last executing test programs:

8m58.559043518s ago: executing program 0 (id=1532):
r0 = socket(0x1, 0x800, 0x22d)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000031140902000000000000000008004b0000"], 0x18}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000f14000125bd7000fddbdf2508004500737270000800010000000000080001000200b23d93f15441d0ec80a090c22a6c430000090045006973736d0000000008000100020000000a00450069706f696200000008"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0xc801)
bind$unix(r3, &(0x7f0000000040)=@abs={0x1}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
socket$inet6(0x10, 0x80000, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)

8m57.569894573s ago: executing program 0 (id=1538):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
unshare(0x2a020400)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
read(r1, &(0x7f0000000180)=""/187, 0xbb)
syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "e6fb1c4cc7848c35c1e2d7fff427b706"}]}}}}}}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x27c})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x37)

8m57.471358585s ago: executing program 0 (id=1539):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x47, 0xb2, 0x37, 0x8, 0x19d2, 0x78, 0x61be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x5, 0x80, 0xf3, [{{0x9, 0x4, 0x29, 0x12, 0x0, 0x69, 0xf6, 0x2b, 0x1}}, {{0x9, 0x4, 0x6, 0xf5, 0x0, 0xb0, 0xeb, 0x6e, 0x6}}]}}]}}, &(0x7f0000000240)={0x61, 0x0, 0x2c, 0x0})
r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r1 = shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
shmdt(r1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\v\x00'}, @main=@item_4={0x3, 0x0, 0x9, "d12f3eb8"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

8m55.342453107s ago: executing program 0 (id=1548):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x5, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x63ce1180, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x1, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x2, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x4, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x8002, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x1, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x4, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x10001, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x8000, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x10000, 0xfffffff7, 0x7, 0x8, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x4, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x10, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x4000006, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x1ff, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x1007, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r6 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x67a3, 0x80)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250)

8m53.851645323s ago: executing program 0 (id=1553):
syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x6, 0x142)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000240)=0x8)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000001c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86)
r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r4, r3, 0x80000)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r9 = socket(0x2, 0x80805, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="1cf800", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x3, 0x7, 0x34, 0x66, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0xb, 0x6, [@rand_addr=0x64010101, @multicast2]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x10229, 0x7, 0x6}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)

8m53.515367034s ago: executing program 0 (id=1556):
r0 = socket$netlink(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1, &(0x7f0000000340)=""/55, 0x37}, 0x8}, {{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/234, 0xea}, {&(0x7f0000001840)=""/160, 0xa0}, {&(0x7f0000001a80)=""/168, 0xa8}], 0x7, &(0x7f00000019c0)=""/67, 0x43}, 0x80}], 0x2, 0x40000003, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r1 = socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = epoll_create(0x1000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x8})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4, 0x10000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

8m52.36820219s ago: executing program 32 (id=1556):
r0 = socket$netlink(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1, &(0x7f0000000340)=""/55, 0x37}, 0x8}, {{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/234, 0xea}, {&(0x7f0000001840)=""/160, 0xa0}, {&(0x7f0000001a80)=""/168, 0xa8}], 0x7, &(0x7f00000019c0)=""/67, 0x43}, 0x80}], 0x2, 0x40000003, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r1 = socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = epoll_create(0x1000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x8})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4, 0x10000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
sendfile(r8, r7, &(0x7f0000002080)=0x3a, 0x23b)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

2m55.405923631s ago: executing program 4 (id=2775):
uname(&(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x81)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000044000000", @ANYBLOB="08002600851600000a0018"], 0x4c}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0x1, 0x8, 0x4, 0x0, 0x2, 0x40000000}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x6, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x5})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x8000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x4002}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x14, 0x29, 0x3b}}, @rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x38}, 0x24004091)

2m54.771576789s ago: executing program 4 (id=2777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
ioctl$VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f0000000100)={0xd, @raw_data="b695fe9b2e914605bf4a3998d8ad3b81b3bbf0541cf5206e2a3d68a886ec123da2dd644442c5780c5d2409c149e149220575f8323c59c011e3f781252b24c04e93c21951f20bd9d273995d02718397d6289b78552c4b261e29a30bcea0d024daf317d5848e2592538134f652a9b6974e7a6b999178241dfcd5b6b2c214e62ff6056460900bf30e01a01346020602b3413954265502da1cb18eec5a3f3c565cf8479604718148fb511c3cd59eb4246f09bfc8da3ebf7dae9f9fba8423d1d8a8fbd2827f7c6b9f57d1"})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1ec, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c4, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x55, 0x3, "a161b5221595896878ec6610805ab6e50d3346dbb1cbe8487db63ea9f662c5f4686d678865f8001f2d4e5bbfd47eaa65dcfed3331612667e7590cdf48a3de1c1caca952076b1e66d4a0f6a017d97182a37"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x9b, 0x3, "4dbd053cce432dc42fd43768f1fd9a9ad7b5bb90b57f8643ce79abafeab09108939faa00baf9f80486bdc5c8341aa04b5cc8294bf0ee77ab5cdff0935e34f95c6e46f26e59e822f77aed08cc23613a5ce1383c33baad7d07dea4180e375b7e6234b12f6423d194249ca4d368c602fb27de41e16a2878b168d469bdefc9fa3cae7b459d7ed58d11dce70f1481c4efae8e3402e7b373cb0b"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0xa5, 0x3, "fa7296dde9896c12f3a9bef38745977beb5b0a62d36ea7f5c04549bf38206ae40fa9aaf51fd25cba6dbc555eed8056a5037c712c374f474d1df5a36ae394eb3682616400d0a77865808c082e63054833fcf112a732e445469bd696b0ef179e52ca28374ba4163edacd4631ae63ec05fd6f57c433e49a32200f642ec3822cfb18976f63e791af7f4009ba6309ab6b2dcc091250fe4299a49b52c6ef9331074000c9"}]}]}, 0x1ec}}, 0x20000004)

2m54.499152976s ago: executing program 4 (id=2779):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)={0x84, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x20}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x800}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x84}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0x8)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})
gettid()
socket$inet6(0xa, 0x80005, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
close(0x3)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000540)={0x8, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000380)=""/47, 0x2f}], &(0x7f0000000400)=[0x5, 0xeabb, 0x1, 0x5, 0x81], 0x4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000400"/20, @ANYRES32=0x0, @ANYRES64=r8, @ANYBLOB='\x00'/28], 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x0, 0x8100}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x100}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x90}}, 0x0)
r13 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r13, 0x4004510f, &(0x7f0000000180)=0xffffffff)

2m53.515659033s ago: executing program 4 (id=2782):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4})
r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)={0x2, 0x0, @auto=[0x35, 0x1f, 0x13, 0x16]}, 0xc, 0xffffffffffffffff)
keyctl$read(0xb, r6, &(0x7f00000002c0)=""/32, 0x20)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x226)
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff)

2m52.269214823s ago: executing program 4 (id=2787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f00000000c0), 0x8)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4801)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
write$P9_RWRITE(r5, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x7}, 0xb)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x20040804}, 0x40)
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0xc005}, 0x40000)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, ' \x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x3, 0x0, 0x3}}}}}}}, 0x0)

2m51.578667538s ago: executing program 4 (id=2790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1e, 0x4, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x141002)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100), &(0x7f0000000140))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000010203f100000000000000000000100010080000000011779bbb9f9439a6e48eac59547e55e4000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000303010100000000ff00000000000000000000000020000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000100)=0x3)
write$UHID_CREATE2(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="563ee5571333a2bc7ee89877bcf09b5abbda7e0fb739a757be269980559e4f483c5b30af58be7dd782b42db07b4096de36151d73ce87b620844687c6db944c4602adb439023b02204e125e6d21c913cd7817af0a6466ac7b574ac8"], 0x118)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, 0xffffffffffffffff, 0xb19be000)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
dup3(r7, r6, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6erspan0\x00'})
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000080))

2m51.046559244s ago: executing program 33 (id=2790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1e, 0x4, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x141002)
syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100), &(0x7f0000000140))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000010203f100000000000000000000100010080000000011779bbb9f9439a6e48eac59547e55e4000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000303010100000000ff00000000000000000000000020000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000100)=0x3)
write$UHID_CREATE2(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="563ee5571333a2bc7ee89877bcf09b5abbda7e0fb739a757be269980559e4f483c5b30af58be7dd782b42db07b4096de36151d73ce87b620844687c6db944c4602adb439023b02204e125e6d21c913cd7817af0a6466ac7b574ac8"], 0x118)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, 0xffffffffffffffff, 0xb19be000)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
dup3(r7, r6, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6erspan0\x00'})
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000080))

6.514617704s ago: executing program 6 (id=3521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x114, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x55, 0x3, "a161b5221595896878ec6610805ab6e50d3346dbb1cbe8487db63ea9f662c5f4686d678865f8001f2d4e5bbfd47eaa65dcfed3331612667e7590cdf48a3de1c1caca952076b1e66d4a0f6a017d97182a37"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x9b, 0x3, "4dbd053cce432dc42fd43768f1fd9a9ad7b5bb90b57f8643ce79abafeab09108939faa00baf9f80486bdc5c8341aa04b5cc8294bf0ee77ab5cdff0935e34f95c6e46f26e59e822f77aed08cc23613a5ce1383c33baad7d07dea4180e375b7e6234b12f6423d194249ca4d368c602fb27de41e16a2878b168d469bdefc9fa3cae7b459d7ed58d11dce70f1481c4efae8e3402e7b373cb0b"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}]}]}, 0x13c}}, 0x20000004)

6.051054834s ago: executing program 6 (id=3523):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r3 = dup(r1)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2008cc10}, 0x4882)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x200003, 0x0, 0x106, 0xd}}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

5.78908455s ago: executing program 6 (id=3527):
socket$key(0xf, 0x3, 0x2)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xf63ca0d1cb10f77c)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f})
add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0xeb, 0x3}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4)

5.227972374s ago: executing program 3 (id=3534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x134, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_IE={0x55, 0x3, "a161b5221595896878ec6610805ab6e50d3346dbb1cbe8487db63ea9f662c5f4686d678865f8001f2d4e5bbfd47eaa65dcfed3331612667e7590cdf48a3de1c1caca952076b1e66d4a0f6a017d97182a37"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x9b, 0x3, "4dbd053cce432dc42fd43768f1fd9a9ad7b5bb90b57f8643ce79abafeab09108939faa00baf9f80486bdc5c8341aa04b5cc8294bf0ee77ab5cdff0935e34f95c6e46f26e59e822f77aed08cc23613a5ce1383c33baad7d07dea4180e375b7e6234b12f6423d194249ca4d368c602fb27de41e16a2878b168d469bdefc9fa3cae7b459d7ed58d11dce70f1481c4efae8e3402e7b373cb0b"}]}]}, 0x134}}, 0x20000004)

5.013868513s ago: executing program 3 (id=3536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x20000004)

4.643052337s ago: executing program 3 (id=3537):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000))
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x6, 0x200, @loopback, 0x7}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r3}, 0x14)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), 0x6a)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
writev(r4, &(0x7f0000000080)=[{0x0}], 0x1)

4.011960905s ago: executing program 2 (id=3541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$loop(0x0, 0x1, 0x400000)
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1)
r4 = fsmount(r3, 0x0, 0x8)
getdents(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x58}}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff007, 0x81, 0x7f, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10)
r9 = socket(0x400000000010, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xffff}}}]}, 0x38}}, 0x0)

3.763405546s ago: executing program 1 (id=3543):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/148, 0x94}, 0x100}], 0x1, 0x2000, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0xa0200, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000021}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3fb, 0x100, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x9f33236133c7763c}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x45, &(0x7f0000000080)={0x40, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x1, 0xffffffff, 0x0})

3.054071977s ago: executing program 5 (id=3544):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0), 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

2.911467191s ago: executing program 5 (id=3545):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0)

2.811521582s ago: executing program 2 (id=3546):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180001002dbd70000000000002208067fd00fd070000000008001e00030000000c00090040002002", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)}], 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000340))
r3 = socket$nl_route(0x10, 0x3, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x36)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700))
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44)
pipe(&(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf)

2.696147107s ago: executing program 5 (id=3547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc9, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e21, 0xfb5, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfd7)

2.611503695s ago: executing program 1 (id=3548):
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r0 = userfaultfd(0x80801)
r1 = socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @loopback={0x30000, 0xffff888101827518}, 0x20, 0x0, 0x38dc586a}})
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
pread64(r0, &(0x7f00000001c0)=""/153, 0x99, 0x30c4)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
timer_settime(0x0, 0x1, 0x0, 0x0)
io_setup(0x7f, &(0x7f0000000080))
r3 = socket$inet6(0xa, 0x2, 0xfffffffc)
syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[], 0x0)
bind$inet6(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000e6f41f0800044000"], 0x6c}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xc3, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x24, 0x3, 0x0, 0x2, 0x0, 0x4, 0xfc, 0x0, 0xfc, 0x9, 0x0, 0x401, 0xfbfe, 0x0, 0x0, 0x40000045}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}})
r6 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x13, r6, 0x180000000)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

2.502360085s ago: executing program 5 (id=3549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180001002dbd70000000000002208067fd00fd070000000008001e00030000000c00090040002002", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)}], 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000340))
r3 = socket$nl_route(0x10, 0x3, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x36)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700))
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44)
pipe(&(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf)

2.249288121s ago: executing program 1 (id=3550):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)

2.241875803s ago: executing program 6 (id=3551):
r0 = getpid()
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(r1, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x208102, 0xa8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

2.105315749s ago: executing program 6 (id=3552):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000002640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00e800009c1100fe800000000000"], 0x0)

1.924101489s ago: executing program 6 (id=3553):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x26020480)
socket(0x10, 0x80002, 0x2)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c00028005d7160a8800000014000180080001"], 0x80}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
r5 = socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x4, &(0x7f00000001c0)={0x0, 0x4, 0x1, @thr={&(0x7f0000000100)="bb9e9debed1d5cbdb87d79d763eb20b6fa7ab1e9523200644d0e26c975c65ed19cf620be402f5df3d16d7227f1bbba5bf9e0e90122149eca57fce28dc78ed1b40845b04677f613e47777", &(0x7f0000000180)="393bfc01fb2e3a529a6a8764805b0b015c931c3537ffd3b1a5e11179eced228cb668bb1c2952163370b6082a1e8a"}}, &(0x7f0000000240))
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x2000, &(0x7f0000002000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20780, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x23}, 0x94)

1.846120691s ago: executing program 2 (id=3554):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r2, 0x1)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1.663990957s ago: executing program 2 (id=3555):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0), 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

1.425115101s ago: executing program 5 (id=3556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$loop(0x0, 0x1, 0x400000)
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1)
r4 = fsmount(r3, 0x0, 0x8)
getdents(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x58}}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff007, 0x81, 0x7f, 0x1}, 0x50)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10)
r9 = socket(0x400000000010, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xffff}}}]}, 0x38}}, 0x0)

1.20285645s ago: executing program 3 (id=3557):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0)

1.201868024s ago: executing program 2 (id=3558):
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f00000001c0)=@ethernet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/218, 0xda}], 0x2, &(0x7f0000001340)=""/88, 0x58}, 0x10}, {{&(0x7f00000013c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000000140)=""/33, 0x21}], 0x2, &(0x7f0000001540)=""/9, 0x9}, 0xc6e}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)=""/109, 0x6d}, {&(0x7f0000003c40)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/39, 0x27}, 0x7}, {{&(0x7f0000001680)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001800)=""/207, 0xcf}, {0x0}, {0x0}], 0x3, &(0x7f0000002000)=""/244, 0xf4}, 0x3}, {{&(0x7f0000001b80)=@nl, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/135, 0x87}], 0x1, &(0x7f0000001d80)=""/8, 0x8}, 0x7}, {{&(0x7f0000001dc0)=@ax25={{0x3, @bcast}, [@rose, @netrom, @default, @netrom, @remote, @default, @rose, @bcast]}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/189, 0xbd}], 0x1}, 0x81}], 0x6, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67ab2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb0"}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000002c40)=""/4096, 0x45}], 0x3}, 0x7fff}], 0x1, 0x20, 0x0)

1.075407701s ago: executing program 3 (id=3559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc9, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e21, 0xfb5, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfd7)

843.606929ms ago: executing program 3 (id=3560):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000800)={0x5, 0x79f, 0x0, 0x4})
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x45, 0x6, 0x1, 0xcf}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x8, 0x62}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x23, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x5, 0x28}}}}}]}}]}}, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r1, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000840), 0xfffffffffffff9e8, 0x4000)
ioctl$EVIOCGMASK(r3, 0x80104592, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xc)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

457.991636ms ago: executing program 5 (id=3561):
socket$key(0xf, 0x3, 0x2)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800})
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xf63ca0d1cb10f77c)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f})
add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0xeb, 0x3}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4)

404.857458ms ago: executing program 1 (id=3562):
r0 = getpid()
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(r1, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x208102, 0xa8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

245.015116ms ago: executing program 1 (id=3563):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000002640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00e800009c1100fe800000000000"], 0x0)

190.543069ms ago: executing program 2 (id=3564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180001002dbd70000000000002208067fd00fd070000000008001e00030000000c00090040002002", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x80}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)}], 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000340))
r3 = socket$nl_route(0x10, 0x3, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x36)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700))
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44)
pipe(&(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
splice(r6, 0x0, r8, 0x0, 0x10d00, 0xf)

0s ago: executing program 1 (id=3565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = getpgrp(0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0)
rmdir(&(0x7f0000000200)='./cgroup/../file0\x00')
read(r8, &(0x7f0000000240)=""/104, 0x68)
r9 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r9, 0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x600})
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1433010000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r14, @ANYBLOB="0a0034000101fe000101000007001501"], 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x0)

kernel console output (not intermixed with test programs):

092] vhci_hcd: release socket
[ 1017.560924][ T1092] vhci_hcd: disconnect device
[ 1017.577940][ T1092] vhci_hcd: stop threads
[ 1017.586619][ T1092] vhci_hcd: release socket
[ 1017.607162][ T1092] vhci_hcd: disconnect device
[ 1017.949832][T31386] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1017.977390][T31386] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1017.983637][T32083] vhci_hcd: connection closed
[ 1017.987669][ T4446] vhci_hcd: stop threads
[ 1018.001347][T31386] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1018.041324][ T4446] vhci_hcd: release socket
[ 1018.055647][ T4446] vhci_hcd: disconnect device
[ 1018.072892][T31386] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1018.425716][T31386] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.574117][T31386] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.634720][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.642206][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.729612][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.737001][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.835513][   T43] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1019.004152][   T43] usb 2-1: Using ep0 maxpacket: 32
[ 1019.035235][   T43] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 1019.068490][   T43] usb 2-1: config 0 has no interface number 0
[ 1019.080916][T31386] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.092411][   T43] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1019.145571][   T43] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1019.182815][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.190935][   T43] usb 2-1: Product: syz
[ 1019.209426][   T43] usb 2-1: Manufacturer: syz
[ 1019.253505][   T43] usb 2-1: SerialNumber: syz
[ 1019.293019][   T43] usb 2-1: config 0 descriptor??
[ 1019.315272][T31386] veth0_vlan: entered promiscuous mode
[ 1019.338070][T31386] veth1_vlan: entered promiscuous mode
[ 1019.351815][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1019.351835][   T30] audit: type=1326 audit(1754842700.563:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.368018][   T43] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1019.472090][   T30] audit: type=1326 audit(1754842700.563:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.499951][T31386] veth0_macvtap: entered promiscuous mode
[ 1019.517193][T31386] veth1_macvtap: entered promiscuous mode
[ 1019.524180][   T43] em28xx 2-1:0.132: Video interface 132 found:
[ 1019.545500][   T30] audit: type=1326 audit(1754842700.603:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.618994][   T30] audit: type=1326 audit(1754842700.603:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.641230][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1019.679491][   T30] audit: type=1326 audit(1754842700.603:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.741702][   T43] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 1019.757878][   T30] audit: type=1326 audit(1754842700.603:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.800860][   T30] audit: type=1326 audit(1754842700.603:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.913424][   T30] audit: type=1326 audit(1754842700.603:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1019.981031][   T30] audit: type=1326 audit(1754842700.613:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1020.003860][   T30] audit: type=1326 audit(1754842700.613:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32199 comm="syz.5.3047" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1020.047092][T31386] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1020.124114][T31386] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1020.236770][ T4446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.316371][ T4446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.456083][ T4446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.470636][ T4446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.626706][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.654224][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.693660][T30913] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1020.711206][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.726378][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.882483][T30913] usb 7-1: Using ep0 maxpacket: 16
[ 1020.895488][T30913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1020.917728][T30913] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1020.929553][T30913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.939845][   T43] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1020.950268][   T43] em28xx 2-1:0.132: board has no eeprom
[ 1020.959108][T30913] usb 7-1: Product: syz
[ 1020.964447][T30913] usb 7-1: Manufacturer: syz
[ 1020.969383][T30913] usb 7-1: SerialNumber: syz
[ 1020.979164][T30913] usb 7-1: config 0 descriptor??
[ 1020.994779][T30913] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1021.004227][T30913] em28xx 7-1:0.0: DVB interface 0 found: bulk
[ 1021.032213][   T43] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1021.043235][   T43] em28xx 2-1:0.132: analog set to bulk mode.
[ 1021.049453][T30898] em28xx 2-1:0.132: Registering V4L2 extension
[ 1021.096766][   T43] usb 2-1: USB disconnect, device number 42
[ 1021.134388][   T43] em28xx 2-1:0.132: Disconnecting em28xx
[ 1021.536022][T30898] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 1021.552369][T30898] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 1021.570064][T30898] em28xx 2-1:0.132: No AC97 audio processor
[ 1021.588213][T30898] usb 2-1: Decoder not found
[ 1021.609736][T30913] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[ 1021.622429][T30898] em28xx 2-1:0.132: failed to create media graph
[ 1021.629176][T30898] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 1021.647542][T30898] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 1021.670119][   T43] em28xx 2-1:0.132: Closing input extension
[ 1021.729072][   T43] em28xx 2-1:0.132: Freeing device
[ 1021.962160][ T5936] vhci_hcd: vhci_device speed not set
[ 1022.062467][T30913] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1022.101156][T30913] em28xx 7-1:0.0: board has no eeprom
[ 1022.213255][T30913] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1022.241870][T30913] em28xx 7-1:0.0: dvb set to bulk mode.
[ 1022.248173][T30898] em28xx 7-1:0.0: Binding DVB extension
[ 1022.275357][T30913] usb 7-1: USB disconnect, device number 13
[ 1022.314177][T30913] em28xx 7-1:0.0: Disconnecting em28xx
[ 1022.482647][T30898] em28xx 7-1:0.0: Registering input extension
[ 1022.489037][T30913] em28xx 7-1:0.0: Closing input extension
[ 1022.509550][T32341] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1022.558754][T30913] em28xx 7-1:0.0: Freeing device
[ 1022.941127][T17883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1022.959347][T17883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1022.960303][T32357] veth0_vlan: entered allmulticast mode
[ 1022.978173][T17883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1022.995358][T17883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1023.011117][T17883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1023.238842][    T9] usb usb44-port1: attempt power cycle
[ 1023.408100][ T4446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.438053][ T4446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1023.700756][ T4446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.711937][ T4446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1023.846145][    T9] usb usb44-port1: unable to enumerate USB device
[ 1023.890643][ T4446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.928382][ T4446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1024.546823][T30898] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1024.745718][T30898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1024.792151][T30898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1024.816437][T32380] chnl_net:caif_netlink_parms(): no params data found
[ 1024.839305][T30898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1024.898192][T30898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1024.910368][ T4446] bridge_slave_1: left allmulticast mode
[ 1024.925839][ T4446] bridge_slave_1: left promiscuous mode
[ 1024.946654][T30898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.955730][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.963724][T32554] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1024.970373][T32554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1024.978932][T30898] usb 7-1: config 0 descriptor??
[ 1025.023518][T32554] vhci_hcd vhci_hcd.0: Device attached
[ 1025.027007][ T4446] bridge_slave_0: left allmulticast mode
[ 1025.036597][T32561] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[ 1025.043239][T32561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1025.051302][ T4446] bridge_slave_0: left promiscuous mode
[ 1025.083362][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.087863][T32554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1025.092312][ T5184] Bluetooth: hci1: command tx timeout
[ 1025.126721][T32561] vhci_hcd vhci_hcd.0: Device attached
[ 1025.165861][T32564] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(20)
[ 1025.172514][T32564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1025.216031][T32564] vhci_hcd vhci_hcd.0: Device attached
[ 1025.262211][ T5936] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[ 1025.279154][T32561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1025.290458][T32554] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16)
[ 1025.297197][T32554] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1025.299173][T32561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1025.352169][T32554] vhci_hcd vhci_hcd.0: Device attached
[ 1025.395483][T32561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1025.461346][T32554] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(30)
[ 1025.468008][T32554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1025.508398][T30898] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1025.531801][T32554] vhci_hcd vhci_hcd.0: Device attached
[ 1025.628979][T32568] vhci_hcd: connection closed
[ 1025.630705][T32565] vhci_hcd: connection closed
[ 1025.635583][T32556] vhci_hcd: connection reset by peer
[ 1025.644824][ T8005] vhci_hcd: stop threads
[ 1025.649721][T32562] vhci_hcd: connection closed
[ 1025.650144][ T8005] vhci_hcd: release socket
[ 1025.690046][ T8005] vhci_hcd: disconnect device
[ 1025.710244][ T8005] vhci_hcd: stop threads
[ 1025.742093][ T8005] vhci_hcd: release socket
[ 1025.756872][ T8005] vhci_hcd: disconnect device
[ 1025.777071][ T8005] vhci_hcd: stop threads
[ 1025.781371][ T8005] vhci_hcd: release socket
[ 1025.814804][ T8005] vhci_hcd: disconnect device
[ 1025.835281][ T8005] vhci_hcd: stop threads
[ 1025.839581][ T8005] vhci_hcd: release socket
[ 1025.867891][ T8005] vhci_hcd: disconnect device
[ 1026.080547][    C1] plantronics 0003:047F:FFFF.0028: hid_field_extract() called with n (132) > 32! (kworker/u8:9)
[ 1026.092167][T30898] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1026.192274][T32575] vhci_hcd: connection closed
[ 1026.197464][   T12] vhci_hcd: stop threads
[ 1026.236525][   T12] vhci_hcd: release socket
[ 1026.254495][   T12] vhci_hcd: disconnect device
[ 1026.277048][T30898] usb 4-1: Using ep0 maxpacket: 8
[ 1026.285464][T32371] usb 7-1: USB disconnect, device number 14
[ 1026.325201][T30898] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1026.353374][T30898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.361427][T30898] usb 4-1: Product: syz
[ 1026.382355][T30898] usb 4-1: Manufacturer: syz
[ 1026.389580][T30898] usb 4-1: SerialNumber: syz
[ 1026.399262][ T4446] 
 (unregistering): (slave bridge0): Releasing backup interface
[ 1026.413405][T30898] usb 4-1: config 0 descriptor??
[ 1026.437714][ T4446] bridge0 (unregistering): left promiscuous mode
[ 1026.448947][ T4446] bridge0 (unregistering): left allmulticast mode
[ 1026.632774][T30898] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1026.776177][ T4446] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1026.787978][ T4446] bond_slave_0: left promiscuous mode
[ 1026.794316][ T4446] bond_slave_0: left allmulticast mode
[ 1026.805302][ T4446] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1026.816136][ T4446] bond_slave_1: left promiscuous mode
[ 1026.821937][ T4446] bond_slave_1: left allmulticast mode
[ 1026.847809][ T4446] 
 (unregistering): Released all slaves
[ 1026.918192][ T4446] bond1 (unregistering): Released all slaves
[ 1026.958757][ T4446] bond2 (unregistering): Released all slaves
[ 1027.000169][ T4446] bond3 (unregistering): Released all slaves
[ 1027.048860][ T4446] bond4 (unregistering): Released all slaves
[ 1027.081109][ T4446] bond5 (unregistering): Released all slaves
[ 1027.116952][ T4446] bond6 (unregistering): Released all slaves
[ 1027.172263][ T5184] Bluetooth: hci1: command tx timeout
[ 1027.487469][ T4446] tipc: Left network mode
[ 1027.720582][T32380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.738080][T32380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1027.762220][T32380] bridge_slave_0: entered allmulticast mode
[ 1027.781476][T32380] bridge_slave_0: entered promiscuous mode
[ 1027.814195][T32380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.827645][T32380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.835164][T32380] bridge_slave_1: entered allmulticast mode
[ 1027.847549][T30898] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1027.865045][T32380] bridge_slave_1: entered promiscuous mode
[ 1027.876249][T30898] usb 4-1: USB disconnect, device number 20
[ 1028.118635][T32380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1028.166958][T32380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.422536][T32751] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[ 1028.429206][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1028.483139][T32751] vhci_hcd vhci_hcd.0: Device attached
[ 1028.521080][  T307] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15)
[ 1028.527756][  T307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1028.584282][T32751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1028.633725][  T307] vhci_hcd vhci_hcd.0: Device attached
[ 1028.660768][  T307] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(17)
[ 1028.667426][  T307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1028.705810][T32380] team0: Port device team_slave_0 added
[ 1028.730622][  T307] vhci_hcd vhci_hcd.0: Device attached
[ 1028.736311][    T9] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[ 1028.737761][T32380] team0: Port device team_slave_1 added
[ 1028.769162][T32751] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(19)
[ 1028.772189][T30898] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1028.775806][T32751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1028.813571][T32751] vhci_hcd vhci_hcd.0: Device attached
[ 1028.837062][  T307] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1028.885193][T32751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1028.950704][  T342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1028.986439][T30898] usb 4-1: Using ep0 maxpacket: 8
[ 1028.995691][  T307] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(32)
[ 1029.002096][T30898] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[ 1029.002414][  T307] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1029.021561][T30898] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.032929][T30898] usb 4-1: config 127 has no interface number 1
[ 1029.039233][T30898] usb 4-1: config 127 interface 171 has no altsetting 0
[ 1029.048883][  T307] vhci_hcd vhci_hcd.0: Device attached
[ 1029.058802][T30898] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 1029.074023][T30898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.086586][T32380] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1029.114888][T30898] usb 4-1: Product: syz
[ 1029.120352][T32380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.147101][T30898] usb 4-1: Manufacturer: syz
[ 1029.151819][T30898] usb 4-1: SerialNumber: syz
[ 1029.186758][  T321] vhci_hcd: connection closed
[ 1029.187093][T32380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1029.187185][  T316] vhci_hcd: connection closed
[ 1029.205359][T32764] vhci_hcd: connection reset by peer
[ 1029.205687][T32380] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1029.212285][  T308] vhci_hcd: connection closed
[ 1029.232884][   T49] vhci_hcd: stop threads
[ 1029.233228][T32380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1029.237615][   T49] vhci_hcd: release socket
[ 1029.237784][   T49] vhci_hcd: disconnect device
[ 1029.252201][ T5184] Bluetooth: hci1: command tx timeout
[ 1029.284603][T32380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1029.341164][   T49] vhci_hcd: stop threads
[ 1029.345613][   T49] vhci_hcd: release socket
[ 1029.350195][   T49] vhci_hcd: disconnect device
[ 1029.355799][   T49] vhci_hcd: stop threads
[ 1029.360132][   T49] vhci_hcd: release socket
[ 1029.365492][   T49] vhci_hcd: disconnect device
[ 1029.377692][   T49] vhci_hcd: stop threads
[ 1029.387864][   T49] vhci_hcd: release socket
[ 1029.390149][T30898] xr_serial 4-1:127.171: xr_serial converter detected
[ 1029.422374][   T49] vhci_hcd: disconnect device
[ 1029.437442][T30898] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[ 1029.455851][T30898] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1029.502713][T30898] usb 4-1: USB disconnect, device number 21
[ 1029.541292][T30898] xr_serial 4-1:127.171: device disconnected
[ 1029.790885][  T348] vhci_hcd: connection closed
[ 1029.791156][   T13] vhci_hcd: stop threads
[ 1029.822326][   T13] vhci_hcd: release socket
[ 1029.826847][   T13] vhci_hcd: disconnect device
[ 1029.861418][T32380] hsr_slave_0: entered promiscuous mode
[ 1029.897764][T32380] hsr_slave_1: entered promiscuous mode
[ 1029.929298][T32380] debugfs: 'hsr0' already exists in 'hsr'
[ 1029.943867][T32380] Cannot create hsr debugfs directory
[ 1030.055233][ T4446] hsr_slave_0: left promiscuous mode
[ 1030.075895][ T4446] hsr_slave_1: left promiscuous mode
[ 1030.086689][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1030.113288][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1030.141076][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1030.157977][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1030.178850][ T4446] batman_adv: batadv0: Removing interface: ipvlan0
[ 1030.278680][ T4446] veth1_macvtap: left promiscuous mode
[ 1030.334434][ T4446] veth0_macvtap: left promiscuous mode
[ 1030.365152][ T5936] vhci_hcd: vhci_device speed not set
[ 1030.733703][T15849] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1030.962277][T15849] usb 6-1: Using ep0 maxpacket: 16
[ 1030.975378][T15849] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1031.002057][T15849] usb 6-1: config 0 has no interface number 0
[ 1031.003411][  T467] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1031.009155][T15849] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1031.014776][  T467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1031.049986][  T467] vhci_hcd vhci_hcd.0: Device attached
[ 1031.078827][  T475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1031.079100][  T471] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15)
[ 1031.093646][  T471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1031.132132][T15849] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1031.153827][  T471] vhci_hcd vhci_hcd.0: Device attached
[ 1031.157507][T15849] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1031.202288][T15849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.235387][T15849] usb 6-1: config 0 descriptor??
[ 1031.299822][  T467] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14)
[ 1031.306501][  T467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1031.314707][T32371] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1031.323731][  T467] vhci_hcd vhci_hcd.0: Device attached
[ 1031.335707][ T5184] Bluetooth: hci1: command tx timeout
[ 1031.352906][  T471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21)
[ 1031.359551][  T471] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1031.399904][  T467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1031.410747][  T471] vhci_hcd vhci_hcd.0: Device attached
[ 1031.459954][  T467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1031.509427][  T467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1031.545819][  T467] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(30)
[ 1031.552493][  T467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1031.571168][  T467] vhci_hcd vhci_hcd.0: Device attached
[ 1031.659416][  T486] vhci_hcd: connection closed
[ 1031.659880][   T12] vhci_hcd: stop threads
[ 1031.660236][  T472] vhci_hcd: connection closed
[ 1031.668226][  T484] vhci_hcd: connection closed
[ 1031.675399][T30913] usb usb44-port1: attempt power cycle
[ 1031.682106][   T12] vhci_hcd: release socket
[ 1031.691285][   T12] vhci_hcd: disconnect device
[ 1031.700420][  T468] vhci_hcd: connection reset by peer
[ 1031.723484][   T12] vhci_hcd: stop threads
[ 1031.727832][   T12] vhci_hcd: release socket
[ 1031.752123][   T12] vhci_hcd: disconnect device
[ 1031.758779][   T12] vhci_hcd: stop threads
[ 1031.769845][   T12] vhci_hcd: release socket
[ 1031.782956][   T12] vhci_hcd: disconnect device
[ 1031.791874][   T12] vhci_hcd: stop threads
[ 1031.812105][   T12] vhci_hcd: release socket
[ 1031.848638][   T12] vhci_hcd: disconnect device
[ 1031.860705][T15849] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0029/input/input58
[ 1032.015673][T15849] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0029/input/input59
[ 1032.080822][T15849] uclogic 0003:28BD:0071.0029: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1
[ 1032.136227][T15849] usb 6-1: USB disconnect, device number 79
[ 1032.254606][  T526] fido_id[526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1032.282570][  T494] vhci_hcd: connection closed
[ 1032.286361][   T12] vhci_hcd: stop threads
[ 1032.293870][T30913] usb usb44-port1: unable to enumerate USB device
[ 1032.301094][   T12] vhci_hcd: release socket
[ 1032.308720][   T12] vhci_hcd: disconnect device
[ 1033.133180][   T43] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1033.277531][  T563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'.
[ 1033.289790][  T563] gretap0: entered promiscuous mode
[ 1033.307368][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1033.315028][   T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1033.331749][   T43] usb 6-1: config 0 has no interface number 0
[ 1033.350303][   T43] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1033.393715][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.423351][   T43] usb 6-1: Product: syz
[ 1033.427577][   T43] usb 6-1: Manufacturer: syz
[ 1033.454899][   T43] usb 6-1: SerialNumber: syz
[ 1033.474464][   T43] usb 6-1: config 0 descriptor??
[ 1033.525484][   T43] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1033.578343][   T43] usb 6-1: selecting invalid altsetting 1
[ 1033.589070][   T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1033.589471][  T617] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[ 1033.602891][  T617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1033.655052][   T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1033.659949][  T617] vhci_hcd vhci_hcd.0: Device attached
[ 1033.720209][  T628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1033.846274][  T627] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14)
[ 1033.846771][   T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1033.852927][  T627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1033.884389][  T627] vhci_hcd vhci_hcd.0: Device attached
[ 1033.955238][   T43] usb 6-1: media controller created
[ 1033.960652][  T617] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20)
[ 1033.967368][  T617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1033.978029][  T627] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(17)
[ 1033.984702][  T627] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1034.097229][  T627] vhci_hcd vhci_hcd.0: Device attached
[ 1034.101979][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1034.143916][  T617] vhci_hcd vhci_hcd.0: Device attached
[ 1034.167471][  T628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1034.245460][  T617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1034.255607][  T617] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1034.302748][  T617] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(30)
[ 1034.309415][  T617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1034.391196][  T617] vhci_hcd vhci_hcd.0: Device attached
[ 1034.490104][ T4446] IPVS: stop unused estimator thread 0...
[ 1034.499574][  T645] vhci_hcd: connection closed
[ 1034.499838][  T630] vhci_hcd: connection closed
[ 1034.501604][  T618] vhci_hcd: connection reset by peer
[ 1034.514916][  T639] vhci_hcd: connection closed
[ 1034.522425][   T61] vhci_hcd: stop threads
[ 1034.541692][   T61] vhci_hcd: release socket
[ 1034.582174][   T61] vhci_hcd: disconnect device
[ 1034.601672][   T61] vhci_hcd: stop threads
[ 1034.631645][   T61] vhci_hcd: release socket
[ 1034.671051][   T61] vhci_hcd: disconnect device
[ 1034.702225][   T61] vhci_hcd: stop threads
[ 1034.706533][   T61] vhci_hcd: release socket
[ 1034.734737][   T61] vhci_hcd: disconnect device
[ 1034.752145][   T61] vhci_hcd: stop threads
[ 1034.764911][   T61] vhci_hcd: release socket
[ 1034.784474][   T61] vhci_hcd: disconnect device
[ 1034.864456][    T9] vhci_hcd: vhci_device speed not set
[ 1035.084904][   T43] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1035.100056][   T43] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1035.114837][  T665] vhci_hcd: connection closed
[ 1035.117580][   T61] vhci_hcd: stop threads
[ 1035.119814][   T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1035.136507][   T61] vhci_hcd: release socket
[ 1035.169866][   T61] vhci_hcd: disconnect device
[ 1035.294026][   T43] usb 6-1: USB disconnect, device number 80
[ 1035.731644][  T737] netlink: 'syz.6.3139': attribute type 12 has an invalid length.
[ 1035.982746][T32380] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1036.034148][T32380] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1036.112451][T32380] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1036.156810][T32380] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1036.186547][T30914] usb usb46-port1: attempt power cycle
[ 1036.242712][  T770] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1036.249386][  T770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1036.269352][  T770] vhci_hcd vhci_hcd.0: Device attached
[ 1036.279559][  T770] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[ 1036.286319][  T770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1036.296149][  T770] vhci_hcd vhci_hcd.0: Device attached
[ 1036.315781][  T770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1036.379503][  T770] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18)
[ 1036.386155][  T770] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1036.442920][T32371] vhci_hcd: vhci_device speed not set
[ 1036.468009][  T770] vhci_hcd vhci_hcd.0: Device attached
[ 1036.469241][  T794] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(21)
[ 1036.480131][  T794] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1036.494866][  T794] vhci_hcd vhci_hcd.0: Device attached
[ 1036.504221][   T43] usb 43-1: new low-speed USB device number 4 using vhci_hcd
[ 1036.545482][  T800] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1036.560120][  T770] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1036.614659][  T794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1036.679573][  T770] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(30)
[ 1036.686322][  T770] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1036.757085][  T770] vhci_hcd vhci_hcd.0: Device attached
[ 1036.783600][T30914] usb usb46-port1: unable to enumerate USB device
[ 1036.804283][  T795] vhci_hcd: connection closed
[ 1036.811485][ T4446] vhci_hcd: stop threads
[ 1036.821312][  T771] vhci_hcd: connection reset by peer
[ 1036.821856][  T789] vhci_hcd: connection closed
[ 1036.826789][  T781] vhci_hcd: connection closed
[ 1036.842532][ T4446] vhci_hcd: release socket
[ 1036.856996][T32380] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1036.866970][ T4446] vhci_hcd: disconnect device
[ 1036.882779][ T4446] vhci_hcd: stop threads
[ 1036.891093][ T4446] vhci_hcd: release socket
[ 1036.902693][ T4446] vhci_hcd: disconnect device
[ 1036.910920][ T4446] vhci_hcd: stop threads
[ 1036.917596][ T4446] vhci_hcd: release socket
[ 1036.930587][T32380] 8021q: adding VLAN 0 to HW filter on device team0
[ 1036.941122][ T4446] vhci_hcd: disconnect device
[ 1036.952409][ T4446] vhci_hcd: stop threads
[ 1036.961098][ T4446] vhci_hcd: release socket
[ 1036.970630][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.977909][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1036.981411][ T4446] vhci_hcd: disconnect device
[ 1036.990713][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1037.029056][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1037.036360][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1037.168184][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1037.190464][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1037.226833][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1037.257692][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1037.307170][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1037.329946][T32380] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1037.336935][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.371609][    T9] usb 4-1: config 0 descriptor??
[ 1037.454313][  T806] vhci_hcd: connection closed
[ 1037.459109][ T4446] vhci_hcd: stop threads
[ 1037.491486][ T4446] vhci_hcd: release socket
[ 1037.521762][ T4446] vhci_hcd: disconnect device
[ 1037.538149][T32380] veth0_vlan: entered promiscuous mode
[ 1037.647129][T32380] veth1_vlan: entered promiscuous mode
[ 1037.730456][T29103] usb usb38-port1: attempt power cycle
[ 1037.773339][T32380] veth0_macvtap: entered promiscuous mode
[ 1037.822709][T32380] veth1_macvtap: entered promiscuous mode
[ 1037.826619][    T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[ 1037.874642][    T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[ 1037.894936][    T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[ 1037.906212][    T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[ 1037.917479][T32380] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1037.925131][    T9] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0
[ 1037.958310][T32380] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1037.985348][    T9] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1038.037756][ T8005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.064178][ T8005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.087351][    T9] usb 4-1: USB disconnect, device number 22
[ 1038.135587][ T8005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.217789][ T8005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1038.334729][T29103] usb usb38-port1: unable to enumerate USB device
[ 1038.389066][  T868] fido_id[868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1038.447014][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1038.490483][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1038.587421][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1038.607333][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1039.542131][T29103] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[ 1039.724185][T29103] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1039.755601][T29103] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1039.814592][T29103] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1039.834916][ T5184] Bluetooth: hci0: unexpected event for opcode 0x2042
[ 1039.848260][T29103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.079012][T29103] usb 3-1: GET_CAPABILITIES returned 0
[ 1040.098683][T29103] usbtmc 3-1:16.0: can't read capabilities
[ 1040.152193][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1040.302925][T30914] usb 3-1: USB disconnect, device number 41
[ 1040.355720][    T9] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1040.398607][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.430455][    T9] usb 4-1: Product: syz
[ 1040.454498][    T9] usb 4-1: Manufacturer: syz
[ 1040.486824][    T9] usb 4-1: SerialNumber: syz
[ 1040.521653][    T9] usb 4-1: config 0 descriptor??
[ 1040.931157][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1040.931214][   T30] audit: type=1326 audit(1754842722.143:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000
[ 1041.052467][   T30] audit: type=1326 audit(1754842722.193:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f02539 code=0x7ffc0000
[ 1041.092405][ T1036] tipc: Started in network mode
[ 1041.097333][ T1036] tipc: Node identity d212ceeeff25, cluster identity 4711
[ 1041.142588][ T1036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1041.156213][   T30] audit: type=1326 audit(1754842722.193:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000
[ 1041.183376][ T1043] syzkaller0: entered promiscuous mode
[ 1041.189430][ T1043] syzkaller0: entered allmulticast mode
[ 1041.234936][   T30] audit: type=1326 audit(1754842722.193:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000
[ 1041.363071][ T1043] tipc: Resetting bearer <eth:syzkaller0>
[ 1041.396161][ T1032] tipc: Resetting bearer <eth:syzkaller0>
[ 1041.447633][ T1066] random: crng reseeded on system resumption
[ 1041.481500][ T1032] tipc: Disabling bearer <eth:syzkaller0>
[ 1041.643026][   T43] vhci_hcd: vhci_device speed not set
[ 1041.732939][T30907] usb 6-1: new full-speed USB device number 81 using dummy_hcd
[ 1041.883164][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1041.900118][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1041.913558][    T9] asix 4-1:0.0: probe with driver asix failed with error -71
[ 1041.931651][T30907] usb 6-1: not running at top speed; connect to a high speed hub
[ 1041.938116][    T9] usb 4-1: USB disconnect, device number 23
[ 1041.958156][T30907] usb 6-1: config 251 has an invalid interface number: 138 but max is 0
[ 1041.983439][T30907] usb 6-1: config 251 has no interface number 0
[ 1041.996249][T30907] usb 6-1: config 251 interface 138 altsetting 128 has a duplicate endpoint with address 0x7, skipping
[ 1042.035275][T30907] usb 6-1: config 251 interface 138 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[ 1042.072337][T30907] usb 6-1: config 251 interface 138 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[ 1042.107843][T30907] usb 6-1: config 251 interface 138 has no altsetting 0
[ 1042.122720][T32371] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1042.129855][T30907] usb 6-1: string descriptor 0 read error: -22
[ 1042.150075][T30907] usb 6-1: New USB device found, idVendor=05cc, idProduct=3363, bcdDevice=47.97
[ 1042.181501][T30907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.236340][T30907] usb 6-1: [ueagle-atm] ADSL device founded vid (0X5CC) pid (0X3363) Rev (0X4797): ADI930
[ 1042.314902][T32371] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1042.352093][T32371] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1042.408061][T32371] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1042.420415][T32371] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1042.429985][T30907] usb 6-1: reset full-speed USB device number 81 using dummy_hcd
[ 1042.449014][   T30] audit: type=1326 audit(1754842723.663:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.463607][T32371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.515024][T32371] usb 3-1: config 0 descriptor??
[ 1042.534711][   T30] audit: type=1326 audit(1754842723.663:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.557368][   T30] audit: type=1326 audit(1754842723.663:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.579692][   T30] audit: type=1326 audit(1754842723.663:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.601720][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1042.608670][   T30] audit: type=1326 audit(1754842723.663:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.656764][   T30] audit: type=1326 audit(1754842723.663:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1063 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f66539 code=0x7ffc0000
[ 1042.924006][T30913] usb usb44-port1: attempt power cycle
[ 1043.136093][T32371] usb 3-1: string descriptor 0 read error: -22
[ 1043.189704][T17902] tipc: Subscription rejected, illegal request
[ 1043.278026][T30907] ueagle-atm 6-1:251.138: usbatm_usb_probe: bind failed: -19!
[ 1043.376141][T30907] usb 6-1: USB disconnect, device number 81
[ 1043.522428][T30913] usb usb44-port1: unable to enumerate USB device
[ 1043.539093][T32371] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #100: -71
[ 1043.581206][T32371] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71
[ 1043.616920][T32371] uclogic 0003:256C:006D.002B: failed probing pen v1 parameters: -71
[ 1043.632934][T32371] uclogic 0003:256C:006D.002B: failed probing parameters: -71
[ 1043.663481][T32371] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71
[ 1043.692180][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1043.731866][T32371] usb 3-1: USB disconnect, device number 42
[ 1043.872499][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1043.892684][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.904024][ T5184] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1043.912913][ T5184] Bluetooth: hci0: Injecting HCI hardware error event
[ 1043.923079][T17883] Bluetooth: hci0: hardware error 0x00
[ 1043.935537][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.946409][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1043.959770][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[ 1043.969204][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.018794][    T9] usb 4-1: config 0 descriptor??
[ 1044.093786][ T1202] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3216'.
[ 1044.425522][T30907] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1044.484485][    T9] nzxt-kraken2 0003:1E71:170E.002C: item fetching failed at offset 4/5
[ 1044.546226][    T9] nzxt-kraken2 0003:1E71:170E.002C: hid parse failed with -22
[ 1044.567813][    T9] nzxt-kraken2 0003:1E71:170E.002C: probe with driver nzxt-kraken2 failed with error -22
[ 1044.592102][T30907] usb 7-1: Using ep0 maxpacket: 16
[ 1044.616837][T30907] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1044.642335][T30907] usb 7-1: config 0 has no interface number 0
[ 1044.674818][T30907] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1044.703485][T30914] usb 4-1: USB disconnect, device number 24
[ 1044.761064][T30907] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1044.801790][T30907] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1044.834730][T30907] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1044.855012][T30907] usb 7-1: Product: syz
[ 1044.859229][T30907] usb 7-1: SerialNumber: syz
[ 1044.940230][T30907] usb 7-1: config 0 descriptor??
[ 1044.965078][T30907] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1045.018218][T30907] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input60
[ 1045.183646][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1045.332614][    T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[ 1045.463974][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.473765][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.482182][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.490099][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.498195][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.505390][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.512728][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.519891][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.527004][T30907] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1045.527107][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.542129][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1045.562218][    T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[ 1045.567528][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1045.584689][T30913] usb 7-1: USB disconnect, device number 15
[ 1045.600624][T30913] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1045.600861][    T9] usb 3-1: config 0 has no interface number 0
[ 1045.610605][T30914] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1045.652664][T32371] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1045.675330][    T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1045.685691][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.695527][    T9] usb 3-1: Product: syz
[ 1045.699885][    T9] usb 3-1: Manufacturer: syz
[ 1045.705086][    T9] usb 3-1: SerialNumber: syz
[ 1045.726564][    T9] usb 3-1: config 0 descriptor??
[ 1045.744271][T30907] usb 6-1: Using ep0 maxpacket: 32
[ 1045.759118][T30907] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1045.785187][T30907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.805773][T30914] usb 2-1: Using ep0 maxpacket: 8
[ 1045.813247][T30907] usb 6-1: Product: syz
[ 1045.817452][T30907] usb 6-1: Manufacturer: syz
[ 1045.838434][T32371] usb 4-1: Using ep0 maxpacket: 8
[ 1045.838767][T30907] usb 6-1: SerialNumber: syz
[ 1045.852111][T30914] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[ 1045.868213][T32371] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[ 1045.870701][T30914] usb 2-1: config 0 has no interface number 1
[ 1045.896582][T32371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.903506][T30907] usb 6-1: config 0 descriptor??
[ 1045.919150][T32371] usb 4-1: Product: syz
[ 1045.920612][T30914] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1045.934251][T32371] usb 4-1: Manufacturer: syz
[ 1045.945543][T30907] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1045.951312][T32371] usb 4-1: SerialNumber: syz
[ 1045.975354][T17883] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1045.976236][T30914] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[ 1046.004463][T32371] usb 4-1: config 0 descriptor??
[ 1046.017836][T32371] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[ 1046.033903][T32371] dvb-usb: bulk message failed: -22 (2/0)
[ 1046.047758][T30914] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[ 1046.051835][T32371] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1046.090040][T32371] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[ 1046.099283][T30914] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1046.120924][T32371] usb 4-1: media controller created
[ 1046.136765][T30914] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1046.187687][T30914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[ 1046.224191][T32371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1046.246711][T30914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 169
[ 1046.286272][T30914] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[ 1046.319662][T32371] dvb-usb: bulk message failed: -22 (1/0)
[ 1046.321654][T30914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.327299][    T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[ 1046.349986][T30914] usb 2-1: Product: syz
[ 1046.351725][T32371] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[ 1046.360187][T30914] usb 2-1: Manufacturer: syz
[ 1046.389731][T30914] usb 2-1: SerialNumber: syz
[ 1046.396656][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[ 1046.413190][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[ 1046.437409][T32371] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[ 1046.437862][T30914] usb 2-1: config 0 descriptor??
[ 1046.455654][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[ 1046.468144][T17883] Bluetooth: hci2: command 0x0406 tx timeout
[ 1046.478450][ T1277] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1046.489831][T32371] dvb-usb: schedule remote query interval to 50 msecs.
[ 1046.504494][    T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1046.512742][T32371] dvb-usb: bulk message failed: -22 (2/0)
[ 1046.524327][T32371] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[ 1046.540224][T32371] usb 4-1: USB disconnect, device number 25
[ 1046.600201][T30914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1046.678270][T30914] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1046.757218][T32371] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[ 1046.780803][    T9] usb 3-1: USB disconnect, device number 43
[ 1046.794705][T30913] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1046.837311][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1046.862976][T30914] usb 2-1: USB disconnect, device number 43
[ 1046.876586][    T9] keyspan 3-1:0.133: device disconnected
[ 1046.983866][T30913] usb 7-1: config 0 has an invalid interface number: 200 but max is 0
[ 1047.007771][T30913] usb 7-1: config 0 has no interface number 0
[ 1047.035095][T30913] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B
[ 1047.073750][ T7697] udevd[7697]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1047.111938][T30913] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1047.162196][T30913] usb 7-1: config 0 interface 200 has no altsetting 0
[ 1047.197087][T30913] usb 7-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39
[ 1047.213148][T30913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.223768][T30913] usb 7-1: Product: syz
[ 1047.228008][T30913] usb 7-1: Manufacturer: syz
[ 1047.233582][T30913] usb 7-1: SerialNumber: syz
[ 1047.259068][T30913] usb 7-1: config 0 descriptor??
[ 1047.517350][T30913] usbhid 7-1:0.200: couldn't find an input interrupt endpoint
[ 1047.537021][T30913] usb 7-1: USB disconnect, device number 16
[ 1047.552500][   T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1047.682425][T32371] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1047.712480][   T43] usb 4-1: Using ep0 maxpacket: 16
[ 1047.723406][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.749135][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1047.777046][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1047.801746][   T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1047.821257][   T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1047.839109][   T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1047.848909][   T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1047.862550][T32371] usb 3-1: Using ep0 maxpacket: 32
[ 1047.870479][   T43] usb 4-1: Manufacturer: syz
[ 1047.876309][T32371] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1047.896849][   T43] usb 4-1: config 0 descriptor??
[ 1047.899167][T32371] usb 3-1: config 0 has no interface number 0
[ 1047.912122][T32371] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1047.938130][T32371] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1047.957993][T32371] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1047.970216][T32371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.981952][T32371] usb 3-1: Product: syz
[ 1047.987205][T32371] usb 3-1: Manufacturer: syz
[ 1047.991828][T32371] usb 3-1: SerialNumber: syz
[ 1048.013357][T32371] usb 3-1: config 0 descriptor??
[ 1048.102766][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1048.223865][   T43] rc_core: IR keymap rc-hauppauge not found
[ 1048.245463][   T43] Registered IR keymap rc-empty
[ 1048.250603][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.266248][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1048.276579][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.284193][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1048.294990][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.296305][   T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1048.327268][   T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64
[ 1048.329525][    T9] usb 2-1: config 0 descriptor??
[ 1048.373110][T30913] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1048.388039][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[ 1048.396013][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.432477][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.453838][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.473436][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.492323][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.512349][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.533170][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.552531][T30913] usb 7-1: Using ep0 maxpacket: 16
[ 1048.557902][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.571336][T30913] usb 7-1: New USB device found, idVendor=2717, idProduct=4106, bcdDevice=28.92
[ 1048.581680][T30913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.590058][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.601216][    T9] pwc: send_video_command error -71
[ 1048.606244][T30913] usb 7-1: Product: syz
[ 1048.620158][T30913] usb 7-1: Manufacturer: syz
[ 1048.622446][    T9] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1048.629647][T30913] usb 7-1: SerialNumber: syz
[ 1048.634057][    T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1048.649465][   T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1048.665287][T32371] appletouch 3-1:0.85: Geyser mode initialized.
[ 1048.668943][T30913] usb 7-1: config 0 descriptor??
[ 1048.698160][T32371] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input63
[ 1048.717075][    T9] usb 2-1: USB disconnect, device number 44
[ 1048.718906][   T43] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1048.757747][   T43] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1048.809689][   T43] usb 4-1: USB disconnect, device number 26
[ 1048.931665][T30913] usb 3-1: USB disconnect, device number 44
[ 1048.939880][T26926] usb 7-1: USB disconnect, device number 17
[ 1049.015564][T30913] appletouch 3-1:0.85: input: appletouch disconnected
[ 1049.212304][    T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1049.395934][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.409464][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1049.410966][ T1499] bond1: entered promiscuous mode
[ 1049.426721][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.432843][ T1499] bond1: entered allmulticast mode
[ 1049.440871][ T1499] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1049.485628][    T9] usb 2-1: config 0 descriptor??
[ 1049.507985][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[ 1049.688721][ T1499] bond1 (unregistering): Released all slaves
[ 1049.815611][T30907] gspca_stk1135: reg_w 0x1b err -71
[ 1049.821921][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.832095][T30907] gspca_stk1135: Sensor write failed
[ 1049.832978][T32371] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1049.837523][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.837544][T30907] gspca_stk1135: Sensor write failed
[ 1049.837574][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.837587][T30907] gspca_stk1135: Sensor read failed
[ 1049.837616][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.876104][T30907] gspca_stk1135: Sensor read failed
[ 1049.881333][T30907] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1049.891759][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.898847][T30907] gspca_stk1135: Sensor read failed
[ 1049.904438][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.905612][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1049.910781][T30907] gspca_stk1135: Sensor read failed
[ 1049.910813][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.933939][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[ 1049.946605][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1049.954492][T30907] gspca_stk1135: Sensor write failed
[ 1049.970073][T30907] gspca_stk1135: serial bus timeout: status=0x00
[ 1049.972959][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[ 1049.982988][T30907] gspca_stk1135: Sensor write failed
[ 1049.983104][T30907] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1049.992362][T30907] usb 6-1: USB disconnect, device number 82
[ 1050.012219][T32371] usb 3-1: Using ep0 maxpacket: 16
[ 1050.051540][T32371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1050.073450][T32371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1050.087386][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[ 1050.100122][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[ 1050.113555][T32371] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[ 1050.123374][T32371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.131971][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[ 1050.145929][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[ 1050.156257][T32371] usb 3-1: config 0 descriptor??
[ 1050.168028][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[ 1050.179275][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[ 1050.187043][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[ 1050.196186][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[ 1050.332300][T30913] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1050.407388][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[ 1050.415842][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[ 1050.423270][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[ 1050.435647][    T9] pwc: Registered as video103.
[ 1050.446608][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65
[ 1050.474871][    T9] usb 2-1: USB disconnect, device number 45
[ 1050.482331][T30913] usb 7-1: Using ep0 maxpacket: 8
[ 1050.507432][T30913] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1050.542392][T30907] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1050.553508][T30913] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1050.585546][T30913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1050.596180][T32371] konepure 0003:1E7D:2DB4.002D: unknown main item tag 0x0
[ 1050.596514][T30913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1050.613042][T32371] konepure 0003:1E7D:2DB4.002D: unknown main item tag 0x0
[ 1050.621632][T32371] konepure 0003:1E7D:2DB4.002D: unknown main item tag 0x0
[ 1050.635180][T30913] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1050.650537][T30913] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1050.660462][T30913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.664828][T32371] konepure 0003:1E7D:2DB4.002D: unknown main item tag 0x0
[ 1050.705436][T32371] konepure 0003:1E7D:2DB4.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0
[ 1050.725281][T30907] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1050.741622][T30907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.799672][T30907] usb 6-1: config 0 descriptor??
[ 1050.824623][T30907] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1050.838684][T30914] usb 3-1: USB disconnect, device number 45
[ 1050.888541][T30913] usb 7-1: GET_CAPABILITIES returned 0
[ 1050.910581][T30913] usbtmc 7-1:16.0: can't read capabilities
[ 1051.026315][T30907] gp8psk: usb in 128 operation failed.
[ 1051.151115][ T1584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.165981][ T1584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.237423][T30907] gp8psk: usb in 146 operation failed.
[ 1051.243445][T30907] gp8psk: failed to get FW version
[ 1051.249378][T30907] gp8psk: FPGA Version = 90
[ 1051.272183][T32371] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1051.287934][ T1584] usbtmc 7-1:16.0: usb_control_msg returned -71
[ 1051.288384][T30913] usb 7-1: USB disconnect, device number 18
[ 1051.301004][ T1655] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19
[ 1051.392309][    T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[ 1051.454146][T30907] gp8psk: usb in 138 operation failed.
[ 1051.466440][T32371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1051.468990][T30907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1051.485088][T32371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.490600][T30907] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1051.498055][T32371] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[ 1051.517908][T30907] usb 6-1: media controller created
[ 1051.539844][T32371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.551516][T30907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1051.569458][T32371] usb 4-1: config 0 descriptor??
[ 1051.589994][    T9] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[ 1051.600135][T30907] gp8psk_fe: Frontend attached
[ 1051.602668][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.614067][T30907] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1051.617447][    T9] usb 2-1: Product: syz
[ 1051.627788][T30907] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1051.630048][    T9] usb 2-1: Manufacturer: syz
[ 1051.646353][    T9] usb 2-1: SerialNumber: syz
[ 1051.669937][    T9] usb 2-1: config 0 descriptor??
[ 1051.680779][    T9] ems_usb 2-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1051.682540][   T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1051.696342][    T9] ems_usb 2-1:0.0: probe with driver ems_usb failed with error -22
[ 1051.739653][T30907] gp8psk: usb in 138 operation failed.
[ 1051.751088][T30907] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1051.760711][T30907] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1051.772718][T30907] usb 6-1: USB disconnect, device number 83
[ 1051.862300][   T43] usb 3-1: Using ep0 maxpacket: 32
[ 1051.873704][   T43] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1051.882502][   T43] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1051.899414][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.916409][   T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1051.927170][    T9] usb 2-1: USB disconnect, device number 46
[ 1051.933283][T30907] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1051.955869][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1051.979415][   T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1051.989245][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[ 1052.006645][   T43] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1052.009124][T32371] a4tech 0003:09DA:022B.002E: item fetching failed at offset 5/7
[ 1052.016560][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.038579][T32371] a4tech 0003:09DA:022B.002E: parse failed
[ 1052.040943][   T43] usb 3-1: config 0 descriptor??
[ 1052.077534][T32371] a4tech 0003:09DA:022B.002E: probe with driver a4tech failed with error -22
[ 1052.228707][ T5936] usb 4-1: USB disconnect, device number 27
[ 1052.278261][ T1667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.288507][ T1667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.298462][T30907] usb 3-1: USB disconnect, device number 46
[ 1052.414580][    T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1052.452508][T32371] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1052.576448][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1052.587990][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.596173][    T9] usb 6-1: Product: syz
[ 1052.600441][    T9] usb 6-1: Manufacturer: syz
[ 1052.605274][T32371] usb 7-1: Using ep0 maxpacket: 8
[ 1052.610395][    T9] usb 6-1: SerialNumber: syz
[ 1052.617905][T32371] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1052.628554][T32371] usb 7-1: config 0 has no interface number 0
[ 1052.638136][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1052.650992][T32371] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1052.669111][T32371] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1052.680802][T32371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.695843][T32371] usb 7-1: config 0 descriptor??
[ 1052.716792][ T5936] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1052.722903][T30907] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1052.744457][T15849] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1052.761353][T32371] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1052.882234][T30907] usb 2-1: Using ep0 maxpacket: 16
[ 1052.889662][T30907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1052.904162][T30907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.925258][T30907] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[ 1052.939168][   T43] usb 6-1: USB disconnect, device number 84
[ 1052.950842][T30907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.955977][T15849] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1052.972054][T15849] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1052.981069][T15849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.986745][T30907] usb 2-1: config 0 descriptor??
[ 1052.993202][T15849] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1053.008590][T15849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1053.024641][T15849] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1053.041071][T15849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[ 1053.054739][T15849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.9d
[ 1053.065047][T15849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.078799][T15849] usb 3-1: config 0 descriptor??
[ 1053.101370][T15849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1053.219181][T22916] udevd[22916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1053.265499][T26926] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1053.285786][T15849] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12
[ 1053.304526][T15849] usb 3-1: USB disconnect, device number 47
[ 1053.426458][T30907] playstation 0003:054C:05C4.002F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[ 1053.445016][T26926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.456818][T26926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1053.467395][T26926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.488544][T26926] usb 4-1: config 0 descriptor??
[ 1053.733823][ T5936] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1053.741356][ T5936] ath9k_htc: Failed to initialize the device
[ 1053.749787][   T43] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1053.817262][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve feature with reportID 163: -71
[ 1053.842132][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve DualShock4 firmware info: -71
[ 1053.859788][T30907] playstation 0003:054C:05C4.002F: Failed to get firmware info from DualShock4
[ 1053.870044][T30907] playstation 0003:054C:05C4.002F: HW/FW version data in sysfs will be invalid.
[ 1053.892741][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve feature with reportID 2: -71
[ 1053.910613][T30907] playstation 0003:054C:05C4.002F: Retrying DualShock 4 get calibration report (0x02) request
[ 1053.929289][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve feature with reportID 2: -71
[ 1053.938193][T26926] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor
[ 1053.945886][T30907] playstation 0003:054C:05C4.002F: Retrying DualShock 4 get calibration report (0x02) request
[ 1053.963734][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve feature with reportID 2: -71
[ 1053.976513][T30907] playstation 0003:054C:05C4.002F: Failed to retrieve DualShock4 calibration info: -71
[ 1053.986827][T26926] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input66
[ 1054.007527][T32371] usb 7-1: USB disconnect, device number 19
[ 1054.009034][T30907] playstation 0003:054C:05C4.002F: Invalid gyro calibration data for axis (3), disabling calibration.
[ 1054.034310][T30907] playstation 0003:054C:05C4.002F: Invalid gyro calibration data for axis (4), disabling calibration.
[ 1054.050721][T30907] playstation 0003:054C:05C4.002F: Invalid gyro calibration data for axis (5), disabling calibration.
[ 1054.066201][   T43] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1054.087219][T30907] playstation 0003:054C:05C4.002F: Invalid accelerometer calibration data for axis (0), disabling calibration.
[ 1054.105939][T30907] playstation 0003:054C:05C4.002F: Invalid accelerometer calibration data for axis (1), disabling calibration.
[ 1054.121271][T30907] playstation 0003:054C:05C4.002F: Invalid accelerometer calibration data for axis (2), disabling calibration.
[ 1054.140201][T26926] keytouch 0003:0926:3333.0030: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[ 1054.140666][T30907] playstation 0003:054C:05C4.002F: Failed to get calibration data from DualShock4
[ 1054.176192][T30907] playstation 0003:054C:05C4.002F: Gyroscope and accelerometer will be inaccurate.
[ 1054.217671][T30907] input: HID 054c:05c4 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.002F/input/input67
[ 1054.229405][T30913] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1054.266635][   T43] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1054.280455][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.310156][T30907] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.002F/input/input68
[ 1054.332345][   T43] usb 6-1: Product: syz
[ 1054.336566][   T43] usb 6-1: Manufacturer: syz
[ 1054.341185][   T43] usb 6-1: SerialNumber: syz
[ 1054.414503][T30913] usb 3-1: Using ep0 maxpacket: 32
[ 1054.423744][   T43] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1054.437973][T30907] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.002F/input/input69
[ 1054.458356][T30913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.486117][T29103] usb 4-1: USB disconnect, device number 28
[ 1054.528811][T30913] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1054.565477][T30913] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1054.576273][T30913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.620888][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.627341][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.681896][T30914] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[ 1054.686180][ T5936] usb 6-1: USB disconnect, device number 85
[ 1054.700591][T30913] usb 3-1: config 0 descriptor??
[ 1054.767837][ T5936] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1055.016301][T30907] playstation 0003:054C:05C4.002F: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000
[ 1055.212679][T26926] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1055.362235][ T5936] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1055.370159][T26926] usb 7-1: Using ep0 maxpacket: 8
[ 1055.379046][T26926] usb 7-1: config 0 has an invalid interface number: 56 but max is 0
[ 1055.387705][T26926] usb 7-1: config 0 has no interface number 0
[ 1055.398884][T26926] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1055.404612][T30907] usb 2-1: USB disconnect, device number 47
[ 1055.412862][T26926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.422698][T26926] usb 7-1: Product: syz
[ 1055.426894][T26926] usb 7-1: Manufacturer: syz
[ 1055.434575][T26926] usb 7-1: SerialNumber: syz
[ 1055.451308][T26926] usb 7-1: config 0 descriptor??
[ 1055.472897][T26926] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1055.481251][T26926] pctv452e: pctv452e_power_ctrl: 1
[ 1055.481251][T26926] 
[ 1055.495449][T26926] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1055.495449][T26926] 
[ 1055.511391][T26926] dvb-usb: bulk message failed: -22 (5/0)
[ 1055.526906][T26926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1055.536949][ T5936] usb 4-1: Using ep0 maxpacket: 32
[ 1055.545931][T26926] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[ 1055.562933][ T5936] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.573380][T32371] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1055.582561][T26926] usb 7-1: media controller created
[ 1055.589357][ T5936] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1055.603087][T26926] dvb-usb: bulk message failed: -22 (8/0)
[ 1055.610897][T26926] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[ 1055.621963][ T5936] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1055.633720][T26926] dvb-usb: MAC address reading failed.
[ 1055.642935][ T5936] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1055.668798][ T5936] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1055.704392][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1055.719433][T26926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1055.730436][ T5936] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1055.743571][T32371] usb 6-1: Using ep0 maxpacket: 32
[ 1055.761485][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.771575][T32371] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1055.782265][T32371] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[ 1055.795059][ T5936] usb 4-1: config 0 descriptor??
[ 1055.814577][T32371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.832152][T30907] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[ 1055.851947][T32371] usb 6-1: config 0 descriptor??
[ 1055.880041][T26926] DVB: Unable to find symbol stb0899_attach()
[ 1055.886989][T26926] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[ 1055.982379][T26926] rc_core: IR keymap rc-tt-1500 not found
[ 1055.988921][T26926] Registered IR keymap rc-empty
[ 1055.995562][T26926] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[ 1056.004391][T30907] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.015812][T26926] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input70
[ 1056.019538][T26926] dvb-usb: schedule remote query interval to 100 msecs.
[ 1056.037524][T26926] pctv452e: pctv452e_power_ctrl: 0
[ 1056.037524][T26926] 
[ 1056.041794][T30907] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[ 1056.045530][T26926] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[ 1056.058526][T30907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.069850][T26926] usb 7-1: USB disconnect, device number 20
[ 1056.116154][T30907] usb 2-1: Product: syz
[ 1056.121245][T30907] usb 2-1: Manufacturer: syz
[ 1056.138248][T30907] usb 2-1: SerialNumber: syz
[ 1056.218023][ T5936] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0
[ 1056.227120][T26926] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[ 1056.238220][ T5936] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0
[ 1056.250100][ T5936] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0
[ 1056.262844][ T5936] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0
[ 1056.270817][ T5936] hid-thrustmaster 0003:044F:B65D.0031: unknown main item tag 0x0
[ 1056.289964][T32371] ntrig 0003:1B96:000A.0032: unknown main item tag 0x3
[ 1056.310257][T32371] ntrig 0003:1B96:000A.0032: item fetching failed at offset 6/7
[ 1056.320071][T32371] ntrig 0003:1B96:000A.0032: parse failed
[ 1056.327511][T32371] ntrig 0003:1B96:000A.0032: probe with driver ntrig failed with error -22
[ 1056.341490][ T5936] hid-thrustmaster 0003:044F:B65D.0031: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[ 1056.374544][ T5936] hid-thrustmaster 0003:044F:B65D.0031: setup data couldn't be sent
[ 1056.391075][T30907] usb 2-1: selecting invalid altsetting 1
[ 1056.410586][T30907] LME2510(C): Firmware Status: 00 00 00 00 00 00
[ 1056.410719][T30907] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[ 1056.413631][    C0] hid-thrustmaster 0003:044F:B65D.0031: URB to get model id failed with error -71
[ 1056.431724][T30907] usb 2-1: USB disconnect, device number 48
[ 1056.504229][ T5936] usb 4-1: USB disconnect, device number 29
[ 1056.546205][T26926] usb 6-1: USB disconnect, device number 86
[ 1056.708395][ T2011] bond1: entered promiscuous mode
[ 1056.714474][ T2011] bond1: entered allmulticast mode
[ 1056.720576][ T2011] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1056.875537][ T2011] bond1 (unregistering): Released all slaves
[ 1057.173952][ T5936] usb 3-1: USB disconnect, device number 48
[ 1057.462448][T26926] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1057.622987][T26926] usb 2-1: Using ep0 maxpacket: 32
[ 1057.633894][T26926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.654118][T26926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1057.665914][T26926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.679608][T26926] usb 2-1: config 0 descriptor??
[ 1057.684774][ T5936] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1057.878334][ T5936] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1057.888854][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1057.922652][ T5936] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1057.943698][ T5936] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1057.963898][ T5936] usb 3-1: Manufacturer: syz
[ 1057.977913][ T5936] usb 3-1: config 0 descriptor??
[ 1058.142618][ T5936] rc_core: IR keymap rc-hauppauge not found
[ 1058.155086][T26926] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0
[ 1058.173460][ T5936] Registered IR keymap rc-empty
[ 1058.184858][T26926] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0
[ 1058.193583][ T5936] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1058.212690][T26926] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0
[ 1058.220594][T26926] koneplus 0003:1E7D:2D51.0033: unknown main item tag 0x0
[ 1058.234361][ T5936] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71
[ 1058.247186][T26926] koneplus 0003:1E7D:2D51.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[ 1058.277364][ T5936] usb 3-1: USB disconnect, device number 49
[ 1058.345917][ T2087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.376476][ T2087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.413469][ T2087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.444471][ T2087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.459631][T26926] koneplus 0003:1E7D:2D51.0033: couldn't init struct koneplus_device
[ 1058.476725][ T2087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.486309][T26926] koneplus 0003:1E7D:2D51.0033: couldn't install mouse
[ 1058.495414][ T2087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.526987][T26926] koneplus 0003:1E7D:2D51.0033: probe with driver koneplus failed with error -32
[ 1058.542443][ T2087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.570608][ T2087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.670827][T26926] usb 2-1: USB disconnect, device number 49
[ 1059.130291][ T2215] bridge_slave_0: left allmulticast mode
[ 1059.140896][ T2215] bridge_slave_0: left promiscuous mode
[ 1059.149520][ T2215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.254773][ T2215] bridge_slave_1: left allmulticast mode
[ 1059.274799][ T2215] bridge_slave_1: left promiscuous mode
[ 1059.280827][ T2215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.311209][ T2215] bond0: (slave bond_slave_0): Releasing backup interface
[ 1059.349254][ T2215] bond0: (slave bond_slave_1): Releasing backup interface
[ 1059.396728][ T2215] team0: Port device team_slave_0 removed
[ 1059.436203][ T2215] team0: Port device team_slave_1 removed
[ 1059.448918][ T2215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1059.458295][ T2215] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1059.467414][ T2215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1059.475794][ T2215] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1060.312262][T15849] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1060.475472][T15849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.486922][ T2279] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1060.493563][ T2279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1060.494612][T15849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1060.511860][ T2279] vhci_hcd vhci_hcd.0: Device attached
[ 1060.537825][ T2279] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14)
[ 1060.544486][ T2279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1060.544936][T15849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1060.576434][ T2279] vhci_hcd vhci_hcd.0: Device attached
[ 1060.593960][ T2279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1060.598252][T15849] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1060.626315][ T2279] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18)
[ 1060.629062][T15849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.632968][ T2279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1060.642171][ T2279] vhci_hcd vhci_hcd.0: Device attached
[ 1060.695911][ T2279] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20)
[ 1060.702567][ T2279] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1060.707716][T15849] usb 4-1: config 0 descriptor??
[ 1060.741401][ T2279] vhci_hcd vhci_hcd.0: Device attached
[ 1060.759784][ T2296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1060.792620][T32371] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[ 1060.802902][ T2279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1060.813694][ T2279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1060.827784][ T2279] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(30)
[ 1060.834512][ T2279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1060.845619][ T2279] vhci_hcd vhci_hcd.0: Device attached
[ 1060.865154][ T2290] vhci_hcd: connection closed
[ 1060.865383][ T2287] vhci_hcd: connection closed
[ 1060.868254][T17902] vhci_hcd: stop threads
[ 1060.870131][ T2282] vhci_hcd: connection reset by peer
[ 1060.870331][ T2284] vhci_hcd: connection closed
[ 1060.877026][T17902] vhci_hcd: release socket
[ 1060.895312][T17902] vhci_hcd: disconnect device
[ 1060.900367][T17902] vhci_hcd: stop threads
[ 1060.906730][T17902] vhci_hcd: release socket
[ 1060.911387][T17902] vhci_hcd: disconnect device
[ 1060.917156][T17902] vhci_hcd: stop threads
[ 1060.921589][T17902] vhci_hcd: release socket
[ 1060.932757][T17902] vhci_hcd: disconnect device
[ 1060.937940][T17902] vhci_hcd: stop threads
[ 1060.943229][T17902] vhci_hcd: release socket
[ 1060.948643][T17902] vhci_hcd: disconnect device
[ 1061.200118][T15849] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1061.415501][ T2298] vhci_hcd: connection closed
[ 1061.415862][ T8005] vhci_hcd: stop threads
[ 1061.447541][ T8005] vhci_hcd: release socket
[ 1061.476129][ T8005] vhci_hcd: disconnect device
[ 1061.531640][T30898] usb 4-1: USB disconnect, device number 30
[ 1061.785324][ T2355] syzkaller1: entered promiscuous mode
[ 1061.790875][ T2355] syzkaller1: entered allmulticast mode
[ 1061.982149][T30913] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1062.152284][T30913] usb 2-1: Using ep0 maxpacket: 8
[ 1062.168432][T30913] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1062.212984][T30913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1062.227558][T30913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1062.239057][T30913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1062.250792][T30913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1062.264781][T30913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1062.278191][T30913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.378681][ T2394] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3323'.
[ 1062.529829][T30913] usb 2-1: GET_CAPABILITIES returned 0
[ 1062.545996][T30913] usbtmc 2-1:16.0: can't read capabilities
[ 1062.755394][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.797395][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.895517][ T2424] bridge_slave_0: left allmulticast mode
[ 1062.921444][ T2424] bridge_slave_0: left promiscuous mode
[ 1062.942977][ T2424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.967975][ T2424] bridge_slave_1: left allmulticast mode
[ 1062.982515][ T2424] bridge_slave_1: left promiscuous mode
[ 1062.997627][ T2424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.085992][ T2424] bond0: (slave bond_slave_0): Releasing backup interface
[ 1063.118480][ T2424] bond0: (slave bond_slave_1): Releasing backup interface
[ 1063.197208][ T2424] team0: Port device team_slave_0 removed
[ 1063.249020][ T2424] team0: Port device team_slave_1 removed
[ 1063.293755][ T2424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1063.320493][ T2424] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1063.350449][ T2424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1063.360280][ T2424] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1063.602312][T30898] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1063.784545][T30898] usb 3-1: Using ep0 maxpacket: 32
[ 1063.794351][T30898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1063.818862][T30898] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1063.844787][T30898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.865692][T30898] usb 3-1: config 0 descriptor??
[ 1064.286661][T30898] hid_parser_main: 1 callbacks suppressed
[ 1064.286716][T30898] koneplus 0003:1E7D:2D51.0035: unknown main item tag 0x0
[ 1064.316319][T30898] koneplus 0003:1E7D:2D51.0035: unknown main item tag 0x0
[ 1064.337282][T30898] koneplus 0003:1E7D:2D51.0035: unknown main item tag 0x0
[ 1064.350247][T30898] koneplus 0003:1E7D:2D51.0035: unknown main item tag 0x0
[ 1064.376763][T30898] koneplus 0003:1E7D:2D51.0035: unknown main item tag 0x0
[ 1064.423216][ T2534] CUSE: unknown device info ""
[ 1064.437072][T30898] koneplus 0003:1E7D:2D51.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[ 1064.437630][ T2534] CUSE: zero length info key specified
[ 1064.487144][T30898] koneplus 0003:1E7D:2D51.0035: couldn't init struct koneplus_device
[ 1064.506489][T30898] koneplus 0003:1E7D:2D51.0035: couldn't install mouse
[ 1064.536825][T30898] koneplus 0003:1E7D:2D51.0035: probe with driver koneplus failed with error -71
[ 1064.596244][T30898] usb 3-1: USB disconnect, device number 50
[ 1064.603087][T26926] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1064.670512][ T2536] fido_id[2536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1064.774448][T26926] usb 7-1: Using ep0 maxpacket: 16
[ 1064.792095][T26926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.809341][T26926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.840950][T26926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1064.866772][T26926] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1064.878790][T26926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.891969][T26926] usb 7-1: config 0 descriptor??
[ 1065.325759][T26926] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1065.352690][T26926] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1065.368750][T26926] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1065.382180][T26926] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1065.397472][T26926] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1065.429928][T26926] input: HID 0955:7214 Haptics as /devices/virtual/input/input73
[ 1065.510032][ T2523] random: crng reseeded on system resumption
[ 1065.572776][T26926] shield 0003:0955:7214.0036: Registered Thunderstrike controller
[ 1065.616358][T26926] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[ 1065.746145][ T5936] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1065.769096][T26926] usb 7-1: USB disconnect, device number 21
[ 1065.805878][ T5936] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1065.875189][ T5936] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1065.908905][ T5936] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1065.936629][T32371] vhci_hcd: vhci_device speed not set
[ 1066.184053][ T2644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'.
[ 1066.552392][T30898] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1066.722765][T30898] usb 6-1: Using ep0 maxpacket: 32
[ 1066.746790][T30898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1066.772790][T30898] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1066.801578][T30898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.858070][T30898] usb 6-1: config 0 descriptor??
[ 1067.219596][T30907] usb usb38-port1: attempt power cycle
[ 1067.331742][T30898] koneplus 0003:1E7D:2D51.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[ 1067.362538][ T5936] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1067.502526][T30898] koneplus 0003:1E7D:2D51.0037: couldn't init struct koneplus_device
[ 1067.527668][T30898] koneplus 0003:1E7D:2D51.0037: couldn't install mouse
[ 1067.557277][ T5936] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1067.558447][T30898] koneplus 0003:1E7D:2D51.0037: probe with driver koneplus failed with error -71
[ 1067.567874][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.602927][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1067.612821][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1067.627663][T30898] usb 6-1: USB disconnect, device number 87
[ 1067.627740][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1067.656016][ T5936] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1067.671247][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1067.680845][ T5936] usb 3-1: Product: syz
[ 1067.699779][ T5936] usb 3-1: Manufacturer: syz
[ 1067.729831][ T5936] cdc_wdm 3-1:1.0: skipping garbage
[ 1067.754064][ T5936] cdc_wdm 3-1:1.0: skipping garbage
[ 1067.793902][T30907] usb usb38-port1: unable to enumerate USB device
[ 1067.851935][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3386'.
[ 1067.902798][ T2356] usbtmc 2-1:16.0: usb_control_msg returned -110
[ 1067.920482][ T5936] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[ 1067.948133][ T5936] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1067.959202][T30898] usb 2-1: USB disconnect, device number 50
[ 1067.991874][ T5936] usb 3-1: USB disconnect, device number 51
[ 1068.922190][T30898] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1069.152242][T30898] usb 3-1: Using ep0 maxpacket: 8
[ 1069.159958][T30898] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1069.168470][T30898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1069.179041][T30898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1069.202312][ T5936] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1069.220218][T30898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1069.271642][T30898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1069.312486][T30898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1069.329882][T30898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.386331][ T5936] usb 6-1: Using ep0 maxpacket: 8
[ 1069.401496][ T5936] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1069.430254][ T5936] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1069.463003][ T2876] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1069.465594][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1069.469581][ T2876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1069.499537][ T2876] vhci_hcd vhci_hcd.0: Device attached
[ 1069.519448][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1069.535004][ T5936] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1069.558686][T30898] usb 3-1: GET_CAPABILITIES returned 0
[ 1069.558750][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1069.573746][ T2877] vhci_hcd: connection closed
[ 1069.579367][T17902] vhci_hcd: stop threads
[ 1069.588648][T17902] vhci_hcd: release socket
[ 1069.592242][T30898] usbtmc 3-1:16.0: can't read capabilities
[ 1069.593436][T17902] vhci_hcd: disconnect device
[ 1069.616142][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.771602][ T2832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.789407][ T2832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.868876][ T5936] usb 6-1: usb_control_msg returned -32
[ 1069.876152][ T5936] usbtmc 6-1:16.0: can't read capabilities
[ 1073.276496][T30898] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1073.476925][T30898] usb 4-1: config 0 has no interfaces?
[ 1073.484788][T30898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1073.497926][T30898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.659368][T30907] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1073.789773][T30898] usb 4-1: Product: syz
[ 1073.800885][T30898] usb 4-1: Manufacturer: syz
[ 1073.808944][T30898] usb 4-1: SerialNumber: syz
[ 1073.847635][T30898] usb 4-1: config 0 descriptor??
[ 1073.924778][T30907] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1073.934116][T30907] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1073.944547][T30907] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1073.956022][T30907] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1073.967338][T30907] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1073.994327][T30907] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1074.003702][T30907] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1074.015175][T30907] usb 7-1: Product: syz
[ 1074.019471][T30907] usb 7-1: Manufacturer: syz
[ 1074.045798][T30907] cdc_wdm 7-1:1.0: skipping garbage
[ 1074.069786][T30907] cdc_wdm 7-1:1.0: skipping garbage
[ 1074.862601][ T2832] usbtmc 3-1:16.0: usb_control_msg returned -110
[ 1074.883947][T30907] cdc_wdm 7-1:1.0: cdc-wdm2: USB WDM device
[ 1074.901189][T30907] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1074.903691][T32371] usb 3-1: USB disconnect, device number 52
[ 1074.955557][T30898] usb 6-1: USB disconnect, device number 88
[ 1075.398679][ T3062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3436'.
[ 1075.543957][T30898] usb 4-1: USB disconnect, device number 31
[ 1076.075474][ T5936] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1076.282146][ T5936] usb 6-1: Using ep0 maxpacket: 8
[ 1076.282249][T30907] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1076.308350][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.329897][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1076.360315][    T9] usb 7-1: USB disconnect, device number 22
[ 1076.381694][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1076.451569][ T5936] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1076.464851][T30907] usb 4-1: Using ep0 maxpacket: 8
[ 1076.495138][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.509919][T30907] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1076.551304][T30907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1076.565801][ T5936] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1076.584177][ T5936] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1076.607218][T30907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1076.613322][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'.
[ 1076.634824][T30907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1076.652382][T30907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1076.662601][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1076.670102][T30907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1076.693271][T30907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.724798][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1076.730167][ T5936] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1076.865555][ T3129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3448'.
[ 1076.968392][T30907] usb 4-1: GET_CAPABILITIES returned 0
[ 1076.997400][T30907] usbtmc 4-1:16.0: can't read capabilities
[ 1077.025130][ T5936] usb 6-1: USB disconnect, device number 89
[ 1077.205500][ T3086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.216759][ T3086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.398892][ T5936] usb 6-1: new full-speed USB device number 90 using dummy_hcd
[ 1077.571284][ T3189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3455'.
[ 1077.584446][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.609395][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1077.635620][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1077.662143][ T5936] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1077.671325][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.711647][ T5936] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1077.730683][ T5936] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1077.750252][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1077.764215][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1077.769565][ T5936] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1078.766499][T29103] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1078.954952][T29103] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1078.968566][T29103] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1079.013436][T29103] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1079.035027][T29103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.069183][T29103] usb 7-1: Product: syz
[ 1079.087547][T29103] usb 7-1: Manufacturer: syz
[ 1079.102096][T29103] usb 7-1: SerialNumber: syz
[ 1079.158583][ T3235] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1079.165506][ T3235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1079.179321][ T3235] vhci_hcd vhci_hcd.0: Device attached
[ 1079.209518][ T3235] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14)
[ 1079.216149][ T3235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1079.226841][ T3235] vhci_hcd vhci_hcd.0: Device attached
[ 1079.262441][ T3235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1079.294724][ T3235] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18)
[ 1079.301392][ T3235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1079.320565][ T3235] vhci_hcd vhci_hcd.0: Device attached
[ 1079.350067][ T3221] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1079.359502][ T3235] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20)
[ 1079.366112][ T3235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1079.380116][ T3235] vhci_hcd vhci_hcd.0: Device attached
[ 1079.391056][ T3235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1079.406070][ T3235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1079.419174][ T3235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1079.433726][T30913] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[ 1079.446325][ T3235] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(30)
[ 1079.453056][ T3235] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1079.466248][ T3235] vhci_hcd vhci_hcd.0: Device attached
[ 1079.486661][ T3238] vhci_hcd: connection reset by peer
[ 1079.488325][ T3240] vhci_hcd: connection closed
[ 1079.492257][ T3242] vhci_hcd: connection closed
[ 1079.497431][ T1168] vhci_hcd: stop threads
[ 1079.508162][ T3244] vhci_hcd: connection closed
[ 1079.509134][ T1168] vhci_hcd: release socket
[ 1079.519392][ T1168] vhci_hcd: disconnect device
[ 1079.525357][ T1168] vhci_hcd: stop threads
[ 1079.529788][ T1168] vhci_hcd: release socket
[ 1079.535794][ T1168] vhci_hcd: disconnect device
[ 1079.540916][ T1168] vhci_hcd: stop threads
[ 1079.545705][ T1168] vhci_hcd: release socket
[ 1079.550332][ T1168] vhci_hcd: disconnect device
[ 1079.557592][ T1168] vhci_hcd: stop threads
[ 1079.561884][ T1168] vhci_hcd: release socket
[ 1079.568366][ T1168] vhci_hcd: disconnect device
[ 1079.788718][ T3221] netlink: 'syz.6.3463': attribute type 21 has an invalid length.
[ 1080.009583][ T3221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.018990][ T3221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.037717][ T3221] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[ 1080.048124][ T3248] vhci_hcd: connection closed
[ 1080.054048][ T8005] vhci_hcd: stop threads
[ 1080.072391][ T8005] vhci_hcd: release socket
[ 1080.084241][ T8005] vhci_hcd: disconnect device
[ 1080.249521][T29103] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1080.260960][T29103] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1080.269389][T29103] cdc_mbim 7-1:1.0: setting rx_max = 2048
[ 1080.450303][ T3221] netlink: 'syz.6.3463': attribute type 1 has an invalid length.
[ 1080.475303][T29103] cdc_mbim 7-1:1.0: setting tx_max = 184
[ 1080.786385][ T3289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'.
[ 1081.083262][ T3300] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[ 1081.089994][ T3300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1081.265693][ T3300] vhci_hcd vhci_hcd.0: Device attached
[ 1081.279072][ T3303] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14)
[ 1081.285717][ T3303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1081.328977][ T3303] vhci_hcd vhci_hcd.0: Device attached
[ 1081.406680][ T3303] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16)
[ 1081.413344][ T3303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1081.423643][ T3303] vhci_hcd vhci_hcd.0: Device attached
[ 1081.436648][ T3303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[ 1081.443293][ T3303] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1081.471101][ T3303] vhci_hcd vhci_hcd.0: Device attached
[ 1081.518901][ T3300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1081.542228][T26926] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[ 1081.585042][ T3313] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1081.654523][ T3300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1081.676334][ T3300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1081.741564][ T3300] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(30)
[ 1081.748230][ T3300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1081.760910][ T3300] vhci_hcd vhci_hcd.0: Device attached
[ 1081.784472][ T3308] vhci_hcd: connection closed
[ 1081.784620][ T3306] vhci_hcd: connection closed
[ 1081.784702][ T3304] vhci_hcd: connection closed
[ 1081.795615][ T3301] vhci_hcd: connection reset by peer
[ 1081.806536][T17902] vhci_hcd: stop threads
[ 1081.816934][T17902] vhci_hcd: release socket
[ 1081.868573][T17902] vhci_hcd: disconnect device
[ 1081.889445][T17902] vhci_hcd: stop threads
[ 1081.899942][T17902] vhci_hcd: release socket
[ 1081.911161][T17902] vhci_hcd: disconnect device
[ 1081.923089][T17902] vhci_hcd: stop threads
[ 1081.939782][T17902] vhci_hcd: release socket
[ 1081.953143][T17902] vhci_hcd: disconnect device
[ 1081.966736][T17902] vhci_hcd: stop threads
[ 1082.023789][T17902] vhci_hcd: release socket
[ 1082.058175][T17902] vhci_hcd: disconnect device
[ 1082.304635][ T3086] usbtmc 4-1:16.0: usb_control_msg returned -110
[ 1082.323138][T29103] cdc_mbim 7-1:1.0: cdc-wdm1: USB WDM device
[ 1082.398807][T30898] usb 4-1: USB disconnect, device number 32
[ 1082.415824][T29103] wwan wwan0: port wwan0mbim0 attached
[ 1082.464612][   T43] usb 6-1: USB disconnect, device number 90
[ 1082.493589][ T3318] vhci_hcd: connection closed
[ 1082.501983][ T8005] vhci_hcd: stop threads
[ 1082.505697][T29103] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 42:42:42:42:42:42
[ 1082.530862][ T8005] vhci_hcd: release socket
[ 1082.574308][ T8005] vhci_hcd: disconnect device
[ 1082.578560][T29103] usb 7-1: USB disconnect, device number 23
[ 1082.613181][T29103] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[ 1082.770183][T29103] wwan wwan0: port wwan0mbim0 disconnected
[ 1083.032653][ T5936] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1083.336345][ T5936] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1083.359629][ T5936] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1083.392032][   T43] IPVS: starting estimator thread 0...
[ 1083.398294][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1083.420989][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1083.869505][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1083.910279][ T5936] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1083.922140][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1083.930307][ T3408] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1083.938629][ T5936] usb 6-1: Product: syz
[ 1083.943165][ T5936] usb 6-1: Manufacturer: syz
[ 1083.947691][   T43] IPVS: starting estimator thread 0...
[ 1083.958747][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1083.990840][ T5936] cdc_wdm 6-1:1.0: skipping garbage
[ 1084.009805][ T5936] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1084.017583][ T5936] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1084.054643][ T3433] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1084.094282][T29103] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1084.462111][T29103] usb 2-1: Using ep0 maxpacket: 8
[ 1084.481859][T29103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1084.503213][T29103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1084.522498][T30913] vhci_hcd: vhci_device speed not set
[ 1084.528997][T29103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1084.626230][T29103] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1084.652237][T29103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.658474][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.708548][T29103] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1084.717751][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.742347][T29103] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1084.751878][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.769925][T29103] cdc_wdm 2-1:1.0: skipping garbage
[ 1084.788127][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.790110][T29103] cdc_wdm 2-1:1.0: skipping garbage
[ 1084.816595][T29103] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1084.822333][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.837243][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1084.837696][   T43] usb 6-1: USB disconnect, device number 91
[ 1084.843877][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1084.843899][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1084.855232][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.892134][T32371] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1084.906479][T29103] usb 2-1: USB disconnect, device number 51
[ 1084.921089][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.992968][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.052408][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1085.054135][T32371] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[ 1085.061234][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.071670][T32371] usb 3-1: config 0 has no interface number 0
[ 1085.122105][T32371] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1085.194156][ T3507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1085.240417][T32371] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1085.266327][T32371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.359006][T32371] usb 3-1: config 0 descriptor??
[ 1085.398299][T32371] usb 3-1: can't set config #0, error -71
[ 1085.413869][T29103] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[ 1085.438985][T32371] usb 3-1: USB disconnect, device number 53
[ 1085.587383][T29103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.602377][T29103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1085.625147][T29103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.636714][ T3518] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1085.643442][ T3518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1085.653854][T29103] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1085.668132][ T3518] vhci_hcd vhci_hcd.0: Device attached
[ 1085.675776][T29103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.686432][ T3521] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15)
[ 1085.693049][ T3521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1085.711692][ T3521] vhci_hcd vhci_hcd.0: Device attached
[ 1085.730231][T29103] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1085.738301][T29103] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1085.748891][T29103] cdc_wdm 2-1:1.0: skipping garbage
[ 1085.760007][ T3518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1085.768624][T29103] cdc_wdm 2-1:1.0: skipping garbage
[ 1085.774898][T29103] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1085.799626][ T3518] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17)
[ 1085.806471][ T3518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1085.816562][T30907] usb usb38-port1: attempt power cycle
[ 1085.835204][ T3518] vhci_hcd vhci_hcd.0: Device attached
[ 1085.848161][ T3521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21)
[ 1085.854793][ T3521] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1085.925051][ T3521] vhci_hcd vhci_hcd.0: Device attached
[ 1085.937176][ T3518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1085.955398][ T3518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1085.966499][ T3518] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1085.975399][T30907] usb 38-1: SetAddress Request (12) to port 0
[ 1085.981801][T30907] usb 38-1: new SuperSpeed USB device number 12 using vhci_hcd
[ 1086.042323][T29103] usb 2-1: USB disconnect, device number 52
[ 1086.085659][ T3519] vhci_hcd: connection closed
[ 1086.086376][ T3522] vhci_hcd: connection closed
[ 1086.095821][ T3531] vhci_hcd: connection reset by peer
[ 1086.113083][ T3528] vhci_hcd: connection closed
[ 1086.139268][ T1168] vhci_hcd: stop threads
[ 1086.203335][ T1168] vhci_hcd: release socket
[ 1086.226737][ T1168] vhci_hcd: disconnect device
[ 1086.233120][ T1168] vhci_hcd: stop threads
[ 1086.249924][ T1168] vhci_hcd: release socket
[ 1086.260362][ T1168] vhci_hcd: disconnect device
[ 1086.270521][ T1168] vhci_hcd: stop threads
[ 1086.280401][ T1168] vhci_hcd: release socket
[ 1086.300767][ T1168] vhci_hcd: disconnect device
[ 1086.311225][ T1168] vhci_hcd: stop threads
[ 1086.321146][ T1168] vhci_hcd: release socket
[ 1086.337993][ T1168] vhci_hcd: disconnect device
[ 1086.382421][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3515'.
[ 1086.755768][T26926] vhci_hcd: vhci_device speed not set
[ 1086.941604][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3519'.
[ 1087.877354][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3522'.
[ 1088.046027][T30914] usb usb36-port1: attempt power cycle
[ 1088.058543][ T3633] netlink: 'syz.1.3529': attribute type 33 has an invalid length.
[ 1088.097568][ T3633] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3529'.
[ 1088.225844][T30898] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1088.425263][T30898] usb 7-1: config 0 has no interfaces?
[ 1088.437960][T30898] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1088.449492][T30898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.471766][T30898] usb 7-1: Product: syz
[ 1088.488373][T30898] usb 7-1: Manufacturer: syz
[ 1088.507961][T30898] usb 7-1: SerialNumber: syz
[ 1088.708517][T30914] usb usb36-port1: unable to enumerate USB device
[ 1088.724002][ T3649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1088.816137][T30898] usb 7-1: config 0 descriptor??
[ 1089.037219][ T3629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1089.705527][T30914] IPVS: starting estimator thread 0...
[ 1089.832265][ T3673] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1091.022785][T30907] usb 38-1: device descriptor read/8, error -110
[ 1091.220626][   T43] usb 7-1: USB disconnect, device number 24
[ 1091.432696][T30907] usb usb38-port1: unable to enumerate USB device
[ 1091.512288][T30913] vhci_hcd: vhci_device speed not set
[ 1091.784373][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3553'.
[ 1092.966857][   T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1093.133589][   T43] usb 4-1: Using ep0 maxpacket: 8
[ 1093.144619][   T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1093.154326][   T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1093.179810][   T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1093.193431][   T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1093.205916][   T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1093.219891][   T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1093.229951][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.518195][   T43] usb 4-1: GET_CAPABILITIES returned 0
[ 1093.524573][   T43] usbtmc 4-1:16.0: can't read capabilities
[ 1093.612358][T30913] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1093.773683][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.795583][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1093.822988][T30913] usb 6-1: config 0 has no interfaces?
[ 1093.839915][T30913] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1094.028728][T30913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.048460][T30913] usb 6-1: Product: syz
[ 1094.060540][T30913] usb 6-1: Manufacturer: syz
[ 1094.071669][T30913] usb 6-1: SerialNumber: syz
[ 1094.080987][ T3771] veth1_macvtap: left promiscuous mode
[ 1094.117929][T30913] usb 6-1: config 0 descriptor??
[ 1094.145821][ T3771] macsec0: entered allmulticast mode
[ 1094.181767][ T3777] veth1_macvtap: entered promiscuous mode
[ 1094.189813][ T3777] veth1_macvtap: entered allmulticast mode
[ 1094.211514][ T3777] macsec0: left allmulticast mode
[ 1094.220330][ T3771] 
[ 1094.222700][ T3771] =====================================================
[ 1094.229623][ T3771] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1094.237152][ T3771] 6.16.0-syzkaller-12256-g561c80369df0 #0 Not tainted
[ 1094.244010][ T3771] -----------------------------------------------------
[ 1094.250960][ T3771] syz.1.3565/3771 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1094.258592][ T3771] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[ 1094.267319][ T3771] 
[ 1094.267319][ T3771] and this task is already holding:
[ 1094.274698][ T3771] ffff888055f7f920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 1094.283401][ T3771] which would create a new lock dependency:
[ 1094.289303][ T3771]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[ 1094.296873][ T3771] 
[ 1094.296873][ T3771] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1094.306328][ T3771]  (&client->buffer_lock){..-.}-{3:3}
[ 1094.306352][ T3771] 
[ 1094.306352][ T3771] ... which became SOFTIRQ-irq-safe at:
[ 1094.319418][ T3771]   lock_acquire+0x120/0x360
[ 1094.324133][ T3771]   _raw_spin_lock+0x2e/0x40
[ 1094.328739][ T3771]   evdev_pass_values+0xb9/0xbd0
[ 1094.333676][ T3771]   evdev_events+0x1e6/0x340
[ 1094.338268][ T3771]   input_pass_values+0x285/0x890
[ 1094.343307][ T3771]   input_event_dispose+0x330/0x6b0
[ 1094.348692][ T3771]   input_event+0x89/0xe0
[ 1094.353102][ T3771]   hidinput_report_event+0xa1/0x100
[ 1094.358467][ T3771]   hid_report_raw_event+0x148b/0x16d0
[ 1094.363923][ T3771]   hid_input_report+0x43e/0x520
[ 1094.368863][ T3771]   hid_irq_in+0x47e/0x6d0
[ 1094.373282][ T3771]   __usb_hcd_giveback_urb+0x417/0x690
[ 1094.378736][ T3771]   dummy_timer+0x862/0x4550
[ 1094.383317][ T3771]   __hrtimer_run_queues+0x52c/0xc60
[ 1094.388694][ T3771]   hrtimer_run_softirq+0x187/0x2b0
[ 1094.393901][ T3771]   handle_softirqs+0x283/0x870
[ 1094.398742][ T3771]   __irq_exit_rcu+0xca/0x1f0
[ 1094.403406][ T3771]   irq_exit_rcu+0x9/0x30
[ 1094.407828][ T3771]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1094.413540][ T3771]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1094.419613][ T3771]   _raw_spin_unlock_irq+0x29/0x50
[ 1094.424816][ T3771]   schedule+0xeb/0x360
[ 1094.429048][ T3771]   schedule_timeout+0x12b/0x270
[ 1094.433980][ T3771]   msleep+0xa2/0x100
[ 1094.438003][ T3771]   hub_port_reset+0x5b8/0x1750
[ 1094.442862][ T3771]   hub_port_init+0xfb9/0x2800
[ 1094.447626][ T3771]   hub_event+0x2532/0x4a20
[ 1094.452126][ T3771]   process_scheduled_works+0xade/0x17b0
[ 1094.457798][ T3771]   worker_thread+0x8a0/0xda0
[ 1094.462468][ T3771]   kthread+0x70e/0x8a0
[ 1094.466617][ T3771]   ret_from_fork+0x3fc/0x770
[ 1094.471287][ T3771]   ret_from_fork_asm+0x1a/0x30
[ 1094.476228][ T3771] 
[ 1094.476228][ T3771] to a SOFTIRQ-irq-unsafe lock:
[ 1094.483256][ T3771]  (tasklist_lock){.+.+}-{3:3}
[ 1094.483285][ T3771] 
[ 1094.483285][ T3771] ... which became SOFTIRQ-irq-unsafe at:
[ 1094.495922][ T3771] ...
[ 1094.495932][ T3771]   lock_acquire+0x120/0x360
[ 1094.503207][ T3771]   _raw_read_lock+0x36/0x50
[ 1094.507911][ T3771]   __do_wait+0xde/0x740
[ 1094.512181][ T3771]   do_wait+0x1f8/0x520
[ 1094.516440][ T3771]   kernel_wait+0xab/0x170
[ 1094.520857][ T3771]   call_usermodehelper_exec_work+0xbe/0x230
[ 1094.527028][ T3771]   process_scheduled_works+0xade/0x17b0
[ 1094.532663][ T3771]   worker_thread+0x8a0/0xda0
[ 1094.537335][ T3771]   kthread+0x70e/0x8a0
[ 1094.541496][ T3771]   ret_from_fork+0x3fc/0x770
[ 1094.546189][ T3771]   ret_from_fork_asm+0x1a/0x30
[ 1094.551120][ T3771] 
[ 1094.551120][ T3771] other info that might help us debug this:
[ 1094.551120][ T3771] 
[ 1094.561511][ T3771] Chain exists of:
[ 1094.561511][ T3771]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[ 1094.561511][ T3771] 
[ 1094.574714][ T3771]  Possible interrupt unsafe locking scenario:
[ 1094.574714][ T3771] 
[ 1094.583111][ T3771]        CPU0                    CPU1
[ 1094.588467][ T3771]        ----                    ----
[ 1094.593839][ T3771]   lock(tasklist_lock);
[ 1094.598074][ T3771]                                local_irq_disable();
[ 1094.604824][ T3771]                                lock(&client->buffer_lock);
[ 1094.612185][ T3771]                                lock(&f_owner->lock);
[ 1094.619027][ T3771]   <Interrupt>
[ 1094.622486][ T3771]     lock(&client->buffer_lock);
[ 1094.627508][ T3771] 
[ 1094.627508][ T3771]  *** DEADLOCK ***
[ 1094.627508][ T3771] 
[ 1094.635731][ T3771] 2 locks held by syz.1.3565/3771:
[ 1094.640829][ T3771]  #0: ffff888027e65340 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0
[ 1094.649370][ T3771]  #1: ffff888055f7f920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 1094.658495][ T3771] 
[ 1094.658495][ T3771] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1094.668887][ T3771]   -> (&client->buffer_lock){..-.}-{3:3} {
[ 1094.674808][ T3771]      IN-SOFTIRQ-W at:
[ 1094.678979][ T3771]                         lock_acquire+0x120/0x360
[ 1094.685474][ T3771]                         _raw_spin_lock+0x2e/0x40
[ 1094.691967][ T3771]                         evdev_pass_values+0xb9/0xbd0
[ 1094.698832][ T3771]                         evdev_events+0x1e6/0x340
[ 1094.705323][ T3771]                         input_pass_values+0x285/0x890
[ 1094.712251][ T3771]                         input_event_dispose+0x330/0x6b0
[ 1094.719350][ T3771]                         input_event+0x89/0xe0
[ 1094.725584][ T3771]                         hidinput_report_event+0xa1/0x100
[ 1094.732952][ T3771]                         hid_report_raw_event+0x148b/0x16d0
[ 1094.740346][ T3771]                         hid_input_report+0x43e/0x520
[ 1094.747210][ T3771]                         hid_irq_in+0x47e/0x6d0
[ 1094.753568][ T3771]                         __usb_hcd_giveback_urb+0x417/0x690
[ 1094.760931][ T3771]                         dummy_timer+0x862/0x4550
[ 1094.767427][ T3771]                         __hrtimer_run_queues+0x52c/0xc60
[ 1094.774611][ T3771]                         hrtimer_run_softirq+0x187/0x2b0
[ 1094.781799][ T3771]                         handle_softirqs+0x283/0x870
[ 1094.788550][ T3771]                         __irq_exit_rcu+0xca/0x1f0
[ 1094.795129][ T3771]                         irq_exit_rcu+0x9/0x30
[ 1094.801358][ T3771]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1094.809006][ T3771]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1094.817060][ T3771]                         _raw_spin_unlock_irq+0x29/0x50
[ 1094.824081][ T3771]                         schedule+0xeb/0x360
[ 1094.830140][ T3771]                         schedule_timeout+0x12b/0x270
[ 1094.836976][ T3771]                         msleep+0xa2/0x100
[ 1094.842861][ T3771]                         hub_port_reset+0x5b8/0x1750
[ 1094.849704][ T3771]                         hub_port_init+0xfb9/0x2800
[ 1094.856372][ T3771]                         hub_event+0x2532/0x4a20
[ 1094.862783][ T3771]                         process_scheduled_works+0xade/0x17b0
[ 1094.870316][ T3771]                         worker_thread+0x8a0/0xda0
[ 1094.876899][ T3771]                         kthread+0x70e/0x8a0
[ 1094.882978][ T3771]                         ret_from_fork+0x3fc/0x770
[ 1094.889554][ T3771]                         ret_from_fork_asm+0x1a/0x30
[ 1094.896307][ T3771]      INITIAL USE at:
[ 1094.900365][ T3771]                        lock_acquire+0x120/0x360
[ 1094.906778][ T3771]                        _raw_spin_lock+0x2e/0x40
[ 1094.913204][ T3771]                        evdev_pass_values+0xb9/0xbd0
[ 1094.919960][ T3771]                        evdev_events+0x1e6/0x340
[ 1094.926366][ T3771]                        input_pass_values+0x285/0x890
[ 1094.933291][ T3771]                        input_event_dispose+0x330/0x6b0
[ 1094.940306][ T3771]                        input_inject_event+0x1dd/0x340
[ 1094.947671][ T3771]                        evdev_write+0x2fc/0x480
[ 1094.954081][ T3771]                        vfs_write+0x27b/0xb30
[ 1094.960229][ T3771]                        ksys_write+0x145/0x250
[ 1094.966482][ T3771]                        __do_fast_syscall_32+0xb6/0x2b0
[ 1094.973763][ T3771]                        do_fast_syscall_32+0x34/0x80
[ 1094.980545][ T3771]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1094.988791][ T3771]    }
[ 1094.991461][ T3771]    ... key      at: [<ffffffff99e2a1a0>] evdev_open.__key.25+0x0/0x20
[ 1094.999791][ T3771]  -> (&new->fa_lock){....}-{3:3} {
[ 1095.005003][ T3771]     INITIAL USE at:
[ 1095.008977][ T3771]                      lock_acquire+0x120/0x360
[ 1095.015220][ T3771]                      _raw_write_lock_irq+0xa2/0xf0
[ 1095.021899][ T3771]                      fasync_remove_entry+0xf1/0x1c0
[ 1095.028650][ T3771]                      lease_modify+0x1ca/0x3c0
[ 1095.034902][ T3771]                      locks_remove_file+0x4bf/0xea0
[ 1095.041573][ T3771]                      __fput+0x3ab/0xa70
[ 1095.047289][ T3771]                      fput_close_sync+0x119/0x200
[ 1095.053780][ T3771]                      __ia32_sys_close+0x7f/0x110
[ 1095.060280][ T3771]                      __do_fast_syscall_32+0xb6/0x2b0
[ 1095.067121][ T3771]                      do_fast_syscall_32+0x34/0x80
[ 1095.073704][ T3771]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.081845][ T3771]     INITIAL READ USE at:
[ 1095.086251][ T3771]                           lock_acquire+0x120/0x360
[ 1095.092920][ T3771]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1095.100382][ T3771]                           kill_fasync+0x199/0x4d0
[ 1095.106962][ T3771]                           lease_break_callback+0x26/0x30
[ 1095.114151][ T3771]                           __break_lease+0x6a2/0x1620
[ 1095.120992][ T3771]                           do_dentry_open+0x8b7/0x13f0
[ 1095.127916][ T3771]                           vfs_open+0x3b/0x340
[ 1095.134236][ T3771]                           path_openat+0x2ee5/0x3830
[ 1095.141089][ T3771]                           do_filp_open+0x1fa/0x410
[ 1095.147870][ T3771]                           do_sys_openat2+0x121/0x1c0
[ 1095.154712][ T3771]                           __ia32_compat_sys_openat+0x131/0x160
[ 1095.162430][ T3771]                           __do_fast_syscall_32+0xb6/0x2b0
[ 1095.169817][ T3771]                           do_fast_syscall_32+0x34/0x80
[ 1095.176942][ T3771]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.185453][ T3771]   }
[ 1095.188053][ T3771]   ... key      at: [<ffffffff99b2af80>] fasync_insert_entry.__key+0x0/0x20
[ 1095.196943][ T3771]   ... acquired at:
[ 1095.200829][ T3771]    lock_acquire+0x120/0x360
[ 1095.205511][ T3771]    _raw_read_lock_irqsave+0xaf/0x100
[ 1095.210966][ T3771]    kill_fasync+0x199/0x4d0
[ 1095.215547][ T3771]    evdev_pass_values+0x627/0xbd0
[ 1095.220652][ T3771]    evdev_events+0x1e6/0x340
[ 1095.225321][ T3771]    input_pass_values+0x285/0x890
[ 1095.230425][ T3771]    input_event_dispose+0x330/0x6b0
[ 1095.235698][ T3771]    input_inject_event+0x1dd/0x340
[ 1095.240886][ T3771]    evdev_write+0x2fc/0x480
[ 1095.245471][ T3771]    vfs_write+0x27b/0xb30
[ 1095.249974][ T3771]    ksys_write+0x145/0x250
[ 1095.254467][ T3771]    __do_fast_syscall_32+0xb6/0x2b0
[ 1095.259754][ T3771]    do_fast_syscall_32+0x34/0x80
[ 1095.264780][ T3771]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.271282][ T3771] 
[ 1095.273598][ T3771] -> (&f_owner->lock){....}-{3:3} {
[ 1095.278813][ T3771]    INITIAL USE at:
[ 1095.282704][ T3771]                    lock_acquire+0x120/0x360
[ 1095.288780][ T3771]                    _raw_write_lock_irq+0xa2/0xf0
[ 1095.295281][ T3771]                    __f_setown+0x67/0x370
[ 1095.301083][ T3771]                    generic_setlease+0xd60/0x1240
[ 1095.307651][ T3771]                    fcntl_setlease+0x3a2/0x4c0
[ 1095.313903][ T3771]                    do_fcntl+0x6a9/0x1910
[ 1095.319713][ T3771]                    do_compat_fcntl64+0x477/0x720
[ 1095.326294][ T3771]                    __do_fast_syscall_32+0xb6/0x2b0
[ 1095.332976][ T3771]                    do_fast_syscall_32+0x34/0x80
[ 1095.339400][ T3771]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.347309][ T3771]    INITIAL READ USE at:
[ 1095.351655][ T3771]                         lock_acquire+0x120/0x360
[ 1095.358159][ T3771]                         _raw_read_lock_irqsave+0xaf/0x100
[ 1095.365447][ T3771]                         send_sigio+0x38/0x370
[ 1095.371679][ T3771]                         kill_fasync+0x24d/0x4d0
[ 1095.378089][ T3771]                         lease_break_callback+0x26/0x30
[ 1095.385131][ T3771]                         __break_lease+0x6a2/0x1620
[ 1095.391900][ T3771]                         do_dentry_open+0x8b7/0x13f0
[ 1095.398749][ T3771]                         vfs_open+0x3b/0x340
[ 1095.404829][ T3771]                         path_openat+0x2ee5/0x3830
[ 1095.411412][ T3771]                         do_filp_open+0x1fa/0x410
[ 1095.417910][ T3771]                         do_sys_openat2+0x121/0x1c0
[ 1095.424574][ T3771]                         __ia32_compat_sys_openat+0x131/0x160
[ 1095.432128][ T3771]                         __do_fast_syscall_32+0xb6/0x2b0
[ 1095.439257][ T3771]                         do_fast_syscall_32+0x34/0x80
[ 1095.446108][ T3771]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.454427][ T3771]  }
[ 1095.456942][ T3771]  ... key      at: [<ffffffff99b2af60>] file_f_owner_allocate.__key+0x0/0x20
[ 1095.465816][ T3771]  ... acquired at:
[ 1095.469704][ T3771]    lock_acquire+0x120/0x360
[ 1095.474382][ T3771]    _raw_read_lock_irqsave+0xaf/0x100
[ 1095.479840][ T3771]    send_sigio+0x38/0x370
[ 1095.484251][ T3771]    kill_fasync+0x24d/0x4d0
[ 1095.488834][ T3771]    lease_break_callback+0x26/0x30
[ 1095.494198][ T3771]    __break_lease+0x6a2/0x1620
[ 1095.499056][ T3771]    do_dentry_open+0x8b7/0x13f0
[ 1095.503997][ T3771]    vfs_open+0x3b/0x340
[ 1095.508242][ T3771]    path_openat+0x2ee5/0x3830
[ 1095.512996][ T3771]    do_filp_open+0x1fa/0x410
[ 1095.517664][ T3771]    do_sys_openat2+0x121/0x1c0
[ 1095.522500][ T3771]    __ia32_compat_sys_openat+0x131/0x160
[ 1095.528210][ T3771]    __do_fast_syscall_32+0xb6/0x2b0
[ 1095.533492][ T3771]    do_fast_syscall_32+0x34/0x80
[ 1095.538528][ T3771]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.545041][ T3771] 
[ 1095.547354][ T3771] 
[ 1095.547354][ T3771] the dependencies between the lock to be acquired
[ 1095.547361][ T3771]  and SOFTIRQ-irq-unsafe lock:
[ 1095.560858][ T3771] -> (tasklist_lock){.+.+}-{3:3} {
[ 1095.565975][ T3771]    HARDIRQ-ON-R at:
[ 1095.569967][ T3771]                     lock_acquire+0x120/0x360
[ 1095.576116][ T3771]                     _raw_read_lock+0x36/0x50
[ 1095.582319][ T3771]                     __do_wait+0xde/0x740
[ 1095.588149][ T3771]                     do_wait+0x1f8/0x520
[ 1095.593882][ T3771]                     kernel_wait+0xab/0x170
[ 1095.599951][ T3771]                     call_usermodehelper_exec_work+0xbe/0x230
[ 1095.607513][ T3771]                     process_scheduled_works+0xade/0x17b0
[ 1095.614836][ T3771]                     worker_thread+0x8a0/0xda0
[ 1095.621068][ T3771]                     kthread+0x70e/0x8a0
[ 1095.626895][ T3771]                     ret_from_fork+0x3fc/0x770
[ 1095.633144][ T3771]                     ret_from_fork_asm+0x1a/0x30
[ 1095.639750][ T3771]    SOFTIRQ-ON-R at:
[ 1095.643978][ T3771]                     lock_acquire+0x120/0x360
[ 1095.650218][ T3771]                     _raw_read_lock+0x36/0x50
[ 1095.656364][ T3771]                     __do_wait+0xde/0x740
[ 1095.662166][ T3771]                     do_wait+0x1f8/0x520
[ 1095.667878][ T3771]                     kernel_wait+0xab/0x170
[ 1095.673857][ T3771]                     call_usermodehelper_exec_work+0xbe/0x230
[ 1095.681416][ T3771]                     process_scheduled_works+0xade/0x17b0
[ 1095.688616][ T3771]                     worker_thread+0x8a0/0xda0
[ 1095.694859][ T3771]                     kthread+0x70e/0x8a0
[ 1095.700602][ T3771]                     ret_from_fork+0x3fc/0x770
[ 1095.707188][ T3771]                     ret_from_fork_asm+0x1a/0x30
[ 1095.713604][ T3771]    INITIAL USE at:
[ 1095.717499][ T3771]                    lock_acquire+0x120/0x360
[ 1095.723657][ T3771]                    _raw_write_lock_irq+0xa2/0xf0
[ 1095.730153][ T3771]                    copy_process+0x224f/0x3c00
[ 1095.736491][ T3771]                    kernel_clone+0x21e/0x840
[ 1095.742570][ T3771]                    user_mode_thread+0xdd/0x140
[ 1095.748912][ T3771]                    rest_init+0x23/0x300
[ 1095.754663][ T3771]                    start_kernel+0x3a9/0x410
[ 1095.760725][ T3771]                    x86_64_start_reservations+0x24/0x30
[ 1095.767745][ T3771]                    x86_64_start_kernel+0x143/0x1c0
[ 1095.774417][ T3771]                    common_startup_64+0x13e/0x147
[ 1095.781001][ T3771]    INITIAL READ USE at:
[ 1095.785324][ T3771]                         lock_acquire+0x120/0x360
[ 1095.791834][ T3771]                         _raw_read_lock+0x36/0x50
[ 1095.798329][ T3771]                         __do_wait+0xde/0x740
[ 1095.804563][ T3771]                         do_wait+0x1f8/0x520
[ 1095.810628][ T3771]                         kernel_wait+0xab/0x170
[ 1095.816949][ T3771]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1095.824862][ T3771]                         process_scheduled_works+0xade/0x17b0
[ 1095.832400][ T3771]                         worker_thread+0x8a0/0xda0
[ 1095.839007][ T3771]                         kthread+0x70e/0x8a0
[ 1095.845085][ T3771]                         ret_from_fork+0x3fc/0x770
[ 1095.851670][ T3771]                         ret_from_fork_asm+0x1a/0x30
[ 1095.858523][ T3771]  }
[ 1095.861017][ T3771]  ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 1095.868735][ T3771]  ... acquired at:
[ 1095.872526][ T3771]    lock_acquire+0x120/0x360
[ 1095.877300][ T3771]    _raw_read_lock+0x36/0x50
[ 1095.881974][ T3771]    send_sigurg+0x12b/0x420
[ 1095.886641][ T3771]    sk_send_sigurg+0x6c/0x2e0
[ 1095.891401][ T3771]    queue_oob+0x420/0x4f0
[ 1095.895824][ T3771]    unix_stream_sendmsg+0xc3f/0xdf0
[ 1095.901103][ T3771]    __sock_sendmsg+0x21c/0x270
[ 1095.905945][ T3771]    ____sys_sendmsg+0x505/0x830
[ 1095.910958][ T3771]    ___sys_sendmsg+0x21f/0x2a0
[ 1095.915801][ T3771]    __sys_sendmsg+0x164/0x220
[ 1095.920551][ T3771]    __do_fast_syscall_32+0xb6/0x2b0
[ 1095.925829][ T3771]    do_fast_syscall_32+0x34/0x80
[ 1095.930863][ T3771]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.937383][ T3771] 
[ 1095.939710][ T3771] 
[ 1095.939710][ T3771] stack backtrace:
[ 1095.945700][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.1.3565 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[ 1095.945720][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1095.945729][ T3771] Call Trace:
[ 1095.945736][ T3771]  <TASK>
[ 1095.945742][ T3771]  dump_stack_lvl+0x189/0x250
[ 1095.945768][ T3771]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1095.945783][ T3771]  ? __pfx__printk+0x10/0x10
[ 1095.945801][ T3771]  validate_chain+0x1f05/0x2140
[ 1095.945820][ T3771]  __lock_acquire+0xab9/0xd20
[ 1095.945841][ T3771]  ? send_sigurg+0x12b/0x420
[ 1095.945853][ T3771]  lock_acquire+0x120/0x360
[ 1095.945870][ T3771]  ? send_sigurg+0x12b/0x420
[ 1095.945883][ T3771]  ? _raw_read_lock_irqsave+0xbb/0x100
[ 1095.945900][ T3771]  _raw_read_lock+0x36/0x50
[ 1095.945914][ T3771]  ? send_sigurg+0x12b/0x420
[ 1095.945926][ T3771]  send_sigurg+0x12b/0x420
[ 1095.945940][ T3771]  sk_send_sigurg+0x6c/0x2e0
[ 1095.945955][ T3771]  queue_oob+0x420/0x4f0
[ 1095.945970][ T3771]  ? __pfx_queue_oob+0x10/0x10
[ 1095.945984][ T3771]  ? __schedule+0x17ae/0x4cc0
[ 1095.945999][ T3771]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 1095.946015][ T3771]  unix_stream_sendmsg+0xc3f/0xdf0
[ 1095.946030][ T3771]  ? __lock_acquire+0xab9/0xd20
[ 1095.946048][ T3771]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 1095.946062][ T3771]  ? __asan_memset+0x22/0x50
[ 1095.946076][ T3771]  ? __import_iovec+0x5d4/0x7f0
[ 1095.946090][ T3771]  ? aa_sock_msg_perm+0xda/0x1d0
[ 1095.946108][ T3771]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1095.946121][ T3771]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 1095.946134][ T3771]  __sock_sendmsg+0x21c/0x270
[ 1095.946149][ T3771]  ____sys_sendmsg+0x505/0x830
[ 1095.946162][ T3771]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1095.946175][ T3771]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1095.946194][ T3771]  ___sys_sendmsg+0x21f/0x2a0
[ 1095.946206][ T3771]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1095.946225][ T3771]  ? __fget_files+0x2a/0x420
[ 1095.946242][ T3771]  ? __fget_files+0x3a0/0x420
[ 1095.946262][ T3771]  __sys_sendmsg+0x164/0x220
[ 1095.946274][ T3771]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1095.946288][ T3771]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1095.946305][ T3771]  __do_fast_syscall_32+0xb6/0x2b0
[ 1095.946324][ T3771]  do_fast_syscall_32+0x34/0x80
[ 1095.946341][ T3771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.946356][ T3771] RIP: 0023:0xf7f02539
[ 1095.946368][ T3771] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1095.946380][ T3771] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1095.946394][ T3771] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000080
[ 1095.946404][ T3771] RDX: 00000000240408c1 RSI: 0000000000000000 RDI: 0000000000000000
[ 1095.946418][ T3771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1095.946426][ T3771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1095.946433][ T3771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1095.946445][ T3771]  </TASK>
[ 1096.267848][ T3777] veth1_macvtap: left allmulticast mode
[ 1096.653596][T32371] usb 6-1: USB disconnect, device number 92
[ 1098.293132][T17883] Bluetooth: hci3: command 0x0419 tx timeout
[ 1098.852234][ T3746] usbtmc 4-1:16.0: usb_control_msg returned -110
[ 1098.868946][   T43] usb 4-1: USB disconnect, device number 33