720032][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.731244][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.741131][ T5895] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  526.750791][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.761027][ T5895] usb 3-1: config 0 descriptor??
[  526.989188][ T5895] usbhid 3-1:0.0: can't add hid device: -71
[  526.995189][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  527.006261][ T5895] usb 3-1: USB disconnect, device number 68
[  527.468447][ T5895] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  527.619899][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.629837][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  527.643001][ T5895] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  527.652629][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.662733][ T5895] usb 6-1: config 0 descriptor??
[  527.978589][ T5916] usb 5-1: USB disconnect, device number 33
[  528.075788][ T5895] waterforce 0003:1044:7A4D.0066: item fetching failed at offset 0/1
[  528.084550][ T5895] waterforce 0003:1044:7A4D.0066: hid parse failed with -22
[  528.092214][ T5895] waterforce 0003:1044:7A4D.0066: probe with driver waterforce failed with error -22
[  528.270243][T22222] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2108'.
[  528.280541][T22192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.291732][T22192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.318511][ T5916] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  528.337636][  T799] usb 6-1: USB disconnect, device number 26
[  528.394536][T22240] loop5: detected capacity change from 0 to 7
[  528.404717][T22240]  loop5: [POWERTEC] p1
[  528.412630][T22240] loop5: p1 size 20971520 extends beyond EOD, truncated
[  528.474386][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  528.484645][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  528.493606][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  528.507865][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  528.520475][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2112'.
[  528.525764][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  528.556854][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.583721][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  528.600729][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.822488][ T5916] usb 5-1: usb_control_msg returned -32
[  528.832510][ T5916] usbtmc 5-1:16.0: can't read capabilities
[  528.846515][ T5916] usb 5-1: USB disconnect, device number 34
[  528.853188][  T799] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  528.908524][ T5888] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  529.020819][  T799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.035037][  T799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.045309][  T799] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  529.054493][  T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.062757][ T5888] usb 6-1: Using ep0 maxpacket: 16
[  529.070572][  T799] usb 3-1: config 0 descriptor??
[  529.075748][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.086855][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.100510][ T5888] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  529.109637][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.120646][ T5888] usb 6-1: config 0 descriptor??
[  529.314274][  T799] usbhid 3-1:0.0: can't add hid device: -71
[  529.322944][  T799] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  529.340052][  T799] usb 3-1: USB disconnect, device number 69
[  529.673110][ T5888] usbhid 6-1:0.0: can't add hid device: -71
[  529.684176][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  529.694798][ T5888] usb 6-1: USB disconnect, device number 27
[  529.818502][   T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  529.968444][   T24] usb 5-1: Using ep0 maxpacket: 8
[  529.975400][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  529.989011][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  530.000981][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  530.011518][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  530.023295][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  530.036737][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  530.045982][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.060512][   T24] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  530.208440][ T5888] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  530.368429][ T5888] usb 3-1: Using ep0 maxpacket: 16
[  530.374916][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  530.387922][ T5888] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  530.397080][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.405158][ T5888] usb 3-1: Product: syz
[  530.409384][ T5888] usb 3-1: Manufacturer: syz
[  530.413991][ T5888] usb 3-1: SerialNumber: syz
[  530.421120][ T5888] usb 3-1: config 0 descriptor??
[  530.435322][ T5888] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  530.488548][   T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  530.630821][T22315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.639976][   T24] usb 6-1: Using ep0 maxpacket: 8
[  530.645798][T22315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.655638][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  530.664690][   T24] usb 6-1: config 8 has an invalid interface number: 255 but max is 0
[  530.674110][   T24] usb 6-1: config 8 has no interface number 0
[  530.680678][   T24] usb 6-1: config 8 interface 255 has no altsetting 0
[  530.691304][   T24] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  530.700453][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=226
[  530.708895][   T24] usb 6-1: Product: syz
[  530.713081][   T24] usb 6-1: Manufacturer: Й
[  530.717582][   T24] usb 6-1: SerialNumber: syz
[  530.899268][T11705] usb 3-1: Failed to submit usb control message: -71
[  530.906518][ T5943] usb 3-1: USB disconnect, device number 70
[  530.915030][T11705] usb 3-1: unable to send the bmi data to the device: -71
[  530.922468][T11705] usb 3-1: unable to get target info from device
[  530.928959][T11705] usb 3-1: could not get target info (-71)
[  530.935209][T11705] usb 3-1: could not probe fw (-71)
[  530.938493][   T24] catc 6-1:8.255: Can't set altsetting 1.
[  530.962014][   T24] catc 6-1:8.255: probe with driver catc failed with error -5
[  530.985502][   T24] usb 6-1: USB disconnect, device number 28
[  531.401188][T22358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.442761][T22361] loop5: detected capacity change from 0 to 7
[  531.455664][T22361]  loop5: [POWERTEC] p1
[  531.461376][T22361] loop5: p1 size 20971520 extends beyond EOD, truncated
[  531.517587][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  531.828446][ T5943] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  531.978472][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  531.985047][ T5943] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  531.996364][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  532.006641][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  532.016943][ T5943] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  532.030146][ T5943] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  532.041400][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.188457][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  532.254191][ T5943] usb 3-1: usb_control_msg returned -32
[  532.261724][ T5943] usbtmc 3-1:16.0: can't read capabilities
[  532.276657][ T5943] usb 3-1: USB disconnect, device number 71
[  532.339894][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.350952][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.360794][   T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  532.370031][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.381865][   T24] usb 6-1: config 0 descriptor??
[  532.591677][ T5888] usb 5-1: USB disconnect, device number 35
[  532.632318][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  532.642623][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  532.660720][   T24] usb 6-1: USB disconnect, device number 29
[  532.978464][ T5888] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  533.108486][ T5888] usb 5-1: device descriptor read/64, error -71
[  533.268523][ T1227] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  533.379727][ T5888] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  533.408444][   T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  533.418415][ T1227] usb 3-1: Using ep0 maxpacket: 32
[  533.424927][ T1227] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  533.433364][ T1227] usb 3-1: config 0 has no interface number 0
[  533.440467][ T1227] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  533.453154][ T1227] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  533.462696][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.470787][ T1227] usb 3-1: Product: syz
[  533.474970][ T1227] usb 3-1: Manufacturer: syz
[  533.479655][ T1227] usb 3-1: SerialNumber: syz
[  533.486126][ T1227] usb 3-1: config 0 descriptor??
[  533.497295][ T1227] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  533.507320][ T1227] em28xx 3-1:0.132: Video interface 132 found:
[  533.528850][ T5888] usb 5-1: device descriptor read/64, error -71
[  533.558533][   T24] usb 6-1: Using ep0 maxpacket: 8
[  533.564261][   T24] usb 6-1: no configurations
[  533.569188][   T24] usb 6-1: can't read configurations, error -22
[  533.648888][ T5888] usb usb5-port1: attempt power cycle
[  533.698479][   T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  533.848546][   T24] usb 6-1: Using ep0 maxpacket: 8
[  533.854202][   T24] usb 6-1: no configurations
[  533.858898][   T24] usb 6-1: can't read configurations, error -22
[  533.865360][   T24] usb usb6-port1: attempt power cycle
[  533.896143][ T1227] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  533.998525][ T5888] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  534.019104][ T5888] usb 5-1: device descriptor read/8, error -71
[  534.218476][   T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  534.239148][   T24] usb 6-1: Using ep0 maxpacket: 8
[  534.244708][   T24] usb 6-1: no configurations
[  534.249435][   T24] usb 6-1: can't read configurations, error -22
[  534.258593][ T5888] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  534.279700][ T5888] usb 5-1: device descriptor read/8, error -71
[  534.378493][   T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  534.389785][ T5888] usb usb5-port1: unable to enumerate USB device
[  534.399110][   T24] usb 6-1: Using ep0 maxpacket: 8
[  534.404677][   T24] usb 6-1: no configurations
[  534.409342][   T24] usb 6-1: can't read configurations, error -22
[  534.416021][   T24] usb usb6-port1: unable to enumerate USB device
[  534.518499][ T1227] em28xx 3-1:0.132: failed to read eeprom (err=-110)
[  534.525614][ T1227] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  534.758913][ T1227] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  534.767009][ T1227] em28xx 3-1:0.132: analog set to bulk mode.
[  534.773237][ T5888] em28xx 3-1:0.132: Registering V4L2 extension
[  534.786535][ T1227] usb 3-1: USB disconnect, device number 72
[  534.794401][ T1227] em28xx 3-1:0.132: Disconnecting em28xx
[  535.038422][T22458] loop5: detected capacity change from 0 to 7
[  535.046230][ T5961]  loop5: [POWERTEC] p1
[  535.051197][ T5961] loop5: p1 size 20971520 extends beyond EOD, truncated
[  535.066931][T22458]  loop5: [POWERTEC] p1
[  535.076253][T22458] loop5: p1 size 20971520 extends beyond EOD, truncated
[  535.108185][ T5888] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  535.115854][ T5888] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  535.139335][ T5888] em28xx 3-1:0.132: No AC97 audio processor
[  535.147224][ T5888] usb 3-1: Decoder not found
[  535.148156][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  535.158670][ T5888] em28xx 3-1:0.132: failed to create media graph
[  535.176119][ T5888] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  535.180572][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  535.189995][ T5888] em28xx 3-1:0.132: Remote control support is not available for this card.
[  535.203405][T22472] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2132'.
[  535.204027][ T1227] em28xx 3-1:0.132: Closing input extension
[  535.227684][ T1227] em28xx 3-1:0.132: Freeing device
[  535.305818][T22482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'.
[  535.317848][T22482] unsupported nlmsg_type 40
[  535.731220][ T5895] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  535.888435][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  535.895057][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  535.906471][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  535.916981][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  535.926972][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  535.940112][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  535.949291][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.078486][ T1227] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  536.165239][ T5895] usb 3-1: usb_control_msg returned -32
[  536.174994][ T5895] usbtmc 3-1:16.0: can't read capabilities
[  536.194091][ T5895] usb 3-1: USB disconnect, device number 73
[  536.236269][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.257710][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.268135][ T1227] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  536.279133][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.299438][ T1227] usb 5-1: config 0 descriptor??
[  536.343995][T22529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2139'.
[  536.397799][T22532] loop5: detected capacity change from 0 to 7
[  536.407409][T22532]  loop5: [POWERTEC] p1
[  536.415157][T22532] loop5: p1 size 20971520 extends beyond EOD, truncated
[  536.460747][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  536.492119][T22540] netlink: 'syz.5.2141': attribute type 29 has an invalid length.
[  536.502018][T22540] netlink: 'syz.5.2141': attribute type 29 has an invalid length.
[  536.527363][ T1227] usbhid 5-1:0.0: can't add hid device: -71
[  536.546963][ T1227] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  536.559462][ T1227] usb 5-1: USB disconnect, device number 40
[  537.114913][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.123983][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.133992][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.143196][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.152068][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.158445][ T1227] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  537.160991][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.176801][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.185777][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.195927][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.205199][T22560] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.319813][ T1227] usb 3-1: Using ep0 maxpacket: 32
[  537.326834][ T1227] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  537.338111][ T1227] usb 3-1: config 0 has no interface number 0
[  537.344557][ T1227] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  537.357057][ T1227] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  537.367815][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.376272][ T1227] usb 3-1: Product: syz
[  537.380680][ T1227] usb 3-1: Manufacturer: syz
[  537.385288][ T1227] usb 3-1: SerialNumber: syz
[  537.393831][ T1227] usb 3-1: config 0 descriptor??
[  537.403060][ T1227] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  537.413655][ T1227] em28xx 3-1:0.132: Video interface 132 found:
[  537.538712][  T799] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  537.720116][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.731118][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.742771][  T799] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  537.751958][  T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.767061][  T799] usb 5-1: config 0 descriptor??
[  537.798496][ T5916] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  537.806868][ T1227] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  537.970943][ T5916] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  537.982452][ T5916] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  537.996017][ T5916] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  538.008263][ T5916] usb 6-1: config 1 has no interface number 1
[  538.014964][  T799] usbhid 5-1:0.0: can't add hid device: -71
[  538.018016][T22553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.024041][  T799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  538.031890][T22553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.039326][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  538.061304][  T799] usb 5-1: USB disconnect, device number 41
[  538.070313][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  538.082020][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.092281][ T5916] usb 6-1: Product: syz
[  538.096506][ T5916] usb 6-1: Manufacturer: syz
[  538.101600][ T5916] usb 6-1: SerialNumber: syz
[  538.335900][ T5916] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  538.343652][ T5916] usb 6-1: MIDIStreaming interface descriptor not found
[  538.416666][ T5916] usb 6-1: USB disconnect, device number 34
[  538.460109][ T1227] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  538.482487][ T1227] em28xx 3-1:0.132: failed to read eeprom (err=-5)
[  538.502621][ T1227] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  538.569643][ T1227] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  538.580200][ T1227] em28xx 3-1:0.132: analog set to bulk mode.
[  538.588416][  T799] em28xx 3-1:0.132: Registering V4L2 extension
[  538.619421][ T1227] usb 3-1: USB disconnect, device number 74
[  538.626966][ T1227] em28xx 3-1:0.132: Disconnecting em28xx
[  538.732428][  T799] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  538.740693][  T799] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  538.747800][  T799] em28xx 3-1:0.132: No AC97 audio processor
[  538.755562][  T799] usb 3-1: Decoder not found
[  538.762428][  T799] em28xx 3-1:0.132: failed to create media graph
[  538.768892][  T799] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  538.781469][  T799] em28xx 3-1:0.132: Remote control support is not available for this card.
[  538.790604][ T1227] em28xx 3-1:0.132: Closing input extension
[  538.821780][ T1227] em28xx 3-1:0.132: Freeing device
[  539.068554][T22702] loop5: detected capacity change from 0 to 7
[  539.076914][ T6007]  loop5: [POWERTEC] p1
[  539.081564][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  539.108737][T22702]  loop5: [POWERTEC] p1
[  539.113250][T22702] loop5: p1 size 20971520 extends beyond EOD, truncated
[  539.167358][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  539.197118][T22719] netlink: 'syz.4.2153': attribute type 29 has an invalid length.
[  539.210190][T22719] netlink: 'syz.4.2153': attribute type 29 has an invalid length.
[  539.215873][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  539.256649][T22721] netlink: 'syz.2.2154': attribute type 1 has an invalid length.
[  539.264871][T22721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2154'.
[  539.299961][ T5895] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  539.478437][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  539.485529][ T5895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  539.497454][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  539.510607][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  539.522155][ T5895] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  539.535965][ T5895] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  539.546610][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.638571][   T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  539.761450][ T5895] usb 6-1: usb_control_msg returned -32
[  539.767070][ T5895] usbtmc 6-1:16.0: can't read capabilities
[  539.800980][ T5895] usb 6-1: USB disconnect, device number 35
[  539.808667][   T24] usb 3-1: Using ep0 maxpacket: 8
[  539.818936][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  539.850102][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  539.871722][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  539.882186][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  539.895700][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  539.906056][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.108458][ T1227] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  540.120025][   T24] usb 3-1: usb_control_msg returned -32
[  540.125608][   T24] usbtmc 3-1:16.0: can't read capabilities
[  540.152001][   T24] usb 3-1: USB disconnect, device number 75
[  540.260271][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.271233][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.281094][ T1227] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  540.290350][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.300501][ T1227] usb 5-1: config 0 descriptor??
[  540.523025][ T1227] usbhid 5-1:0.0: can't add hid device: -71
[  540.530581][ T1227] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  540.544838][ T1227] usb 5-1: USB disconnect, device number 42
[  540.910243][ T5943] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  541.070376][ T5943] usb 6-1: Using ep0 maxpacket: 8
[  541.077206][ T5943] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  541.090065][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  541.100195][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  541.110210][ T5943] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  541.123319][ T5943] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  541.132444][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.159591][ T1227] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  541.288488][  T799] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  541.319808][ T1227] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  541.328657][ T1227] usb 3-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  541.338931][ T1227] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  541.346397][ T5943] usb 6-1: usb_control_msg returned -32
[  541.347876][ T1227] usb 3-1: config 1 has no interface number 1
[  541.347936][ T1227] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  541.362684][ T5943] usbtmc 6-1:16.0: can't read capabilities
[  541.395859][ T5943] usb 6-1: USB disconnect, device number 36
[  541.413615][ T1227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  541.430012][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.438130][ T1227] usb 3-1: Product: syz
[  541.442801][ T1227] usb 3-1: Manufacturer: syz
[  541.447418][ T1227] usb 3-1: SerialNumber: syz
[  541.452439][  T799] usb 5-1: Using ep0 maxpacket: 32
[  541.460309][  T799] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  541.470258][  T799] usb 5-1: config 0 has no interface number 0
[  541.478924][  T799] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  541.496139][  T799] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  541.505360][  T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.513494][  T799] usb 5-1: Product: syz
[  541.517716][  T799] usb 5-1: Manufacturer: syz
[  541.522928][  T799] usb 5-1: SerialNumber: syz
[  541.538450][  T799] usb 5-1: config 0 descriptor??
[  541.549475][  T799] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  541.559462][  T799] em28xx 5-1:0.132: Video interface 132 found:
[  541.706474][ T1227] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  541.714102][ T1227] usb 3-1: MIDIStreaming interface descriptor not found
[  541.772515][ T1227] usb 3-1: USB disconnect, device number 76
[  541.946795][  T799] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  542.270601][T22886] loop5: detected capacity change from 0 to 7
[  542.279985][T22886]  loop5: [POWERTEC] p1
[  542.285241][T22886] loop5: p1 size 20971520 extends beyond EOD, truncated
[  542.348891][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  542.557281][  T799] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  542.569774][  T799] em28xx 5-1:0.132: failed to read eeprom (err=-5)
[  542.570218][ T5895] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  542.576705][  T799] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  542.648902][  T799] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  542.657608][  T799] em28xx 5-1:0.132: analog set to bulk mode.
[  542.663708][ T1227] em28xx 5-1:0.132: Registering V4L2 extension
[  542.680745][  T799] usb 5-1: USB disconnect, device number 43
[  542.700526][  T799] em28xx 5-1:0.132: Disconnecting em28xx
[  542.728575][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  542.743745][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  542.756594][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  542.773046][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  542.778716][ T1227] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  542.783421][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  542.798614][ T1227] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  542.803054][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  542.810710][ T1227] em28xx 5-1:0.132: No AC97 audio processor
[  542.821489][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.834650][ T1227] usb 5-1: Decoder not found
[  542.840038][ T1227] em28xx 5-1:0.132: failed to create media graph
[  542.847132][ T1227] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  542.855993][ T1227] em28xx 5-1:0.132: Remote control support is not available for this card.
[  542.866384][  T799] em28xx 5-1:0.132: Closing input extension
[  542.877187][  T799] em28xx 5-1:0.132: Freeing device
[  543.041328][ T5895] usb 3-1: usb_control_msg returned -32
[  543.046962][ T5895] usbtmc 3-1:16.0: can't read capabilities
[  543.070049][ T5895] usb 3-1: USB disconnect, device number 77
[  543.602849][T22933] netlink: 'syz.2.2167': attribute type 29 has an invalid length.
[  543.621535][T22933] netlink: 'syz.2.2167': attribute type 29 has an invalid length.
[  543.858453][ T1227] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  543.868447][ T5895] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  544.019816][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.028417][ T1227] usb 6-1: Using ep0 maxpacket: 8
[  544.030852][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.037653][ T1227] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  544.046049][ T5895] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  544.067187][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.068005][ T1227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  544.085765][ T1227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  544.087552][ T5895] usb 5-1: config 0 descriptor??
[  544.106027][ T1227] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  544.119226][ T1227] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  544.128444][ T1227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.324385][ T5895] usbhid 5-1:0.0: can't add hid device: -71
[  544.333655][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  544.351817][ T1227] usb 6-1: usb_control_msg returned -32
[  544.357987][ T5895] usb 5-1: USB disconnect, device number 44
[  544.358463][ T1227] usbtmc 6-1:16.0: can't read capabilities
[  544.388704][ T1227] usb 6-1: USB disconnect, device number 37
[  544.638425][ T5943] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  544.788417][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  544.793990][ T5943] usb 3-1: no configurations
[  544.798881][ T5943] usb 3-1: can't read configurations, error -22
[  544.930815][ T5943] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  545.030198][T22992] loop5: detected capacity change from 0 to 7
[  545.042493][ T6007]  loop5: [POWERTEC] p1
[  545.049383][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  545.074119][T22992]  loop5: [POWERTEC] p1
[  545.079572][T22992] loop5: p1 size 20971520 extends beyond EOD, truncated
[  545.108797][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  545.117212][ T5943] usb 3-1: no configurations
[  545.123755][ T5943] usb 3-1: can't read configurations, error -22
[  545.135694][ T5943] usb usb3-port1: attempt power cycle
[  545.145055][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  545.185843][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  545.190915][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2178'.
[  545.236754][T23015] netlink: 'syz.4.2179': attribute type 29 has an invalid length.
[  545.246291][T23015] netlink: 'syz.4.2179': attribute type 29 has an invalid length.
[  545.468435][ T5895] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  545.478652][ T5943] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  545.499058][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  545.504633][ T5943] usb 3-1: no configurations
[  545.509349][ T5943] usb 3-1: can't read configurations, error -22
[  545.618430][ T5895] usb 6-1: Using ep0 maxpacket: 32
[  545.624963][ T5895] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  545.633256][ T5895] usb 6-1: config 0 has no interface number 0
[  545.639552][ T5895] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  545.649563][ T5943] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  545.659151][ T5895] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  545.668201][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.676347][ T5895] usb 6-1: Product: syz
[  545.680622][ T5895] usb 6-1: Manufacturer: syz
[  545.685449][ T5943] usb 3-1: Using ep0 maxpacket: 8
[  545.691257][ T5895] usb 6-1: SerialNumber: syz
[  545.698312][ T5895] usb 6-1: config 0 descriptor??
[  545.703507][ T5943] usb 3-1: no configurations
[  545.711207][ T5943] usb 3-1: can't read configurations, error -22
[  545.717823][ T5943] usb usb3-port1: unable to enumerate USB device
[  545.727303][ T5895] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  545.738647][ T5895] em28xx 6-1:0.132: Video interface 132 found:
[  546.127578][ T5895] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  546.428514][ T5943] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  546.579932][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  546.590948][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  546.600816][ T5943] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  546.610450][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.621229][ T5943] usb 5-1: config 0 descriptor??
[  546.833379][T23024] fuse: Bad value for 'fd'
[  546.841583][ T5943] usbhid 5-1:0.0: can't add hid device: -71
[  546.848057][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  546.858261][ T5895] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  546.870374][ T5943] usb 5-1: USB disconnect, device number 45
[  546.877491][ T5895] em28xx 6-1:0.132: failed to read eeprom (err=-5)
[  546.887076][ T5895] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  546.948633][ T5895] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  546.956566][ T5895] em28xx 6-1:0.132: analog set to bulk mode.
[  546.963804][   T24] em28xx 6-1:0.132: Registering V4L2 extension
[  546.973990][ T5895] usb 6-1: USB disconnect, device number 38
[  546.982933][ T5895] em28xx 6-1:0.132: Disconnecting em28xx
[  547.045691][   T24] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  547.053368][   T24] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  547.060580][   T24] em28xx 6-1:0.132: No AC97 audio processor
[  547.067702][   T24] usb 6-1: Decoder not found
[  547.072408][   T24] em28xx 6-1:0.132: failed to create media graph
[  547.078854][   T24] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  547.087397][   T24] em28xx 6-1:0.132: Remote control support is not available for this card.
[  547.096339][ T5895] em28xx 6-1:0.132: Closing input extension
[  547.105936][ T5895] em28xx 6-1:0.132: Freeing device
[  547.545666][T23083] loop5: detected capacity change from 0 to 7
[  547.553694][T23083]  loop5: [POWERTEC] p1
[  547.558108][T23083] loop5: p1 size 20971520 extends beyond EOD, truncated
[  547.602364][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  547.612434][ T5895] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  547.658500][ T5943] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  547.748810][ T5895] usb 5-1: device descriptor read/64, error -71
[  547.818414][ T5943] usb 6-1: Using ep0 maxpacket: 8
[  547.824948][ T5943] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  547.836149][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  547.846844][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  547.856950][ T5943] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  547.870972][ T5943] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  547.881054][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.948855][   T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  547.998531][ T5895] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  548.096342][ T5943] usb 6-1: usb_control_msg returned -32
[  548.102879][   T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  548.107202][ T5943] usbtmc 6-1:16.0: can't read capabilities
[  548.120891][   T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  548.131379][ T5943] usb 6-1: USB disconnect, device number 39
[  548.133054][   T10] usb 3-1: config 220 has no interface number 2
[  548.139070][ T5895] usb 5-1: device descriptor read/64, error -71
[  548.144287][   T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  548.164167][   T10] usb 3-1: config 220 interface 0 has no altsetting 0
[  548.171477][   T10] usb 3-1: config 220 interface 76 has no altsetting 0
[  548.178924][   T10] usb 3-1: config 220 interface 1 has no altsetting 0
[  548.189801][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  548.199054][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.207158][   T10] usb 3-1: Product: syz
[  548.212125][   T10] usb 3-1: Manufacturer: syz
[  548.216753][   T10] usb 3-1: SerialNumber: syz
[  548.258746][ T5895] usb usb5-port1: attempt power cycle
[  548.435152][   T10] usb 3-1: selecting invalid altsetting 0
[  548.450234][   T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  548.457788][   T10] uvcvideo 3-1:220.0: No valid video chain found.
[  548.469397][   T10] usb 3-1: selecting invalid altsetting 0
[  548.475164][   T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  548.486423][   T10] usb 3-1: USB disconnect, device number 82
[  548.598520][ T5895] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  548.619090][ T5895] usb 5-1: device descriptor read/8, error -71
[  548.858454][ T5895] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  548.878871][ T5895] usb 5-1: device descriptor read/8, error -71
[  548.889145][   T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  548.988933][ T5895] usb usb5-port1: unable to enumerate USB device
[  549.039913][   T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  549.059677][   T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  549.078467][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  549.098181][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  549.118487][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  549.140848][   T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  549.150028][   T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  549.167018][   T10] usb 6-1: Product: syz
[  549.171671][   T10] usb 6-1: Manufacturer: syz
[  549.183265][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  549.200174][   T10] cdc_wdm 6-1:1.0: skipping garbage
[  549.210926][   T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  549.227253][   T10] cdc_wdm 6-1:1.0: Unknown control protocol
[  549.265970][T23154] syzkaller1: entered promiscuous mode
[  549.272193][T23154] syzkaller1: entered allmulticast mode
[  549.587612][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.596172][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.602839][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.609498][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.616155][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.622517][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.629142][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.639137][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.645773][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.652614][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.659282][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.665966][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.672589][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.680025][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.686654][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.693454][   T10] usb 6-1: USB disconnect, device number 40
[  549.699529][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  549.699563][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  549.699582][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  549.828465][ T5895] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  549.998427][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  550.005713][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  550.017243][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  550.027863][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  550.038046][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  550.051241][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  550.060309][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.275465][ T5895] usb 3-1: GET_CAPABILITIES returned 0
[  550.282214][ T5895] usbtmc 3-1:16.0: can't read capabilities
[  550.500242][ T5943] usb 3-1: USB disconnect, device number 83
[  550.710241][T23210] netlink: 'syz.0.2200': attribute type 29 has an invalid length.
[  550.720018][T23210] netlink: 'syz.0.2200': attribute type 29 has an invalid length.
[  550.788438][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  550.798965][ T5895] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  550.951207][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.962251][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.968619][ T5895] usb 6-1: Using ep0 maxpacket: 8
[  550.972462][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  550.980219][ T5895] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  550.986478][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.998671][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  551.017385][   T10] usb 5-1: config 0 descriptor??
[  551.029218][ T5895] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  551.040055][ T5895] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.053442][ T5895] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  551.063668][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.233397][T23184] fuse: Bad value for 'fd'
[  551.248487][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  551.254528][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  551.276327][ T5895] usb 6-1: usb_control_msg returned -32
[  551.289633][   T10] usb 5-1: USB disconnect, device number 50
[  551.296935][ T5895] usbtmc 6-1:16.0: can't read capabilities
[  551.334896][ T5895] usb 6-1: USB disconnect, device number 41
[  551.392583][   T51] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18
[  551.881819][T23258] loop5: detected capacity change from 0 to 7
[  551.889991][ T6007]  loop5: [POWERTEC] p1
[  551.894476][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  551.906836][T23258]  loop5: [POWERTEC] p1
[  551.911479][T23258] loop5: p1 size 20971520 extends beyond EOD, truncated
[  551.952518][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  551.987476][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  552.028526][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  552.218660][   T10] usb 5-1: Using ep0 maxpacket: 8
[  552.225327][   T10] usb 5-1: no configurations
[  552.238595][   T10] usb 5-1: can't read configurations, error -22
[  552.252967][T23282] netlink: 'syz.2.2210': attribute type 29 has an invalid length.
[  552.262027][T23282] netlink: 'syz.2.2210': attribute type 29 has an invalid length.
[  552.298557][ T5943] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  552.388639][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  552.448503][ T5943] usb 6-1: Using ep0 maxpacket: 16
[  552.455638][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.466125][ T5943] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  552.475260][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.486740][ T5943] usb 6-1: config 0 descriptor??
[  552.496047][ T5943] pxrc 6-1:0.0: Could not find endpoint
[  552.549005][   T10] usb 5-1: Using ep0 maxpacket: 8
[  552.554611][   T10] usb 5-1: no configurations
[  552.559561][   T10] usb 5-1: can't read configurations, error -22
[  552.566067][   T10] usb usb5-port1: attempt power cycle
[  552.695691][T23272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.704547][T23272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.715806][T23272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.725738][T23272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.918504][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  552.940183][   T10] usb 5-1: Using ep0 maxpacket: 8
[  552.945799][   T10] usb 5-1: no configurations
[  552.950658][   T10] usb 5-1: can't read configurations, error -22
[  553.079470][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  553.119139][   T10] usb 5-1: Using ep0 maxpacket: 8
[  553.125005][   T10] usb 5-1: no configurations
[  553.130863][   T10] usb 5-1: can't read configurations, error -22
[  553.137647][   T10] usb usb5-port1: unable to enumerate USB device
[  553.244074][   T10] usb 6-1: USB disconnect, device number 42
[  553.428473][ T5916] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  553.580202][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.591144][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.600991][   T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  553.608760][ T5916] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  553.617826][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.628706][ T5916] usb 3-1: config 0 descriptor??
[  553.798464][   T10] usb 6-1: Using ep0 maxpacket: 8
[  553.805189][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  553.816521][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  553.826657][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  553.840257][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  553.842648][T23292] fuse: Bad value for 'fd'
[  553.853553][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  553.853584][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.880011][ T5916] usbhid 3-1:0.0: can't add hid device: -71
[  553.886017][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  553.906944][ T5916] usb 3-1: USB disconnect, device number 84
[  554.099557][   T10] usb 6-1: GET_CAPABILITIES returned 0
[  554.105102][   T10] usbtmc 6-1:16.0: can't read capabilities
[  554.304109][ T5916] usb 6-1: USB disconnect, device number 43
[  554.641682][ T5916] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  554.799126][ T5916] usb 3-1: Using ep0 maxpacket: 8
[  554.807174][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  554.818918][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  554.829107][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  554.843843][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  554.877507][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  554.890638][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.128848][ T5916] usb 3-1: GET_CAPABILITIES returned 0
[  555.134388][ T5916] usbtmc 3-1:16.0: can't read capabilities
[  555.218768][ T5943] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  555.314629][T23372] loop5: detected capacity change from 0 to 7
[  555.320201][  T926] usb 3-1: USB disconnect, device number 85
[  555.332368][T23372]  loop5: [POWERTEC] p1
[  555.342736][T23372] loop5: p1 size 20971520 extends beyond EOD, truncated
[  555.379261][ T5943] usb 5-1: Using ep0 maxpacket: 8
[  555.387221][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  555.390470][ T5943] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  555.427615][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  555.442267][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  555.457476][ T5943] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  555.471343][ T5943] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  555.480509][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.537893][T23331] FAULT_INJECTION: forcing a failure.
[  555.537893][T23331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  555.552350][T23331] CPU: 0 UID: 0 PID: 23331 Comm: syz.2.2213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.552381][T23331] Tainted: [L]=SOFTLOCKUP
[  555.552389][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  555.552404][T23331] Call Trace:
[  555.552412][T23331]  <TASK>
[  555.552421][T23331]  dump_stack_lvl+0xe8/0x150
[  555.552440][T23331]  should_fail_ex+0x412/0x560
[  555.552460][T23331]  _copy_to_user+0x31/0xb0
[  555.552474][T23331]  simple_read_from_buffer+0xe1/0x170
[  555.552498][T23331]  proc_fail_nth_read+0x1bb/0x230
[  555.552522][T23331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  555.552545][T23331]  ? rw_verify_area+0x2a6/0x4d0
[  555.552567][T23331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  555.552580][T23331]  vfs_read+0x20c/0xa70
[  555.552593][T23331]  ? fdget_pos+0x246/0x320
[  555.552608][T23331]  ? __pfx___mutex_lock+0x10/0x10
[  555.552625][T23331]  ? __pfx_vfs_read+0x10/0x10
[  555.552648][T23331]  ? __fget_files+0x2a/0x420
[  555.552681][T23331]  ? __fget_files+0x3a0/0x420
[  555.552700][T23331]  ? __fget_files+0x2a/0x420
[  555.552724][T23331]  ksys_read+0x150/0x270
[  555.552739][T23331]  ? __pfx_ksys_read+0x10/0x10
[  555.552759][T23331]  do_syscall_64+0xe2/0xf80
[  555.552773][T23331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.552789][T23331]  ? trace_irq_disable+0x37/0x100
[  555.552811][T23331]  ? clear_bhb_loop+0x40/0x90
[  555.552834][T23331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.552857][T23331] RIP: 0033:0x7f53a115b78e
[  555.552873][T23331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  555.552881][T23331] RSP: 002b:00007f53a212ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  555.552894][T23331] RAX: ffffffffffffffda RBX: 00007f53a21306c0 RCX: 00007f53a115b78e
[  555.552910][T23331] RDX: 000000000000000f RSI: 00007f53a21300a0 RDI: 0000000000000004
[  555.552917][T23331] RBP: 00007f53a2130090 R08: 0000000000000000 R09: 0000000000000000
[  555.552923][T23331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.552933][T23331] R13: 00007f53a1416038 R14: 00007f53a1415fa0 R15: 00007fff88d8ea48
[  555.552962][T23331]  </TASK>
[  555.817568][ T5943] usb 5-1: GET_CAPABILITIES returned 0
[  555.825182][ T5943] usbtmc 5-1:16.0: can't read capabilities
[  555.908440][  T926] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  556.022351][ T5916] usb 5-1: USB disconnect, device number 55
[  556.058492][ T5943] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  556.068028][  T926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.081420][  T926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.091221][  T926] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  556.100367][  T926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.113097][  T926] usb 6-1: config 0 descriptor??
[  556.230167][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.241796][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.251625][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  556.264879][ T5943] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  556.274265][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.284792][ T5943] usb 3-1: config 0 descriptor??
[  556.328885][  T926] usbhid 6-1:0.0: can't add hid device: -71
[  556.339217][  T926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  556.350673][  T926] usb 6-1: USB disconnect, device number 44
[  556.710609][ T5943] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  556.901619][T23397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.911305][T23397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.981558][ T5916] usb 3-1: USB disconnect, device number 86
[  557.028471][ T5943] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  557.108522][  T799] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  557.188408][ T5943] usb 5-1: Using ep0 maxpacket: 32
[  557.195058][ T5943] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  557.203365][ T5943] usb 5-1: config 0 has no interface number 0
[  557.209601][ T5943] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  557.221837][ T5943] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  557.231211][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.239257][ T5943] usb 5-1: Product: syz
[  557.243426][ T5943] usb 5-1: Manufacturer: syz
[  557.248061][ T5943] usb 5-1: SerialNumber: syz
[  557.255861][ T5943] usb 5-1: config 0 descriptor??
[  557.258414][  T799] usb 6-1: Using ep0 maxpacket: 8
[  557.270669][ T5943] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  557.280299][  T799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  557.280965][ T5943] em28xx 5-1:0.132: Video interface 132 found:
[  557.294910][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  557.308524][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  557.321028][  T799] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  557.334877][  T799] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  557.345349][  T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.545621][T23461] netlink: 'syz.2.2225': attribute type 2 has an invalid length.
[  557.566083][  T799] usb 6-1: GET_CAPABILITIES returned 0
[  557.571790][  T799] usbtmc 6-1:16.0: can't read capabilities
[  557.670406][ T5943] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  557.769644][ T5916] usb 6-1: USB disconnect, device number 45
[  557.790880][  T926] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  557.958436][  T926] usb 3-1: Using ep0 maxpacket: 8
[  557.964658][  T926] usb 3-1: no configurations
[  557.969442][  T926] usb 3-1: can't read configurations, error -22
[  558.109333][  T926] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  558.135277][T23495] loop5: detected capacity change from 0 to 7
[  558.142559][T23495]  loop5: [POWERTEC] p1
[  558.146947][T23495] loop5: p1 size 20971520 extends beyond EOD, truncated
[  558.206456][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  558.258458][  T926] usb 3-1: Using ep0 maxpacket: 8
[  558.264118][  T926] usb 3-1: no configurations
[  558.268965][  T926] usb 3-1: can't read configurations, error -22
[  558.275558][  T926] usb usb3-port1: attempt power cycle
[  558.287192][ T5943] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  558.299820][ T5943] em28xx 5-1:0.132: failed to read eeprom (err=-5)
[  558.319039][ T5943] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  558.388416][ T5943] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  558.396284][ T5943] em28xx 5-1:0.132: analog set to bulk mode.
[  558.402887][ T5896] em28xx 5-1:0.132: Registering V4L2 extension
[  558.416671][ T5943] usb 5-1: USB disconnect, device number 56
[  558.424769][ T5943] em28xx 5-1:0.132: Disconnecting em28xx
[  558.486645][ T5896] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  558.495028][ T5896] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  558.502223][ T5896] em28xx 5-1:0.132: No AC97 audio processor
[  558.509917][ T5896] usb 5-1: Decoder not found
[  558.514525][ T5896] em28xx 5-1:0.132: failed to create media graph
[  558.520961][ T5896] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  558.535037][ T5896] em28xx 5-1:0.132: Remote control support is not available for this card.
[  558.543874][ T5943] em28xx 5-1:0.132: Closing input extension
[  558.553862][ T5943] em28xx 5-1:0.132: Freeing device
[  558.588755][  T799] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  558.618455][  T926] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  558.639376][  T926] usb 3-1: Using ep0 maxpacket: 8
[  558.644855][  T926] usb 3-1: no configurations
[  558.654213][  T926] usb 3-1: can't read configurations, error -22
[  558.749967][  T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  558.761013][  T799] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  558.770869][  T799] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  558.780004][  T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.789205][  T926] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  558.790566][  T799] usb 6-1: config 0 descriptor??
[  558.819012][  T926] usb 3-1: Using ep0 maxpacket: 8
[  558.838832][  T926] usb 3-1: no configurations
[  558.843762][  T926] usb 3-1: can't read configurations, error -22
[  558.856619][  T926] usb usb3-port1: unable to enumerate USB device
[  559.019895][  T799] usbhid 6-1:0.0: can't add hid device: -71
[  559.028283][  T799] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  559.043377][  T799] usb 6-1: USB disconnect, device number 46
[  559.268411][  T926] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  559.418417][  T926] usb 5-1: Using ep0 maxpacket: 8
[  559.424887][  T926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  559.436256][  T926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  559.446405][  T926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  559.456416][  T926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  559.469601][  T926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  559.478802][  T926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.702518][  T926] usb 5-1: GET_CAPABILITIES returned 0
[  559.708236][  T926] usbtmc 5-1:16.0: can't read capabilities
[  559.909810][  T926] usb 5-1: USB disconnect, device number 57
[  560.268486][  T799] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  560.428403][  T799] usb 6-1: Using ep0 maxpacket: 8
[  560.435017][  T799] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  560.446434][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  560.456839][  T799] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  560.466818][  T799] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  560.479871][  T799] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  560.489056][  T799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.578640][T23593] loop5: detected capacity change from 0 to 7
[  560.586068][T23593]  loop5: [POWERTEC] p1
[  560.590626][T23593] loop5: p1 size 20971520 extends beyond EOD, truncated
[  560.651465][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  560.701561][  T799] usb 6-1: GET_CAPABILITIES returned 0
[  560.713474][T23602] netlink: 'syz.4.2243': attribute type 21 has an invalid length.
[  560.723458][  T799] usbtmc 6-1:16.0: can't read capabilities
[  560.730104][T23602] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2243'.
[  560.748288][T23602] dummy0: entered allmulticast mode
[  560.904063][ T5916] usb 6-1: USB disconnect, device number 47
[  560.960728][ T5895] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  560.998519][  T799] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  561.138454][ T5895] usb 3-1: Using ep0 maxpacket: 32
[  561.145104][ T5895] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  561.154323][ T5895] usb 3-1: config 0 has no interface number 0
[  561.160748][ T5895] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  561.172701][ T5895] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  561.178413][  T799] usb 5-1: Using ep0 maxpacket: 8
[  561.181806][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.189160][  T799] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  561.194835][ T5895] usb 3-1: Product: syz
[  561.206151][  T799] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  561.221305][ T5895] usb 3-1: Manufacturer: syz
[  561.221328][ T5895] usb 3-1: SerialNumber: syz
[  561.238550][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  561.240087][ T5895] usb 3-1: config 0 descriptor??
[  561.254847][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  561.265391][  T799] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  561.285692][ T5895] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  561.287711][  T799] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  561.305513][  T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.308411][ T5895] em28xx 3-1:0.132: Video interface 132 found:
[  561.313904][  T799] usb 5-1: Product: syz
[  561.324240][  T799] usb 5-1: Manufacturer: syz
[  561.329734][  T799] usb 5-1: SerialNumber: syz
[  561.343837][  T799] usb 5-1: config 0 descriptor??
[  561.568780][T23600] dummy0: left allmulticast mode
[  561.591657][  T799] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0
[  561.614781][  T799] usb 5-1: USB disconnect, device number 58
[  561.682226][T23653] netlink: 'syz.5.2247': attribute type 29 has an invalid length.
[  561.691005][ T5895] em28xx 3-1:0.132: unknown em28xx chip ID (200)
[  561.692569][T23653] netlink: 'syz.5.2247': attribute type 29 has an invalid length.
[  562.103054][T23603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.133044][T23603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.398475][ T5895] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  562.412327][ T5895] em28xx 3-1:0.132: board has no eeprom
[  562.428482][  T926] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  562.498799][ T5895] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  562.506649][ T5895] em28xx 3-1:0.132: analog set to bulk mode.
[  562.513042][ T5943] em28xx 3-1:0.132: Registering V4L2 extension
[  562.590919][  T926] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  562.602836][  T926] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  562.614177][  T926] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  562.625505][  T926] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  562.634650][  T926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.643822][ T5943] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  562.644117][  T799] usb 3-1: USB disconnect, device number 91
[  562.670349][T23673] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  562.676560][  T799] em28xx 3-1:0.132: Disconnecting em28xx
[  562.767731][T23691] loop5: detected capacity change from 0 to 7
[  562.777244][ T5943] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  562.785505][ T5943] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  562.793718][ T5943] em28xx 3-1:0.132: No AC97 audio processor
[  562.795209][ T6007]  loop5: [POWERTEC] p1
[  562.805209][ T6007] loop5: p1 size 20971520 extends beyond EOD, truncated
[  562.806889][ T5943] usb 3-1: Decoder not found
[  562.819316][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  562.819484][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  562.867534][T23691]  loop5: [POWERTEC] p1
[  562.882456][T23691] loop5: p1 size 20971520 extends beyond EOD, truncated
[  562.882899][ T5943] em28xx 3-1:0.132: failed to create media graph
[  562.902064][T23673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.919155][T23673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.928558][ T5943] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  562.955746][ T5943] em28xx 3-1:0.132: Remote control support is not available for this card.
[  562.958140][T23696] ==================================================================
[  562.972450][T23696] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  562.979839][T23696] Read of size 8 at addr ffff88806429c748 by task v4l_id/23696
[  562.987821][T23696] 
[  562.990145][T23696] CPU: 0 UID: 0 PID: 23696 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  562.990166][T23696] Tainted: [L]=SOFTLOCKUP
[  562.990171][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  562.990181][T23696] Call Trace:
[  562.990187][T23696]  <TASK>
[  562.990192][T23696]  dump_stack_lvl+0xe8/0x150
[  562.990214][T23696]  print_report+0xba/0x230
[  562.990231][T23696]  ? v4l2_fh_open+0xac/0x420
[  562.990245][T23696]  kasan_report+0x117/0x150
[  562.990259][T23696]  ? v4l2_fh_open+0xac/0x420
[  562.990276][T23696]  v4l2_fh_open+0xac/0x420
[  562.990290][T23696]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  562.990311][T23696]  em28xx_v4l2_open+0x157/0x9a0
[  562.990332][T23696]  ? do_raw_spin_lock+0x12b/0x2f0
[  562.990353][T23696]  v4l2_open+0x1bf/0x3a0
[  562.990370][T23696]  chrdev_open+0x4cd/0x5e0
[  562.990383][T23696]  ? __pfx_chrdev_open+0x10/0x10
[  562.990396][T23696]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  562.990415][T23696]  ? __pfx_chrdev_open+0x10/0x10
[  562.990427][T23696]  do_dentry_open+0x785/0x14e0
[  562.990446][T23696]  vfs_open+0x3b/0x340
[  562.990459][T23696]  ? path_openat+0x2df0/0x3860
[  562.990478][T23696]  path_openat+0x2e08/0x3860
[  562.990500][T23696]  ? __pfx_stack_trace_save+0x10/0x10
[  562.990520][T23696]  ? stack_depot_save_flags+0x33/0x810
[  562.990537][T23696]  ? __pfx_path_openat+0x10/0x10
[  562.990553][T23696]  ? __x64_sys_openat+0x138/0x170
[  562.990569][T23696]  ? __lock_acquire+0x6b5/0x2cf0
[  562.990587][T23696]  do_file_open+0x23e/0x4a0
[  562.990606][T23696]  ? __pfx_do_file_open+0x10/0x10
[  562.990630][T23696]  ? _raw_spin_unlock+0x28/0x50
[  562.990646][T23696]  ? alloc_fd+0x64b/0x6c0
[  562.990664][T23696]  do_sys_openat2+0x113/0x200
[  562.990680][T23696]  ? __pfx_do_sys_openat2+0x10/0x10
[  562.990694][T23696]  ? exc_page_fault+0x6a/0xc0
[  562.990713][T23696]  ? do_user_addr_fault+0xc6f/0x1340
[  562.990730][T23696]  __x64_sys_openat+0x138/0x170
[  562.990746][T23696]  do_syscall_64+0xe2/0xf80
[  562.990763][T23696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.990777][T23696]  ? trace_irq_disable+0x37/0x100
[  562.990794][T23696]  ? clear_bhb_loop+0x40/0x90
[  562.990808][T23696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.990822][T23696] RIP: 0033:0x7f7f18aa7407
[  562.990836][T23696] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  562.990848][T23696] RSP: 002b:00007ffcaea6edc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  562.990868][T23696] RAX: ffffffffffffffda RBX: 00007f7f19268880 RCX: 00007f7f18aa7407
[  562.990878][T23696] RDX: 0000000000000000 RSI: 00007ffcaea70f1b RDI: ffffffffffffff9c
[  562.990887][T23696] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  562.990896][T23696] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  562.990904][T23696] R13: 00007ffcaea6f010 R14: 00007f7f193cf000 R15: 000055d25b44e4d8
[  562.990919][T23696]  </TASK>
[  562.990924][T23696] 
[  563.279789][T23696] Allocated by task 5943:
[  563.284102][T23696]  kasan_save_track+0x3e/0x80
[  563.288776][T23696]  __kasan_kmalloc+0x93/0xb0
[  563.293358][T23696]  __kmalloc_cache_noprof+0x31c/0x660
[  563.298717][T23696]  em28xx_v4l2_init+0x10b/0x2e70
[  563.303645][T23696]  em28xx_init_extension+0x120/0x1c0
[  563.308923][T23696]  process_one_work+0x949/0x15a0
[  563.313846][T23696]  worker_thread+0xb46/0x1140
[  563.318510][T23696]  kthread+0x388/0x470
[  563.322569][T23696]  ret_from_fork+0x51b/0xa40
[  563.327146][T23696]  ret_from_fork_asm+0x1a/0x30
[  563.331907][T23696] 
[  563.334217][T23696] Freed by task 5943:
[  563.338175][T23696]  kasan_save_track+0x3e/0x80
[  563.342842][T23696]  kasan_save_free_info+0x46/0x50
[  563.347852][T23696]  __kasan_slab_free+0x5c/0x80
[  563.352609][T23696]  kfree+0x1c1/0x610
[  563.356489][T23696]  em28xx_v4l2_init+0x1683/0x2e70
[  563.361511][T23696]  em28xx_init_extension+0x120/0x1c0
[  563.366825][T23696]  process_one_work+0x949/0x15a0
[  563.371777][T23696]  worker_thread+0xb46/0x1140
[  563.376467][T23696]  kthread+0x388/0x470
[  563.380529][T23696]  ret_from_fork+0x51b/0xa40
[  563.385104][T23696]  ret_from_fork_asm+0x1a/0x30
[  563.389857][T23696] 
[  563.392165][T23696] The buggy address belongs to the object at ffff88806429c000
[  563.392165][T23696]  which belongs to the cache kmalloc-8k of size 8192
[  563.406203][T23696] The buggy address is located 1864 bytes inside of
[  563.406203][T23696]  freed 8192-byte region [ffff88806429c000, ffff88806429e000)
[  563.420164][T23696] 
[  563.422476][T23696] The buggy address belongs to the physical page:
[  563.428886][T23696] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64298
[  563.437983][T23696] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  563.446462][T23696] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  563.453984][T23696] page_type: f5(slab)
[  563.457958][T23696] raw: 00fff00000000040 ffff88813ff27280 dead000000000100 dead000000000122
[  563.466526][T23696] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  563.475094][T23696] head: 00fff00000000040 ffff88813ff27280 dead000000000100 dead000000000122
[  563.483751][T23696] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  563.492408][T23696] head: 00fff00000000003 ffffea000190a601 00000000ffffffff 00000000ffffffff
[  563.501064][T23696] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  563.509715][T23696] page dumped because: kasan: bad access detected
[  563.516110][T23696] page_owner tracks the page as allocated
[  563.521822][T23696] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 799, tgid 799 (kworker/0:2), ts 291711561806, free_ts 283889329627
[  563.541171][T23696]  post_alloc_hook+0x231/0x280
[  563.545930][T23696]  get_page_from_freelist+0x24dc/0x2580
[  563.551457][T23696]  __alloc_frozen_pages_noprof+0x18d/0x380
[  563.557251][T23696]  alloc_pages_mpol+0x232/0x4a0
[  563.562088][T23696]  allocate_slab+0x87/0x660
[  563.566573][T23696]  ___slab_alloc+0x150/0x6a0
[  563.571145][T23696]  __kmalloc_noprof+0x18a/0x760
[  563.575982][T23696]  __sta_info_alloc+0xce5/0x2630
[  563.580907][T23696]  ieee80211_ibss_rx_no_sta+0x3e1/0x730
[  563.586439][T23696]  ieee80211_prepare_and_rx_handle+0x3ad9/0x67f0
[  563.592766][T23696]  ieee80211_rx_list+0x266e/0x3050
[  563.597887][T23696]  ieee80211_rx_napi+0x1b1/0x3e0
[  563.602815][T23696]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  563.608793][T23696]  tasklet_action_common+0x2da/0x4b0
[  563.614096][T23696]  handle_softirqs+0x22a/0x7c0
[  563.618946][T23696]  do_softirq+0x76/0xd0
[  563.623090][T23696] page last free pid 10 tgid 10 stack trace:
[  563.629047][T23696]  __free_frozen_pages+0xc01/0xd80
[  563.634149][T23696]  vfree+0x25a/0x400
[  563.638031][T23696]  delayed_vfree_work+0x55/0x80
[  563.642869][T23696]  process_one_work+0x949/0x15a0
[  563.647793][T23696]  worker_thread+0xb46/0x1140
[  563.652458][T23696]  kthread+0x388/0x470
[  563.656518][T23696]  ret_from_fork+0x51b/0xa40
[  563.661109][T23696]  ret_from_fork_asm+0x1a/0x30
[  563.665886][T23696] 
[  563.668195][T23696] Memory state around the buggy address:
[  563.673806][T23696]  ffff88806429c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  563.681860][T23696]  ffff88806429c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  563.689907][T23696] >ffff88806429c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  563.697946][T23696]                                               ^
[  563.704340][T23696]  ffff88806429c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  563.712384][T23696]  ffff88806429c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  563.720424][T23696] ==================================================================
[  563.734882][  T799] em28xx 3-1:0.132: Closing input extension
[  563.783587][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  563.810272][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  563.907661][T23696] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  563.914915][T23696] CPU: 0 UID: 0 PID: 23696 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  563.925508][T23696] Tainted: [L]=SOFTLOCKUP
[  563.929826][T23696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  563.939877][T23696] Call Trace:
[  563.943150][T23696]  <TASK>
[  563.946082][T23696]  vpanic+0x56c/0xa60
[  563.950079][T23696]  ? __pfx_vpanic+0x10/0x10
[  563.954582][T23696]  ? __pfx___schedule+0x10/0x10
[  563.959543][T23696]  panic+0xc5/0xd0
[  563.963264][T23696]  ? __pfx_panic+0x10/0x10
[  563.967683][T23696]  ? preempt_schedule_common+0x82/0xd0
[  563.973145][T23696]  ? v4l2_fh_open+0xac/0x420
[  563.977731][T23696]  check_panic_on_warn+0x89/0xb0
[  563.982684][T23696]  ? v4l2_fh_open+0xac/0x420
[  563.987286][T23696]  end_report+0x6f/0x140
[  563.991550][T23696]  kasan_report+0x128/0x150
[  563.996055][T23696]  ? v4l2_fh_open+0xac/0x420
[  564.000639][T23696]  v4l2_fh_open+0xac/0x420
[  564.005062][T23696]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  564.011056][T23696]  em28xx_v4l2_open+0x157/0x9a0
[  564.015924][T23696]  ? do_raw_spin_lock+0x12b/0x2f0
[  564.020971][T23696]  v4l2_open+0x1bf/0x3a0
[  564.025226][T23696]  chrdev_open+0x4cd/0x5e0
[  564.029651][T23696]  ? __pfx_chrdev_open+0x10/0x10
[  564.034613][T23696]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  564.041006][T23696]  ? __pfx_chrdev_open+0x10/0x10
[  564.045955][T23696]  do_dentry_open+0x785/0x14e0
[  564.050732][T23696]  vfs_open+0x3b/0x340
[  564.054817][T23696]  ? path_openat+0x2df0/0x3860
[  564.059594][T23696]  path_openat+0x2e08/0x3860
[  564.064212][T23696]  ? __pfx_stack_trace_save+0x10/0x10
[  564.069599][T23696]  ? stack_depot_save_flags+0x33/0x810
[  564.075072][T23696]  ? __pfx_path_openat+0x10/0x10
[  564.080028][T23696]  ? __x64_sys_openat+0x138/0x170
[  564.085085][T23696]  ? __lock_acquire+0x6b5/0x2cf0
[  564.090039][T23696]  do_file_open+0x23e/0x4a0
[  564.094558][T23696]  ? __pfx_do_file_open+0x10/0x10
[  564.099630][T23696]  ? _raw_spin_unlock+0x28/0x50
[  564.104497][T23696]  ? alloc_fd+0x64b/0x6c0
[  564.108847][T23696]  do_sys_openat2+0x113/0x200
[  564.113541][T23696]  ? __pfx_do_sys_openat2+0x10/0x10
[  564.118760][T23696]  ? exc_page_fault+0x6a/0xc0
[  564.123447][T23696]  ? do_user_addr_fault+0xc6f/0x1340
[  564.128728][T23696]  __x64_sys_openat+0x138/0x170
[  564.133599][T23696]  do_syscall_64+0xe2/0xf80
[  564.138090][T23696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.144137][T23696]  ? trace_irq_disable+0x37/0x100
[  564.149149][T23696]  ? clear_bhb_loop+0x40/0x90
[  564.153808][T23696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.159678][T23696] RIP: 0033:0x7f7f18aa7407
[  564.164072][T23696] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  564.183656][T23696] RSP: 002b:00007ffcaea6edc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  564.192093][T23696] RAX: ffffffffffffffda RBX: 00007f7f19268880 RCX: 00007f7f18aa7407
[  564.200050][T23696] RDX: 0000000000000000 RSI: 00007ffcaea70f1b RDI: ffffffffffffff9c
[  564.208000][T23696] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  564.215948][T23696] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  564.223900][T23696] R13: 00007ffcaea6f010 R14: 00007f7f193cf000 R15: 000055d25b44e4d8
[  564.231880][T23696]  </TASK>
[  564.235254][T23696] Kernel Offset: disabled
[  564.239559][T23696] Rebooting in 86400 seconds..