last executing test programs:

14.282254257s ago: executing program 1 (id=1123):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04020000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000f0500020007000000080006400000000000000000050000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
r2 = socket$inet6(0x2d, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20)
sendto$inet6(r2, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.139444427s ago: executing program 3 (id=1135):
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x2, 0x1000002})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

11.433792726s ago: executing program 1 (id=1140):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}})
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/15, &(0x7f0000000200)=0xf)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffe5ffffffffffffffffff080211000000000000000000000000006482848b960c1218240301b2"], 0x39)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000700)=ANY=[@ANYBLOB="1201010200000020820509004000010203010902690003010b6080080b010001ff200209040000000101200009240100040b0900000904ffff000102200009040101"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

11.235799616s ago: executing program 3 (id=1141):
r0 = syz_clone3(&(0x7f0000001200)={0x11000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/211, &(0x7f00000011c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000012c0)=0xf2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000002680))
r4 = syz_usb_connect$uac1(0x3, 0xc8, &(0x7f00000026c0)={{0x12, 0x1, 0xcc16c55f1920a16c, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x3, 0x60, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x1e}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x2, 0xf0}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "3b35bf74a303"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x8, 0x76, "3a0084"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x4b, 'W\v'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7f, 0x6, 0x4c, {0x7, 0x25, 0x1, 0x8, 0xa8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xab, 0x44, 0x4, 0x40}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x0, 0xec, "1bc8b777e7b9"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x47, 0x3, 0x80, 0x7, "c0e78a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x30, 0xc, '%'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf9, 0xe, 0xfd, {0x7, 0x25, 0x1, 0x4, 0xa3, 0x100}}}}}}}}]}}, &(0x7f0000002b40)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x250, 0xb, 0x0, 0x1, 0x0, 0x5}, 0x12c, &(0x7f0000002800)={0x5, 0xf, 0x12c, 0x4, [@generic={0xfd, 0x10, 0xb, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x4, 0xf0f, 0x4, [0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "73c6d727b88691a446b8b38d516893ff"}, @generic={0x6, 0x10, 0x3, "1fdc88"}]}, 0x2, [{0xea, &(0x7f0000002940)=@string={0xea, 0x3, "241e76d12f3a3a9eb9811e0fe3d9e2c3cd79b8095f8038759dc6129f8598a5e5c8eff4d18e773a8cf565911c9150d86232e02bf52497a519a6b99de590e847a4b036cd2d1cb94e9f1fc2bd588a596738d91c3e5101c0df863df03de0918582bed301880bcdd35d6205453d2dd81bfcb0b130038f82fcd346cd0154eba708b836becbebc36d7286dff3740b68eec50adeb020dda332ffc1a116dd4b64b0697e658857c4855c518e214867d4af6005b095fb43e0a58a021fbd76ee596bf616c2504dc4291024c19139f4bc37ee28e1ec96417658975aca87b6cc3a7b14fc2bc0ecaba2a0bb2c4fcef0"}}, {0xc8, &(0x7f0000002a40)=@string={0xc8, 0x3, "0d923db3182693813ad4c5df53599f4e96133b460db9cc45cde57500c3d741d1097f81a7552332839189f28193dbe59b3dac36207833fc15ab204f5f9d466d4caf07b8002c241a603016cddef1f3038e29b59b9b67ae29db8c04bf28f5706d6d0e37ce434108137ab23600f2e70fea42df93cfd47d9076673b6ea627d26d1307ae844764486b11a262dc6573bcde654604ea473a37515a711966a8027fa8cf73518e264719812e51e296ae2ac8235416c95da5f3e4c8ae81b71c982b04d5a539f2af000bad29"}}]})
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002b80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x403, 0x97c1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x2, 0x98, 0x1, {0x22, 0x43e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x2a}}, [{{0x9, 0x5, 0x2, 0x3, 0x7df, 0x5, 0x78, 0x9}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x200, 0x3, 0x4, 0x3, 0x10, 0xa}, 0x1ee, &(0x7f0000002c00)={0x5, 0xf, 0x1ee, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "a01a9c685bd94dfaf796dd4c7a1a6246"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0xe}, @generic={0xd7, 0x10, 0x1, "221ab04196a3d51b42b537bf746ed30c353445fa3a4c23bc41d1a4968cf9b299b560968a8fdd35c22729513159822ef0676b8b78e736568d14a1d2aea7ed8145c755bd5148d04f9d70f96cc1c6f083a6625de5dc50d5c74e3cdc8fb19a12b9451feb7e513ad019cf9e5414df11bc7f26632cdc25855daf8c55f7eb1fc53e926362201572a394437c383620086e9c5b6cbd5c69d1378886b71d38fab8a1b63f525a8586a7aca10e6d37f217683204c262990b3258847621b7474f7ef0b6730616953b6ccca76d679559a15c7952e1cfd14a4a44f6"}, @ptm_cap={0x3}, @generic={0xed, 0x10, 0x3, "5496346e9d6db7e77b594fdcdc24ac3278b328443dd383c8e775bf288a9c982adc74df916261810a231dddd6c85b733f05120f8589551ee7bd76422e4964bb06d9b63f1ed8972160ad08022187d58eddc63003f4267afd33925cdd929b7adf57a09cb01eb84e222711ff7ae22a6a2f549ad149f4480ddae973d42443aaeb1bc1d19dac1d893acefac6d96b19b76cd8b203c48a59aca715b8fba35679c7f5604f36382745698d33889e67e7703e93faf0eb2845eeb4a743ab64b9d8388f7faa02bd3a33f5481e1e501ef0b3e7c9227776a3f58446a99f994a8ce7f78b0042839a943edd1afdff56135493"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xf, 0x3}]}, 0x3, [{0x3c, &(0x7f0000002e00)=@string={0x3c, 0x3, "700eccb3dc67116c41768096bec6841b9a8041842f72fb13fdcf31d3e161db45798eb64d49e1a8edf43399c068491e3f2cbad4174d55c49723fc"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x430}}, {0x6f, &(0x7f0000002e80)=@string={0x6f, 0x3, "72c9032bab5b4fc7e9b825162df37cbef2348abb8656fd181eb3da57e1934a732f387d824e796bf2f613122e1e845f6ac37f58f4fe85f7c19a9bc5d3aaf363a48aa37dbf8f17d97a69608a95ded2e16383741a1e831a3cbd4df8d2649d79ebf03637f2eebeca80caf84ee37e26"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000003080)={0x24, &(0x7f0000002f40)={0x0, 0x30, 0x6f, {0x6f, 0x21, "ac06f013fa0129d1a450459a86639d91da256ef3176c2c90777bbd8a2fe9146fc4fada69635c854c9fe0543f1abba20af62284b4c2e0e82166a5ee63d306e0afe6b0fade866662c0d83fbea88588bccd779eea64edc98a797038377406d6751f06e930d180684af0e79a05e623"}}, &(0x7f0000002fc0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "d1bf035f3443b28a76db4f34d56726a0bebb"}}, &(0x7f0000003000)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "93ee52a9"}, @local=@item_4={0x3, 0x2, 0x7, "bb4b9c91"}, @local=@item_4={0x3, 0x2, 0x7, "c5502b8d"}, @main=@item_4={0x3, 0x0, 0x9, "7704088b"}, @global=@item_012={0x1, 0x1, 0x0, "eb"}, @global=@item_012={0x1, 0x1, 0x6, "a0"}, @main=@item_4={0x3, 0x0, 0x8, "02be603e"}, @global, @global=@item_012={0x1, 0x1, 0x5, "bf"}]}}, &(0x7f0000003040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xe0a}}}}, &(0x7f0000003300)={0x2c, &(0x7f00000030c0)={0x40, 0xf, 0xb9, "40d5b9bb2538a887f063e71e44d4bcc0121737328126cba91f34cd8386e3fc502dc14eba43c017dab3d50cbad64d41002f8a7742000b982aab231baa5026b56096d98c18f49556295b5e975e9ef13f83427be2b87d05ec95ee0955a1b0549ce8afdb698b1c1ebf9f33bdb878f34b336a3499240158dc84172225532edab96cd7cb1959de0512be70e3a8e547122714644853fd0bbc6a46cab9bb09c62d8624c92ec52855cbde161ae7d6c3e1da950603262c70070edc1e66d9"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0x77}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003200)={0x20, 0x1, 0x7b, "923a9ace7a3270ffb6f4208c8cef83c69d0d4f518649f75a87673451bb9ead0f9ea9791ebdbfc52582a196b105cf9e6bec18c838445d0ebd7f0e048eaf1c604cfe86ef50cf418e371480ad1fcac34c05aff3fff8bf3e1c4aa8f50a13e4a940c43eb8e7bf4331f522925ec7a534f74ecca194d73aa04590e4adb118"}, &(0x7f00000032c0)={0x20, 0x3, 0x1, 0x8}})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000033c0)={0x0, "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"})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000038c0)='/proc/asound/card3/oss_mixer\x00', 0x1, 0x0)

9.397855166s ago: executing program 1 (id=1147):
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x2f8, 0x3a8, 0x3a8, 0x2f8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x228, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0x8, 0x103, 0x33, 0x100000, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x90, 0xe0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0xffff00, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'xfrm0\x00', {}, {0xff}, 0x67, 0xb7, 0x4, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x70}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x40, 0x1, 0x2b4})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xa1)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x3b}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x5}, {}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@remote, 0xfffffffe, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x4, 0xfffffffc, 0x0, 0xe}}, 0xe8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10)
listen(r8, 0x0)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
ioctl$KVM_CAP_PTP_KVM(r7, 0x4068aea3, &(0x7f0000000880))
bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000001480)='wg2\x00', 0x4)

8.243499395s ago: executing program 2 (id=1153):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtfilter={0x1000, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xfd0, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_ROUTE4_POLICE={0x4f8, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0xffffffffffffffff, 0x2, 0x7, 0x8, {0x9, 0x2, 0xd, 0x0, 0x9, 0xffff00}, {0x5f, 0x1, 0xb, 0xbd, 0x1000}, 0x4, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x7, 0x4, 0x4, 0x55, 0x40, 0x6, 0x13ca, 0x10001, 0x41, 0xfffff50c, 0x7, 0x10, 0xd43, 0x1, 0x0, 0x6, 0x0, 0x80, 0x1ff, 0x0, 0x80, 0x7, 0x3b3, 0x7, 0xae1, 0x9, 0x7fff, 0x5, 0x7, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x6, 0x3, 0x380000, 0x633, 0x3, 0x800, 0x0, 0x0, 0x7, 0x9, 0x4, 0x3, 0x100, 0xd, 0x9, 0xd, 0x25, 0x8, 0xfffffffb, 0x7, 0x3, 0x3, 0x108, 0xd, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x1, 0x400, 0x3, 0x8, 0x2, 0x21, 0x4, 0xa4, 0x4, 0xfffffff2, 0x280, 0x80000001, 0x40, 0x6, 0x1, 0x9, 0x80000001, 0x6, 0x1f1c000, 0x8000, 0x3, 0x2d34, 0x1, 0x101, 0x1, 0x6e2, 0x7, 0xff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x0, 0x10001, 0x1, 0x2, 0x5, 0xaf, 0x401, 0x174, 0x8000, 0x9f, 0x1, 0x0, 0x8001, 0x8, 0x997b, 0x1, 0x10, 0x800, 0xb6, 0xe, 0xb14, 0x3, 0x4, 0x1, 0x33, 0x0, 0x8, 0x244f, 0x8, 0x4, 0x1, 0x400, 0x2, 0x8, 0x6, 0x2, 0x1, 0x100, 0x2c, 0xa3, 0xfffffffd, 0xe, 0x6, 0x7f, 0x279a9097, 0x0, 0xfffffffd, 0x4, 0xa9, 0x1000, 0xd768, 0x194710c4, 0x2, 0x4, 0x6, 0xe, 0xa, 0x8, 0x0, 0x0, 0x3, 0x5, 0x100, 0xffffff66, 0xef, 0x8, 0x3c, 0x3d6ab92d, 0x8001, 0x2, 0x10000002, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x3, 0x101, 0x5, 0x400, 0x1c, 0x9, 0x4, 0x0, 0x4, 0x3, 0x6, 0x1, 0x80000, 0x2, 0x6, 0x3ff, 0x2, 0x1, 0x225, 0x4, 0x7fff, 0xb, 0x6, 0x2, 0x6, 0x603, 0x80, 0x2, 0x1, 0xe7d, 0x7f, 0x8001, 0x8001, 0x2, 0x9, 0x9, 0x2951, 0xb, 0x35, 0x8, 0x9f9, 0x0, 0x1, 0x5, 0xf, 0xf8a, 0x800, 0x8, 0x1, 0x530, 0x9, 0xfffffffc, 0x4, 0x5, 0xf027, 0x7, 0x400, 0x7f, 0x2, 0x7e9, 0x6, 0x4, 0x6, 0x3, 0x9745, 0x8, 0x5, 0x8b, 0x10000, 0x5, 0x5, 0x7, 0xcf68]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x80, {0xe, 0x1, 0x3, 0x7, 0xc49d, 0x449b}, {0x7, 0x2, 0x1, 0xfff, 0x7a9, 0x6}, 0xb, 0xfffffffc, 0xed}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x8, 0x9, 0x0, 0x1, {0x40, 0x0, 0x21d, 0x6, 0x3, 0x2e}, {0xa, 0x0, 0x1, 0x9, 0x81, 0xfffffff7}, 0x27, 0x3ff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_tunnel_key={0x34, 0x1e, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa50, 0x6, [@m_skbedit={0xa4c, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa1d, 0x6, "a5beba69938767583c0be4474b0a2d41c20b515cfb3286f9579619005847e4c1eda19ad7928ff0525d44ce6b3bc7fa60f9dd1ae5e4dba8abc89d44544f4d7dc9ad3edb64516dcf59cae7e336ecbe1f5efa779d02503aae3c36256c84af0dbf070315f72a1eab54be1164ed5ff4d1802b506d22e2949647aa7908206151076855a7fe89a93b9ba754baeec02c0ab69cd76d60ce288d6af55f342839ab8dbcdc5eecfa35dbdba458cd268aafab0b697cfdcab6292185c0c23b406b5fd834af6836cf504ff113793577511dd199aa80685d8bb37724485f1b443bf9f4d3403a5b7b3264b1d1082c4acd08e389b2a36da11ed3bfd72702d32422a5d328c8718ecdd2e168c4d13dd1ea77a2eea4d5f17102cb362a654f98171751e683c3c7077f99d3794421f48e71ff1277076072262467a37a8b70483dbb169c620d3ecd60f4d61819c78f9d04ba23ad8f1c73c3c93a88ba2d027a0460b132bf18914088901478ff64a21679906610fc620737bdd03e985caf13f7b56c915ce705154d16eb7d9c9dc7e1c63824dad72bbe0e715e6e2b2557d6d907d93517a2f803864ff1290425a0d153be663abec5c3616d4584c6d253d3590676a53baba1529aa61a36c1ec194cfeb62a54edf6f39d86e9b82ff3e82831da588bd92de1a68ce81e38cf30bd34190b7f298868dd0e02e9842eda5334c7a59284be2531959bf11574335f2c2108a31a0998753e743d2800ae7f888cdbd609fbdf8bd286a96f7b31ce56452ad77dd7fd08b087c6b687b0a72e57692d6a0d249d979d2271c4417bfca9b5f6d2655aa293aed4402dc220104c2d181469611295faacc4d1ecaa5662920c6d9036d1a92e79e86c0d8bc8096fcafcd88c93be553b0bb6fe12ab166067937c078f05b50085fe4aea8a455de3b92bd38089dee5dd957be2c7aa14cc86a0c80263c1abebf5d395b13e584704716cdfe7bd3caf49631f176f550fa0e8fbfce8cdf2f59186da56e9513094509069b2b788050e0742186aba2199beeb35a06ca6a64b0a375c3ed02f6401c774d535607aa84a4286cd94a179daa7b7f25e3c432a2230bb962f93b3a0c75f9aca8963c17cc5203ec8a81ed259442a1d3501af7e945f86b338f511a65a4bd19f4bbc21c099026800c59335088b752df9e6e1fac2a99b0298a488e63f894f68a54ebc914a5f865c596473832e616bd5d61452e4c6e374f58aa33734f3febf7d02a2d722f85137e15e02399cdf59de380524a319f0f38ec4df0b2c91cf802caa8d83aa28d76ff4ee2eb46c587a116e9228455cf946c66aa1e07eb4fef75d0a7fcb64387a16bd3cc52dfb34a623d510b59e0a7ac38afd20704d512848c7c12ee8e676b0e55e031f8bc23329e28a6ae1079d25ac786fc7049ff08ba3e0e04b805abd99c3605f7b1804b9365cb414aa363d36de17cd39e7ca9a7447ab6d66f43840e175b7219db16fa7f68eea03edb9166c9b456cdcfe6896fbe12be1f51d8883991714289e36684c8e7a9c6026ecfee624fe80f1480aded1d299bef9ad4088b5fd96d6f5e3e447d87655cc6b2e78c447749a3beaada7bf92e5887b6c179e37f9e0144a517ae57463fc826579402fd3899103ac125354c7a77c0c3580109ae80a65febcac54c01e4af8f14a19502f661d4f1c51c526258125ebc0940e0fec28e5afc0eb666c4673df7f0b42904af9a321dc6c76ba9a0c222acdfbfea463200b421e416614ea8e87d6ac040ba663537dc04193fcd61879da0baf907833afe0d4546b4cfa0965a442488e7dd669385bc2132b6e8a1f632961dfd9b0a52b2f49c5e88f853b5084ac21a40749bdaaca85d54a47e0ca71b40a6aa365387c6840ed3eeaabbc2baf1e93866da50323434baf3f2142844db59545dcb357c5d7da31565100ad99d3b652c3b229145866529b271a2f6ceff412380e0677930c855f1fce3f24e23f249fab296cdfd0ad31993e71e361171615facf0e44fb163477771f9b7ba428ddc0cdd2ec5630a842a06a899c0f15034ce0b66efe5c21e29d7a3058da7ecfc39ed8e20f86abdd7f4f34183c7057febcc312d02d50ba69692242768348b820247f4398b3eb430489cf349a84bdfe434743e48005dd1d4bb6b7309d76e380284dc43e25ae886dc83963fdd1aec14f667db1a8f44f2c0ee4290c32d560966542df8fa704352065260cd4e54c4e055a7b879affffda82cc92f2587106728cb4bd30bd91afcfb729f56698625ff2aace4688d068a31ee698255e30a70323973099dfdb48ae14115de16d8d228befdb8d8f368cb0a1ef398e4d9d5b03d4b88f5f5b11e2a716afe97ead6e21f6894cd9e5acbf27ab019d13bf68c0fc8f26b7c7f57d792b3fb430375bd376b3959d631e819fa3a8ce09d7b1be29c9663b4dab11510cacd941c49bb6d6d276af09a8a91d21f369fe88858ace189165fabb4cb7746a381207148cb5a2b3b7ebce9c83a656d24a24d09196ec7b93c011bf5045346dc7644203ef38402327153d00d081ccdc01d0449f89654a2fae5889ce710cbdd7a6fe266918153ac20b8def6b9c7cce03b841ae554a4111584a32220a79486c594778bceeafe98d62587996fdffd55af04cf5512c94aa29a9c2d886decc123fc6ff399283dace47612f27a3359ae05ee6ab5b0869fbabd775f0379213b952d5b4c31c1472dc354d11de95965b06ce5a8ddaa63bdc535b201a8de3e6eb8a37768bc49068ebd7ca942481656be43fdbd6f6e93702c6e0d5f90debb2994d8ec7f3b51e2f39775e21cc8adbd28230b8d774c641befba0ec7ad3a22e6adffc0e2877e94104328d9e34aef6ade93f9794fabd9ad5814e2801e39bfa9dcaec6346bc1e21fbfb27e49d648343ac3b02b129d9e24383cbb022ba5e369d450ab2b831295b4babc46e1c8199ebf60d2da8bee6ae7c14d563c139394565f52c75b031e220c58624dcc0f2eefe2d555cd30257a5fd056a9d8fbca06eb4c6abad0f30c69b75b9db189aba905242329672fc3b83af7bd38f2d7deb3b7729fa56455833d50afb76c4288aebaf6e31cc3d9bfd0b776007582f2f4bb71371b7b71aa3d1ed0861785a0e4b0a64cd8c22134910f47b484a7ce244d14c61d18ef5b02d49e09612e86373078fc8134a75f4e757ee593fbcd87da2814455bbea184e5b5ad7782e85057167d32152a0a3b79b64514f9c8bd6855b025c95012cde8e3b486e5f6ee5cebd4bc1b2184fac8edc311bf7ce137d8101aadaa0c19ea3f6ee7515416d75a13effd5ea34502fa5f1e755140d6fbbb9bc60da467d3f15c3f7a10c6804877328630a9d22e64ce86ad5c6efe719ac17434cb5887798d048ac5288db7ac0156d92529dd96bcdcfdf92abd9afd8eec0eb0f01486752baab5d3944f59c72e0effbcaad8f6d527a8d54e60351b2ec06e334c4d052d8ff2e06d7e036f07f8a1670be0785c0cc61a0a8ec3967fcff19109439cfedddbc69a7049d37f877b5ccd62296d3485b8a43e27e64d03ba0d657df54ec1530f2474a1e6298320ff54d69d78e816cf80fae32669e58c7971f66603af06ed434545fff417a5d2ff3ffd7b6f2343688150dfbe7c7ecfeec03a8235fcad4cb5325aa9442aaea1a168c64d63e06a967610c48f55ff8cffa150217bb00f014efa65a15749b2cf24cd0916cbaf74377"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1000}, 0x1, 0x0, 0x0, 0x8848}, 0x20000804)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2)

8.046626229s ago: executing program 2 (id=1154):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtfilter={0xffc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xfcc, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_ROUTE4_POLICE={0x4ec, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0xffffffffffffffff, 0x2, 0x7, 0x8, {0x9, 0x2, 0xd, 0x0, 0x9, 0xffff00}, {0x5f, 0x1, 0xb, 0xbd, 0x1000}, 0x4, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x7, 0x4, 0x4, 0x55, 0x40, 0x6, 0x13ca, 0x10001, 0x41, 0xfffff50c, 0x7, 0x10, 0xd43, 0x1, 0x0, 0x6, 0x0, 0x80, 0x1ff, 0x0, 0x80, 0x7, 0x3b3, 0x7, 0xae1, 0x9, 0x7fff, 0x5, 0x7, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x6, 0x3, 0x380000, 0x633, 0x3, 0x800, 0x0, 0x0, 0x7, 0x9, 0x4, 0x3, 0x100, 0xd, 0x9, 0xd, 0x25, 0x8, 0xfffffffb, 0x7, 0x3, 0x3, 0x108, 0xd, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x1, 0x400, 0x3, 0x8, 0x2, 0x21, 0x4, 0xa4, 0x4, 0xfffffff2, 0x280, 0x80000001, 0x40, 0x6, 0x1, 0x9, 0x80000001, 0x6, 0x1f1c000, 0x8000, 0x3, 0x2d34, 0x1, 0x101, 0x1, 0x6e2, 0x7, 0xff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x0, 0x10001, 0x1, 0x2, 0x5, 0xaf, 0x401, 0x174, 0x8000, 0x9f, 0x1, 0x0, 0x8001, 0x8, 0x997b, 0x1, 0x10, 0x800, 0xb6, 0xe, 0xb14, 0x3, 0x4, 0x1, 0x33, 0x0, 0x8, 0x244f, 0x8, 0x4, 0x1, 0x400, 0x2, 0x8, 0x6, 0x2, 0x1, 0x100, 0x2c, 0xa3, 0xfffffffd, 0xe, 0x6, 0x7f, 0x279a9097, 0x0, 0xfffffffd, 0x4, 0xa9, 0x1000, 0xd768, 0x194710c4, 0x2, 0x4, 0x6, 0xe, 0xa, 0x8, 0x0, 0x0, 0x3, 0x5, 0x100, 0xffffff66, 0xef, 0x8, 0x3c, 0x3d6ab92d, 0x8001, 0x2, 0x10000002, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x3, 0x101, 0x5, 0x400, 0x1c, 0x9, 0x4, 0x0, 0x4, 0x3, 0x6, 0x1, 0x80000, 0x2, 0x6, 0x3ff, 0x2, 0x1, 0x225, 0x4, 0x7fff, 0xb, 0x6, 0x2, 0x6, 0x603, 0x80, 0x2, 0x1, 0xe7d, 0x7f, 0x8001, 0x8001, 0x2, 0x9, 0x9, 0x2951, 0xb, 0x35, 0x8, 0x9f9, 0x0, 0x1, 0x5, 0xf, 0xf8a, 0x800, 0x8, 0x1, 0x530, 0x9, 0xfffffffc, 0x4, 0x5, 0xf027, 0x7, 0x400, 0x7f, 0x2, 0x7e9, 0x6, 0x4, 0x6, 0x3, 0x9745, 0x8, 0x5, 0x8b, 0x10000, 0x5, 0x5, 0x7, 0xcf68]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x80, {0xe, 0x1, 0x3, 0x7, 0xc49d, 0x449b}, {0x7, 0x2, 0x1, 0xfff, 0x7a9, 0x6}, 0xb, 0xfffffffc, 0xed}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x8, 0x9, 0x0, 0x1, {0x40, 0x0, 0x21d, 0x6, 0x3, 0x2e}, {0xa, 0x0, 0x1, 0x9, 0x81, 0xfffffff7}, 0x27, 0x3ff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_tunnel_key={0x34, 0x1e, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa50, 0x6, [@m_skbedit={0xa4c, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa1d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xffc}, 0x1, 0x0, 0x0, 0x8848}, 0x20000804)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2)

8.004640798s ago: executing program 3 (id=1155):
socket(0x11, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0x240, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0x3, 0x6}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r5=>0x0)
timer_delete(r5)
ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
r8 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r9, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1)

6.891438894s ago: executing program 1 (id=1156):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0xa24, 0x206603)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r4 = dup(r3)
write$binfmt_elf32(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e03200007"], 0x38)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x40, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40)
close(0xffffffffffffffff)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0), 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x76})
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x4, 0xfff, 0x4, {0x9, @sliced={0xd, [0x2, 0x9, 0x0, 0x7, 0x2, 0x3, 0xfff9, 0x3, 0x104d, 0x1, 0x4, 0x6a, 0x200, 0x8f, 0x7, 0x4, 0x4, 0x8022, 0x3, 0xd, 0x2, 0x1001, 0x50, 0x5, 0x1, 0x9, 0x1c61, 0x3, 0x9, 0x9, 0x9, 0x7, 0xbaab, 0x7, 0x21, 0x3e1f, 0x5, 0x7, 0x0, 0x9f, 0x5, 0xd, 0x4, 0x100, 0x1000, 0x4, 0x7d82, 0x7], 0x7}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582"], 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

6.793526728s ago: executing program 4 (id=1157):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES16=r1], 0x24, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) (async)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@mcast1}]}]}, 0x174}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)

5.970577009s ago: executing program 0 (id=1160):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, <r3=>0x0}, 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r0, {0xab8}}, './file0\x00'}) (async)
r5 = syz_open_procfs(0x0, 0x0)
lseek(r5, 0x1000000, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x73bc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) (async)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x5, 0x1, 0x5}, 0x10, r3, r4, 0x6, &(0x7f0000000380)=[r5, r6, r7], &(0x7f00000003c0)=[{0x3, 0x1, 0xa}, {0x3, 0x2, 0x6, 0xa}, {0x4, 0x3, 0x0, 0x7}, {0x0, 0x1, 0x6, 0xc}, {0x3, 0x3, 0x2, 0x5}, {0x0, 0x4, 0x9, 0xa}], 0x10, 0x8}, 0x94) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef)

5.492662022s ago: executing program 0 (id=1161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p={0x18, 0x1, 0x0, 0x41}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

5.350079535s ago: executing program 0 (id=1162):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000002000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}, 0x1, 0x500}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="b8971d2736e5b704b72cf378fd9878bf7e97fc9caac7db0341baf6625b5cdabcf2f08a896d287650d2cf58949eb219dd36f1d70aa5d3474fc6f90337dfaf591a09c888317ff74463094671f38842bcebb66d2b2d0e09392422e5f52a63e6059bc29070ff4bbe89e81e45bc773613ac423c3ab8f5b271359dbd3e8773ac136c3eb4438f9dc26c793c462ed873250c8c607688876ac4e047027dcd71b49afe4dc28db564daec9d530e492ee12a0a907590ee3ae4c60a1d4cd3bca6574673f5efa5e7170139277a12727a", 0x66)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x1, 0x53, 0x202, 0x1, 0x4})

4.934491486s ago: executing program 4 (id=1163):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6}]})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
r5 = fcntl$getown(r2, 0x9)
sched_getscheduler(r5)
setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7})
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10)
r6 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x2d, 0x2, 0x0)
shmctl$IPC_RMID(r6, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r8, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, 0x0)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf257900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900958000001b00000000f4000400f4000400f4000400f4000400f400726c625b45a89899bc1e6ef0dd6ff5f87537956cc20d0fb273b7909af03e0f7c98db1ddee48dec066fd6800ab2cba7a45b61719e047ab5e8744519817175b3078e867a4763cb7ea6c8929b150b5388b145a8ce425eda1cb7e6f2d9ecbd4d0c"], 0x48}, 0x1, 0x0, 0x0, 0x4000005}, 0x48000)
ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb6)

3.759083387s ago: executing program 2 (id=1164):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtfilter={0x1000, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xfd0, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_ROUTE4_POLICE={0x4f8, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0xffffffffffffffff, 0x2, 0x7, 0x8, {0x9, 0x2, 0xd, 0x0, 0x9, 0xffff00}, {0x5f, 0x1, 0xb, 0xbd, 0x1000}, 0x4, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x7, 0x4, 0x4, 0x55, 0x40, 0x6, 0x13ca, 0x10001, 0x41, 0xfffff50c, 0x7, 0x10, 0xd43, 0x1, 0x0, 0x6, 0x0, 0x80, 0x1ff, 0x0, 0x80, 0x7, 0x3b3, 0x7, 0xae1, 0x9, 0x7fff, 0x5, 0x7, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x6, 0x3, 0x380000, 0x633, 0x3, 0x800, 0x0, 0x0, 0x7, 0x9, 0x4, 0x3, 0x100, 0xd, 0x9, 0xd, 0x25, 0x8, 0xfffffffb, 0x7, 0x3, 0x3, 0x108, 0xd, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x1, 0x400, 0x3, 0x8, 0x2, 0x21, 0x4, 0xa4, 0x4, 0xfffffff2, 0x280, 0x80000001, 0x40, 0x6, 0x1, 0x9, 0x80000001, 0x6, 0x1f1c000, 0x8000, 0x3, 0x2d34, 0x1, 0x101, 0x1, 0x6e2, 0x7, 0xff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x0, 0x10001, 0x1, 0x2, 0x5, 0xaf, 0x401, 0x174, 0x8000, 0x9f, 0x1, 0x0, 0x8001, 0x8, 0x997b, 0x1, 0x10, 0x800, 0xb6, 0xe, 0xb14, 0x3, 0x4, 0x1, 0x33, 0x0, 0x8, 0x244f, 0x8, 0x4, 0x1, 0x400, 0x2, 0x8, 0x6, 0x2, 0x1, 0x100, 0x2c, 0xa3, 0xfffffffd, 0xe, 0x6, 0x7f, 0x279a9097, 0x0, 0xfffffffd, 0x4, 0xa9, 0x1000, 0xd768, 0x194710c4, 0x2, 0x4, 0x6, 0xe, 0xa, 0x8, 0x0, 0x0, 0x3, 0x5, 0x100, 0xffffff66, 0xef, 0x8, 0x3c, 0x3d6ab92d, 0x8001, 0x2, 0x10000002, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x3, 0x101, 0x5, 0x400, 0x1c, 0x9, 0x4, 0x0, 0x4, 0x3, 0x6, 0x1, 0x80000, 0x2, 0x6, 0x3ff, 0x2, 0x1, 0x225, 0x4, 0x7fff, 0xb, 0x6, 0x2, 0x6, 0x603, 0x80, 0x2, 0x1, 0xe7d, 0x7f, 0x8001, 0x8001, 0x2, 0x9, 0x9, 0x2951, 0xb, 0x35, 0x8, 0x9f9, 0x0, 0x1, 0x5, 0xf, 0xf8a, 0x800, 0x8, 0x1, 0x530, 0x9, 0xfffffffc, 0x4, 0x5, 0xf027, 0x7, 0x400, 0x7f, 0x2, 0x7e9, 0x6, 0x4, 0x6, 0x3, 0x9745, 0x8, 0x5, 0x8b, 0x10000, 0x5, 0x5, 0x7, 0xcf68]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x80, {0xe, 0x1, 0x3, 0x7, 0xc49d, 0x449b}, {0x7, 0x2, 0x1, 0xfff, 0x7a9, 0x6}, 0xb, 0xfffffffc, 0xed}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x8, 0x9, 0x0, 0x1, {0x40, 0x0, 0x21d, 0x6, 0x3, 0x2e}, {0xa, 0x0, 0x1, 0x9, 0x81, 0xfffffff7}, 0x27, 0x3ff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_tunnel_key={0x34, 0x1e, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa50, 0x6, [@m_skbedit={0xa4c, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa1d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1000}, 0x1, 0x0, 0x0, 0x8848}, 0x20000804)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2)

3.365107559s ago: executing program 1 (id=1165):
r0 = syz_clone3(&(0x7f0000001200)={0x11000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/211, &(0x7f00000011c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000012c0)=0xf2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000002680))
r4 = syz_usb_connect$uac1(0x3, 0xc8, &(0x7f00000026c0)={{0x12, 0x1, 0xcc16c55f1920a16c, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x3, 0x60, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x1e}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x2, 0xf0}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "3b35bf74a303"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x8, 0x76, "3a0084"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x4b, 'W\v'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7f, 0x6, 0x4c, {0x7, 0x25, 0x1, 0x8, 0xa8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xab, 0x44, 0x4, 0x40}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x0, 0xec, "1bc8b777e7b9"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x47, 0x3, 0x80, 0x7, "c0e78a"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x30, 0xc, '%'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf9, 0xe, 0xfd, {0x7, 0x25, 0x1, 0x4, 0xa3, 0x100}}}}}}}}]}}, &(0x7f0000002b40)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x250, 0xb, 0x0, 0x1, 0x0, 0x5}, 0x12c, &(0x7f0000002800)={0x5, 0xf, 0x12c, 0x4, [@generic={0xfd, 0x10, 0xb, "169c40166ab76548057bbaeadcfe130dbf59b747f521647c2dc85d3db465825ca1c1ce2628a9a63a0f811f5a465c2a6c5f8856a464fd9efd0d234bc2057c48af96df2883dbc9b3d028a7e6fb9c58dcad851946a348ef27848609766d45b65929e96de5474c2f22c9cef3c1e28a98101a560e921659d81f08d7112c3d869f2a6d89e3ac2f39dace1e65e71d8ee3c363651f293ba3e830e00a606ee0e906188ea314ea996962bec8ee8dff968c47a01f62578ccce8e25b64a6e0e8fab91cd6d0ad160c65a115c7bacf355659622b5a59dc5032a187cf4427b1aee6ef38537014f9f0d46e386ec881db338dce8db12ce6ea05882f1877175127706f"}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x4, 0xf0f, 0x4, [0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "73c6d727b88691a446b8b38d516893ff"}, @generic={0x6, 0x10, 0x3, "1fdc88"}]}, 0x2, [{0xea, &(0x7f0000002940)=@string={0xea, 0x3, "241e76d12f3a3a9eb9811e0fe3d9e2c3cd79b8095f8038759dc6129f8598a5e5c8eff4d18e773a8cf565911c9150d86232e02bf52497a519a6b99de590e847a4b036cd2d1cb94e9f1fc2bd588a596738d91c3e5101c0df863df03de0918582bed301880bcdd35d6205453d2dd81bfcb0b130038f82fcd346cd0154eba708b836becbebc36d7286dff3740b68eec50adeb020dda332ffc1a116dd4b64b0697e658857c4855c518e214867d4af6005b095fb43e0a58a021fbd76ee596bf616c2504dc4291024c19139f4bc37ee28e1ec96417658975aca87b6cc3a7b14fc2bc0ecaba2a0bb2c4fcef0"}}, {0xc8, &(0x7f0000002a40)=@string={0xc8, 0x3, "0d923db3182693813ad4c5df53599f4e96133b460db9cc45cde57500c3d741d1097f81a7552332839189f28193dbe59b3dac36207833fc15ab204f5f9d466d4caf07b8002c241a603016cddef1f3038e29b59b9b67ae29db8c04bf28f5706d6d0e37ce434108137ab23600f2e70fea42df93cfd47d9076673b6ea627d26d1307ae844764486b11a262dc6573bcde654604ea473a37515a711966a8027fa8cf73518e264719812e51e296ae2ac8235416c95da5f3e4c8ae81b71c982b04d5a539f2af000bad29"}}]})
syz_usb_disconnect(r4)
r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002b80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x403, 0x97c1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x2, 0x98, 0x1, {0x22, 0x43e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x2a}}, [{{0x9, 0x5, 0x2, 0x3, 0x7df, 0x5, 0x78, 0x9}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x200, 0x3, 0x4, 0x3, 0x10, 0xa}, 0x1ee, &(0x7f0000002c00)={0x5, 0xf, 0x1ee, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "a01a9c685bd94dfaf796dd4c7a1a6246"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0xe}, @generic={0xd7, 0x10, 0x1, "221ab04196a3d51b42b537bf746ed30c353445fa3a4c23bc41d1a4968cf9b299b560968a8fdd35c22729513159822ef0676b8b78e736568d14a1d2aea7ed8145c755bd5148d04f9d70f96cc1c6f083a6625de5dc50d5c74e3cdc8fb19a12b9451feb7e513ad019cf9e5414df11bc7f26632cdc25855daf8c55f7eb1fc53e926362201572a394437c383620086e9c5b6cbd5c69d1378886b71d38fab8a1b63f525a8586a7aca10e6d37f217683204c262990b3258847621b7474f7ef0b6730616953b6ccca76d679559a15c7952e1cfd14a4a44f6"}, @ptm_cap={0x3}, @generic={0xed, 0x10, 0x3, "5496346e9d6db7e77b594fdcdc24ac3278b328443dd383c8e775bf288a9c982adc74df916261810a231dddd6c85b733f05120f8589551ee7bd76422e4964bb06d9b63f1ed8972160ad08022187d58eddc63003f4267afd33925cdd929b7adf57a09cb01eb84e222711ff7ae22a6a2f549ad149f4480ddae973d42443aaeb1bc1d19dac1d893acefac6d96b19b76cd8b203c48a59aca715b8fba35679c7f5604f36382745698d33889e67e7703e93faf0eb2845eeb4a743ab64b9d8388f7faa02bd3a33f5481e1e501ef0b3e7c9227776a3f58446a99f994a8ce7f78b0042839a943edd1afdff56135493"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0xf, 0x3}]}, 0x3, [{0x3c, &(0x7f0000002e00)=@string={0x3c, 0x3, "700eccb3dc67116c41768096bec6841b9a8041842f72fb13fdcf31d3e161db45798eb64d49e1a8edf43399c068491e3f2cbad4174d55c49723fc"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x430}}, {0x6f, &(0x7f0000002e80)=@string={0x6f, 0x3, "72c9032bab5b4fc7e9b825162df37cbef2348abb8656fd181eb3da57e1934a732f387d824e796bf2f613122e1e845f6ac37f58f4fe85f7c19a9bc5d3aaf363a48aa37dbf8f17d97a69608a95ded2e16383741a1e831a3cbd4df8d2649d79ebf03637f2eebeca80caf84ee37e26"}}]})
syz_usb_control_io$hid(r5, &(0x7f0000003080)={0x24, &(0x7f0000002f40)={0x0, 0x30, 0x6f, {0x6f, 0x21, "ac06f013fa0129d1a450459a86639d91da256ef3176c2c90777bbd8a2fe9146fc4fada69635c854c9fe0543f1abba20af62284b4c2e0e82166a5ee63d306e0afe6b0fade866662c0d83fbea88588bccd779eea64edc98a797038377406d6751f06e930d180684af0e79a05e623"}}, &(0x7f0000002fc0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "d1bf035f3443b28a76db4f34d56726a0bebb"}}, &(0x7f0000003000)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0xa, "93ee52a9"}, @local=@item_4={0x3, 0x2, 0x7, "bb4b9c91"}, @local=@item_4={0x3, 0x2, 0x7, "c5502b8d"}, @main=@item_4={0x3, 0x0, 0x9, "7704088b"}, @global=@item_012={0x1, 0x1, 0x0, "eb"}, @global=@item_012={0x1, 0x1, 0x6, "a0"}, @main=@item_4={0x3, 0x0, 0x8, "02be603e"}, @global, @global=@item_012={0x1, 0x1, 0x5, "bf"}]}}, &(0x7f0000003040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xe0a}}}}, &(0x7f0000003300)={0x2c, &(0x7f00000030c0)={0x40, 0xf, 0xb9, "40d5b9bb2538a887f063e71e44d4bcc0121737328126cba91f34cd8386e3fc502dc14eba43c017dab3d50cbad64d41002f8a7742000b982aab231baa5026b56096d98c18f49556295b5e975e9ef13f83427be2b87d05ec95ee0955a1b0549ce8afdb698b1c1ebf9f33bdb878f34b336a3499240158dc84172225532edab96cd7cb1959de0512be70e3a8e547122714644853fd0bbc6a46cab9bb09c62d8624c92ec52855cbde161ae7d6c3e1da950603262c70070edc1e66d9"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0x77}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003200)={0x20, 0x1, 0x7b, "923a9ace7a3270ffb6f4208c8cef83c69d0d4f518649f75a87673451bb9ead0f9ea9791ebdbfc52582a196b105cf9e6bec18c838445d0ebd7f0e048eaf1c604cfe86ef50cf418e371480ad1fcac34c05aff3fff8bf3e1c4aa8f50a13e4a940c43eb8e7bf4331f522925ec7a534f74ecca194d73aa04590e4adb118"}, &(0x7f00000032c0)={0x20, 0x3, 0x1, 0x8}})
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000033c0)={0x0, "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"})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000038c0)='/proc/asound/card3/oss_mixer\x00', 0x1, 0x0)

3.267285845s ago: executing program 2 (id=1166):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0))
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="c4e1985537b90d0a0000b88b090000ba000000000f30260fbab200480000f7b9800000c00f3235000800000f300f01c82e3664660f3881825300000066b81f000f00d03e66f30f096726660f388270ba0fc77331", 0xffffff6c}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
r4 = socket$rxrpc(0x21, 0x2, 0x2)
shutdown(r4, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x4, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000452000/0x18000)=nil, 0x0, 0x0, 0x11, &(0x7f0000000280), 0x0)

2.847558377s ago: executing program 3 (id=1167):
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x13a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$packet(0x11, 0x3, 0x300)
epoll_create(0xd)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000500))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x18a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001443c9bebe000f0006000000050010008f0000002834e90ab8790d341e489ab20bd0b8ca8979c51e00a8c2fac65fd615e1709fe11b83ed242550b71779c68470f9010b0ce927a034abff0c0d5ed8949ab5cbeed84cbbdaf40ae6d1cbb404056a473928e2ad2fa61ba8049d81c60ccdd5c64395d2547ed80662c0301f1026c67ccc128539e855ee7342a5ab8a3eac0a63fd7fa40fca11e7ffbb7831f95857192df018fc173e6b11835ff2a342dbae"], 0x44}}, 0x0)

2.527274576s ago: executing program 2 (id=1168):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket(0x22, 0x2, 0x24)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8811}, 0x40091)
recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000c00)=""/4099, 0x1003}], 0x1}, 0x40002102)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001c40)=ANY=[@ANYRES8=r1, @ANYBLOB="9ebe7c71a123a6fb03cec931f700677e0b126f1f5986ccafe71c1b550f2ad260ec946ea93eebe89a41706be3379af67835b11def814f7ac51b52408b99ce20f30f9aee23926ed84e39a3ff1bf195c5226d69b99d06e54087339373adf824b4fb718af0fe0471186a576891d89c7643972071b738f0161048d2a011c751ca01a8c09e4efa145d0b130efac60ffba07796e33bc7a6027e8dc733e90027a769f2f0ec0093560ff3169887ed13d836582bfcb68c03cd1a47c4dfdcbe830da0e8e1948e245970d95a7154134106b80957e0d03cb91080f1e90b3b91c644fe5564e6946d9645864388374fc644c20c7749064cd80a86b1dc32821c6d4ac4c408993ebe2c3668871ff0fae09077346d84ea4497e56251c233e5ac203b558ca87f0064a2e647b4e5c71402763ba81b7c82eb00b9b36d9a65a9ef09ebe37d453fa989d5fb29eaf4686e5ad112762b03e5ab42dbbd03d376860e2d2925576eab67eaa5b5fa3ee2c431430480e24ca63a8964e1f91d9ab6da5128b8432f4eff3e0f8ec95fc2d04a48f6f10759c61c5566e6d613f685529eb5a2b87e4da439b59800612f38119253c3863222e0c9dcbaf12376745c877471d7a2bc243f516138433793c0094093e13ca3b834137b00b4fb8561474c35bd63c92c50bffa8ebf164c41fd5718b70c7da8dd79a830736434faa517607e97a3812956c3766e46d309a24912822cd77059f900159f7e58c0a72ec60932c84e1ad75e2dadbd217dd60d2937a561e4a887a312dc77a65fd7962484ae6aefaed551b85ce65770fc0b0a5a4f89941cbb8484c38af83c2fea123cd48af455b99fc0c14b186b16e61c73bbacf294e53ffd7a7b804417aab4282cf420a0a3685224c00dae021eb810b467ff68fb49b43742e5b1095f183c1053849fbae276a984419474ed39ca456ccd74185de100b4f607051f40c1471090cd864738d08a952752a67b4bf0ca6c73a9135c5068ea472b70ce126470db14d48f96b9f211dfaed75829b14a1a2cbac87de61c127b4c5063ef0dd40c5ede8a5bd20988862648e274edfcf3d424aa5c0770635d655ca10f09506a9837d73849d90ef533e6e2d9a13d7ee26474261448da7e5a1743b5ceaeebc65672734738881e1134bfddc6328f86312061972404c682e1f09edb22d91351831b6b963fa06e8fbfc250cc66c7d29b69938f0a75662abf4b585d0199928d9377ccf629d3385b10c6adebef1a767f2ad7e2ddcd4278fd56d5638180c920a3ccf50b08c193c932bb86f0101be47e35b5f1f5534b6f080845fc3602e5fa8bff7f806a7e6855a724167e43a01c428d428fb40bd996c6cf743ab524f5f3a0bb2f4b219188407d34ceec56f6ba97dacdcc41480b85edb698945704de95f8019fa80e992974fa400c34138e993c83f8516046e942ab89ae165dd7000cbe218688781a867f4fb75a57cd3dd04d1e4e88d3166c91c5db6fd9935d882a6f2d771e7699aa7e12c4a018df495b567e0f12c91615fb2184ba3ca098f783acd14b0c1ec489a73e3e9e0a759eadf7f646259981393a91e8279d95ed0216ddd593ccf215794aff73d9ed880b8a05a8170bff8bc7a2c556e192a3555780f57d8e9dbb1427c0d763d25e86f0a9ba1f5c2e6c87052f330f52a146c365a8eb3a2ec6914a60a5799af13975b9de44ab37f358390b8dda4f459f3f42b697d36b8e418a39f092b127cc400a2f8b1eae70849c66a9459596080e540b2f3f8a5e36448254555eb6e08e040e27fa14e506f3a9e7dca498786eab24eaa20d16adc485780288a7f71d84ac48674c08826dd1bfa72a5e48448fab1cafcac101cb4081c6ca76502d9d8639d0fe863aa3294c4bee68ed1fe4623e56cc4df2d42f5cdecdd2a7c64272908b5f197a0408f590191b2af3ca8c34577254003977a33112c3b4d1a51d5b53ab823b90438afc815e75ce36dc25d20979afcbb7b7c9e1d74e149c536584032f4fb459758e8cad5406eb8ddf9e07b24d7a8247b646098434f5abf5703c004dcd47aade4385936d0ddc0305177afaf1165db02778140385c8802e456e6a834bb53aa42067e3bc6c366b89cf2f7c55ee75290b093052a323e8fcce96acc75a00e72a0eb53ad5035f14f1d35491f1cb72647142341644f5047b4584ee0e39a51dde8992046e2ba55521766c55e99bf64628c339aac63cfc72269e493d46f95d4f533be54adb67d05b4941497450b3206d0bc4785305124792c091dfe4df456ccbb5dc64deffdae71b482a9deb02e536607ef689dcbf606346b47f3f2f7801f4d64b55defacc1bc0f7f3e86d09810e766a79a2345551fcd450d8f038092bbf079400809725656235dba67766f3e5afbb03134119cb6e70af106791a68385634ad9fd599947d15d8448223e6b49a26733477366c8e318d46eba0aa2c9061cf44f8dbe08732a727788dd72518bb84b17828f4a400246e5bdc44f108bc309c5ac0af2aa8950cbe1942401aad8a688b508f6c688ec5a42c58c7749227a99be8ec0b85cbdc416bbcf077e6bbd59892f260291df286c64e2490e6be70bb849d8e42a253036bb74617607462bfd444dbac2e25f0794e9d2ee592f73009bd4a07fb9d20776cbc1a50758143941a6a597d28dc62110632d4b0f02ea7df532f6ee2263046ddd579c7a352527ad6cc92150ffd7a2603c1bdb01fba997ddc2c2346934e5f85fa30800db0454d837787a243c267118dfebf63fd76473573764388545389bacf12e949ea132467379a5a180acd17750ef7f306fad9a804801b55be6f33defc0c286f2f5a15926a3d1ef187f7000e241c759066dd42ae13b595f2b87edde1dcf1bb2deff9978d5716a1955fb19a3a8cc5e576c2cd10611eb1859f755cd16c5b656c30e32cb9ec858f98426267fb13988b2ceba6dec8ed0d38c46ebeb9ef89aa94d4619cc8ccbc5067aa1539588785439199b5942c4a5b41a2a2e28ccdaf9821ce34732a39f0cc35c8e88f16e28327184456be80ef6bb4b4e18b4872a93a50b33e4009af632b93ba73f9e6b9e4cd7be5a4a96a191464171219ad30b135e96f934f1b4780125dc637af326040ca8b9e706656b688054e1169b6af70959081b6cdee494c85a1dd73f5b737f8ed570471dd10c70241d7b6193a9ba2d24e0b025d36b273bd40f697ab6413ff59dc800754c652a3c29264af355fbf3a9df51889cc0ead6c8d99e93398d1616ffd7927ad38ed9d32ef4f7ca08e98482d2abfc7f9f06"])

2.439206965s ago: executing program 0 (id=1169):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000000fd010000000008000100ac141400100016800c0001000000000000000fff080005000a0101020600150006000000b37da2cd8754511cde402569af459c7c5c6e42c9634e4b43f138fa24fd1af5d3d8b10832e57eadf2648bca17e409e0e04c0099960327c4d104f92a39e4eb94f37565492c5f5fa78153796766fdd6a1700cb3e8d754ea0e06"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.316872s ago: executing program 4 (id=1170):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x29, 0x2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0xc6, 0x2, 0xc, 0x8, 0x9, 0x58, 0xe, 0x8, 0x1, 0x2, 0xfdffad64, 0x6, 0x3, 0x4, 0x1, [0x8, 0xf436]}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000440)=""/207, 0x0, 0xcf, 0x1, 0x8, 0x10000, @value=r5}, 0x28)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect$midi(0x0, 0x31, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100020000001082054d0040000102030109021f0001015a200809040000010103300674675d533b2259c51c04250100"], 0x0)

1.061111881s ago: executing program 3 (id=1171):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, <r3=>r1, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = syz_io_uring_setup(0x408c, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x1, 0x2e1}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000000))
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
read$FUSE(r6, &(0x7f00000022c0)={0x2020}, 0x2020)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7d, 0x6)

862.463934ms ago: executing program 0 (id=1172):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x258, r0, 0x2, 0x70bd27, 0x90e, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "72f1f9d5f4cc23ec69531b6f0cd6ebf9b65e4daed7c7c52b41aa41d6780305e04deae3c04c56606d7c84e849fcf28d1b7347a82c18148ff7bb54b0a6dce9b8bb2b2722112cfd5e4dae6ce001343adfa9b61503011fd088cfdb641e13b324c676b44b1a852d449f871ceb590c32846800af6082b930d4a6acf089c695de6d6b879c278841d76b6facd826890d5dc26d0de76451bc761f3e1b75947ce0670b082fea6f104b7be59cd9287635b8577c4bb8351cee95ec2a2542922d5264bb287fe4287820732c9e10dcc3fe6a31bb4bbea8feeb95498859"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "a90fd66e45b4e0"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x99, 0x5b, "e4fffc7466a5811ebf0400bbac0ba3cdd69571d5967f875fd06dbd77e5782dc4f52bce897d6799817051c3cf805bca404cae885dab679b6ab8772ce8ecc98d19e1548bb17d603eaafc1fa068d8fb6880d9f7b49165b3de38a9f1f3afc851161ebcd27f000dd746ab9fe5aca212b2f68a877868c9ec1fb74f4ac7f87b634eb92bd2dcd2fb088d913d2aa385a87a058e4e2d31554d98"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x9e, 0x5b, "c67d32a0359a64ea2c259c9a5d8ca7ec8906f1feeba3194abf3a81e75ee19abf49bf5cd68ff0999a69d85b08074a7d700f404e7ede52587fcf23dd5966804b782122ad397e21e11e181df4c45402d0494aaa51fff05eaf6fab33c92d38cf1e100977e20ef289029061c8d4441afc826a0963cfd456c5c8b9db58b5c01a2ffc6c51bb2c89995f9229b7e698eec7a793176cd228606572ab8ab8aa"}]}, 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', <r3=>0x0, 0x1, 0x20, 0x9, 0x7, {{0x22, 0x4, 0x0, 0x6, 0x88, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x54, 0xfe, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@local, 0x9}, {@empty}, {@private=0xa010101, 0x80000000}, {@empty, 0xdc30}, {@local, 0x4}, {@rand_addr=0x64010100, 0x869c}, {@broadcast, 0x2}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x5, [{@multicast1, 0x7}]}, @timestamp={0x44, 0x8, 0xad, 0x0, 0x7, [0x8]}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0x7, [0x9, 0x4]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', <r4=>0x0, 0x40, 0x10, 0x100, 0x6, {{0x25, 0x4, 0x1, 0x7, 0x94, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x55, [@local, @rand_addr=0x64010101]}, @ssrr={0x89, 0x7, 0xf8, [@multicast1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x6c, [@remote]}, @timestamp={0x44, 0x8, 0x86, 0x0, 0x2, [0x1]}, @end, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0x98, 0x1, 0x3, [{@multicast1, 0x17f52c32}, {@local, 0x4}, {@multicast1}, {@local, 0x1}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x6}, {@private=0xa010100, 0x3}, {@private=0xa010100}, {@loopback, 0x3}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048090}, 0x4040)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000700)=0x467)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0)
clock_gettime(0x65edc8cbb9579cfd, &(0x7f0000000780))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40800)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x40010)
r8 = openat2(r6, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x10002, 0x48, 0x4}, 0x18)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000ac0)={{0x18, @multicast2, 0x4e20, 0x1, 'lc\x00', 0x11, 0x9, 0x6d}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x1, 0x4, 0x3, 0x20c9}}, 0x44)
recvmmsg$unix(r6, &(0x7f0000000d80)=[{{&(0x7f0000000b40), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/116, 0x74}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/144, 0x90}], 0x3}}], 0x1, 0x40000143, 0x0)
accept4$unix(r6, 0x0, &(0x7f0000000dc0), 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e00)={<r9=>0x0, <r10=>0x0}, &(0x7f0000000e40)=0xc)
getgroups(0x8, &(0x7f0000000e80)=[0xffffffffffffffff, <r11=>0xee00, 0xee01, 0xee00, 0xee01, 0xee01, <r12=>0x0, 0xffffffffffffffff])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r13=>r5, {r10, r11}}, './file0\x00'})
ioctl$RNDGETENTCNT(r13, 0x80045200, &(0x7f0000000f00))
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000001040)=@get={0x1, &(0x7f0000000f40)=""/234, 0x8f0})
sendmmsg$inet_sctp(r8, &(0x7f00000015c0)=[{&(0x7f0000001080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000010c0)="c045a36b7f73f67c9d31601f9107e8e25f14fbf78d818a4b2cd44eb987d5915760d38ca53f8f45e5d4aaaca9ce0006beb8709a14d20228cfabec96dee1caf3ff3696b57cbe021f4c08989aee02003c5d688db426138e23c573fc521264f55232ea2a0d483c118e6b349b8a2f17b6e1d1600cc528b9834dd5e173fd3838e72627bbb46fed3b53b63b71a34123a7dbbbda9ffe7cb3f82df26bacc849af3c934a16e2de26b77b609e66204577e352acade35df7f93f8f734f67eff380a39a48f32fedddb9ea5c9ef60b710d6df0fdae4164473dfe6d7c1da9c6d303d07165f6a1bc07869d5771d000ba55991c4500508c4575f8a6b2ddf1f6", 0xf7}], 0x1, &(0x7f0000001200)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x375, 0x8, 0x0, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0xa9}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x37}}], 0x60, 0x400c4}, {&(0x7f0000001280)=@in6={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000012c0)="c675a2a94c523fa8e0912d08538830aaa50e607de802d8260efa47f615a78c770c5a0e431d4056915fa8", 0x2a}, {&(0x7f0000001300)="d46d4264a1e6a614bec96b5725ece55dbe3df9419ecba8c5de35b18b2ae17ab75271794fa6cb28626aa7cb614747cf0bdc94b859601ea082a6a683ad1e0d36252d6bbc4bf3f2cb108015aa767a887091ba0ddefd510c4606a8537e70821e11403b899a1bc4da8534288e37ebd4d6c4f7c8efc3e68f01a073dfd7ca7ff17dadd1f8f69e0d", 0x84}, {&(0x7f00000013c0)="5a327e006f4037e4762180b4e448d4d5db01666a940651c790ce5e4c74f803bbb33ac2c6407a2f7668febbc758ff0adf52328774dba9af4b32355409749a20ae237b0d4d4beeb966a1eddd086745fe7778d54d98fb58f87f870e9486cd31f415a0c9f07109", 0x65}, {&(0x7f0000001440)="f136e844a59c9be107342fac75c7821c886c086003b29a9d890314013e087715d9438cdddc7973e9cee469b6013506b7d85cf4d4", 0x34}, {&(0x7f0000001480)="cdc712e6ce4c7a2de2b614baff2d75b95a4c28dda41d73ac3c223ec7bfc6a29d302eedda420ddd35c317f78e788273ad7519e56189a7aeb36f97b976c24eeb8d60fc4219f7bf932af9cc1ada8716cfbc08789fd456819a11690f0dabcd", 0x5d}, {&(0x7f0000001500)="623ed9ff1d426344295ab4", 0xb}], 0x6, 0x0, 0x0, 0x20000040}], 0x2, 0x40000)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r13, 0x114, 0xa, &(0x7f0000001640)={0x2, "b2df"}, 0x3)
process_vm_writev(r9, &(0x7f00000048c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/153, 0x99}, {&(0x7f0000003740)=""/160, 0xa0}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/180, 0xb4}], 0x6, &(0x7f0000004dc0)=[{&(0x7f0000004940)=""/132, 0x84}, {&(0x7f0000004a00)=""/129, 0x81}, {&(0x7f0000004ac0)=""/93, 0x5d}, {&(0x7f0000004b40)=""/62, 0x3e}, {&(0x7f0000004b80)=""/14, 0xe}, {&(0x7f0000004bc0)=""/212, 0xd4}, {&(0x7f0000004cc0)=""/98, 0x62}, {&(0x7f0000004d40)=""/101, 0x65}], 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004e40)={{0x1, 0x1, 0x18, <r14=>r13, {r10, r12}}, './file0\x00'})
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004ec0), r8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r14, &(0x7f0000005080)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005040)={&(0x7f0000004f00)={0x120, r15, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "2a2ee2f71f73206a369ec86a1d45a3c6052d093e8d09e55dad3b4f9a6a57c671a0e08a190c8eca6c99ec09836d3be5840daf7a15aa1b1f66e3f6f696443b929031602567a849f3b1f99b6c76d6ee07e8edd16650e4bab7d708120ece7bf8cd15b9ba4a8bd345236a82da8e7716fd4bf073ec88544e7e63ee5b0cd385c32cbc96b35d39cae16b97644adde4f2cdb96b854544fdaa"}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

747.302124ms ago: executing program 3 (id=1173):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket(0x15, 0x5, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r3 = accept(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0)
recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r8, &(0x7f0000000600), 0xfec8)
recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

685.886871ms ago: executing program 0 (id=1174):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtfilter={0xffc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xfcc, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_ROUTE4_POLICE={0x4ec, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0xffffffffffffffff, 0x2, 0x7, 0x8, {0x9, 0x2, 0xd, 0x0, 0x9, 0xffff00}, {0x5f, 0x1, 0xb, 0xbd, 0x1000}, 0x4, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x7, 0x4, 0x4, 0x55, 0x40, 0x6, 0x13ca, 0x10001, 0x41, 0xfffff50c, 0x7, 0x10, 0xd43, 0x1, 0x0, 0x6, 0x0, 0x80, 0x1ff, 0x0, 0x80, 0x7, 0x3b3, 0x7, 0xae1, 0x9, 0x7fff, 0x5, 0x7, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x6, 0x3, 0x380000, 0x633, 0x3, 0x800, 0x0, 0x0, 0x7, 0x9, 0x4, 0x3, 0x100, 0xd, 0x9, 0xd, 0x25, 0x8, 0xfffffffb, 0x7, 0x3, 0x3, 0x108, 0xd, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x1, 0x400, 0x3, 0x8, 0x2, 0x21, 0x4, 0xa4, 0x4, 0xfffffff2, 0x280, 0x80000001, 0x40, 0x6, 0x1, 0x9, 0x80000001, 0x6, 0x1f1c000, 0x8000, 0x3, 0x2d34, 0x1, 0x101, 0x1, 0x6e2, 0x7, 0xff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x0, 0x10001, 0x1, 0x2, 0x5, 0xaf, 0x401, 0x174, 0x8000, 0x9f, 0x1, 0x0, 0x8001, 0x8, 0x997b, 0x1, 0x10, 0x800, 0xb6, 0xe, 0xb14, 0x3, 0x4, 0x1, 0x33, 0x0, 0x8, 0x244f, 0x8, 0x4, 0x1, 0x400, 0x2, 0x8, 0x6, 0x2, 0x1, 0x100, 0x2c, 0xa3, 0xfffffffd, 0xe, 0x6, 0x7f, 0x279a9097, 0x0, 0xfffffffd, 0x4, 0xa9, 0x1000, 0xd768, 0x194710c4, 0x2, 0x4, 0x6, 0xe, 0xa, 0x8, 0x0, 0x0, 0x3, 0x5, 0x100, 0xffffff66, 0xef, 0x8, 0x3c, 0x3d6ab92d, 0x8001, 0x2, 0x10000002, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x3, 0x101, 0x5, 0x400, 0x1c, 0x9, 0x4, 0x0, 0x4, 0x3, 0x6, 0x1, 0x80000, 0x2, 0x6, 0x3ff, 0x2, 0x1, 0x225, 0x4, 0x7fff, 0xb, 0x6, 0x2, 0x6, 0x603, 0x80, 0x2, 0x1, 0xe7d, 0x7f, 0x8001, 0x8001, 0x2, 0x9, 0x9, 0x2951, 0xb, 0x35, 0x8, 0x9f9, 0x0, 0x1, 0x5, 0xf, 0xf8a, 0x800, 0x8, 0x1, 0x530, 0x9, 0xfffffffc, 0x4, 0x5, 0xf027, 0x7, 0x400, 0x7f, 0x2, 0x7e9, 0x6, 0x4, 0x6, 0x3, 0x9745, 0x8, 0x5, 0x8b, 0x10000, 0x5, 0x5, 0x7, 0xcf68]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x80, {0xe, 0x1, 0x3, 0x7, 0xc49d, 0x449b}, {0x7, 0x2, 0x1, 0xfff, 0x7a9, 0x6}, 0xb, 0xfffffffc, 0xed}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x8, 0x9, 0x0, 0x1, {0x40, 0x0, 0x21d, 0x6, 0x3, 0x2e}, {0xa, 0x0, 0x1, 0x9, 0x81, 0xfffffff7}, 0x27, 0x3ff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_tunnel_key={0x34, 0x1e, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa50, 0x6, [@m_skbedit={0xa4c, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa1d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xffc}, 0x1, 0x0, 0x0, 0x8848}, 0x20000804)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2)

568.242536ms ago: executing program 4 (id=1175):
syz_emit_vhci(&(0x7f00000010c0)=ANY=[@ANYBLOB="0406"], 0x6) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
ptrace(0x4208, r0)

411.297557ms ago: executing program 4 (id=1176):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2153, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003800)=@newtfilter={0x1000, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x0, 0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0xfd0, 0x2, [@TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0xa}}, @TCA_ROUTE4_POLICE={0x4f8, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0xffffffffffffffff, 0x2, 0x7, 0x8, {0x9, 0x2, 0xd, 0x0, 0x9, 0xffff00}, {0x5f, 0x1, 0xb, 0xbd, 0x1000}, 0x4, 0x0, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x5, 0x7, 0x4, 0x4, 0x55, 0x40, 0x6, 0x13ca, 0x10001, 0x41, 0xfffff50c, 0x7, 0x10, 0xd43, 0x1, 0x0, 0x6, 0x0, 0x80, 0x1ff, 0x0, 0x80, 0x7, 0x3b3, 0x7, 0xae1, 0x9, 0x7fff, 0x5, 0x7, 0x8, 0x9, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x7, 0x1, 0x6, 0x3, 0x380000, 0x633, 0x3, 0x800, 0x0, 0x0, 0x7, 0x9, 0x4, 0x3, 0x100, 0xd, 0x9, 0xd, 0x25, 0x8, 0xfffffffb, 0x7, 0x3, 0x3, 0x108, 0xd, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x1, 0x400, 0x3, 0x8, 0x2, 0x21, 0x4, 0xa4, 0x4, 0xfffffff2, 0x280, 0x80000001, 0x40, 0x6, 0x1, 0x9, 0x80000001, 0x6, 0x1f1c000, 0x8000, 0x3, 0x2d34, 0x1, 0x101, 0x1, 0x6e2, 0x7, 0xff, 0x9, 0x6, 0xffffffff, 0x4, 0x6, 0x0, 0x10001, 0x1, 0x2, 0x5, 0xaf, 0x401, 0x174, 0x8000, 0x9f, 0x1, 0x0, 0x8001, 0x8, 0x997b, 0x1, 0x10, 0x800, 0xb6, 0xe, 0xb14, 0x3, 0x4, 0x1, 0x33, 0x0, 0x8, 0x244f, 0x8, 0x4, 0x1, 0x400, 0x2, 0x8, 0x6, 0x2, 0x1, 0x100, 0x2c, 0xa3, 0xfffffffd, 0xe, 0x6, 0x7f, 0x279a9097, 0x0, 0xfffffffd, 0x4, 0xa9, 0x1000, 0xd768, 0x194710c4, 0x2, 0x4, 0x6, 0xe, 0xa, 0x8, 0x0, 0x0, 0x3, 0x5, 0x100, 0xffffff66, 0xef, 0x8, 0x3c, 0x3d6ab92d, 0x8001, 0x2, 0x10000002, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x3, 0x101, 0x5, 0x400, 0x1c, 0x9, 0x4, 0x0, 0x4, 0x3, 0x6, 0x1, 0x80000, 0x2, 0x6, 0x3ff, 0x2, 0x1, 0x225, 0x4, 0x7fff, 0xb, 0x6, 0x2, 0x6, 0x603, 0x80, 0x2, 0x1, 0xe7d, 0x7f, 0x8001, 0x8001, 0x2, 0x9, 0x9, 0x2951, 0xb, 0x35, 0x8, 0x9f9, 0x0, 0x1, 0x5, 0xf, 0xf8a, 0x800, 0x8, 0x1, 0x530, 0x9, 0xfffffffc, 0x4, 0x5, 0xf027, 0x7, 0x400, 0x7f, 0x2, 0x7e9, 0x6, 0x4, 0x6, 0x3, 0x9745, 0x8, 0x5, 0x8b, 0x10000, 0x5, 0x5, 0x7, 0xcf68]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x0, 0x5, 0x80, {0xe, 0x1, 0x3, 0x7, 0xc49d, 0x449b}, {0x7, 0x2, 0x1, 0xfff, 0x7a9, 0x6}, 0xb, 0xfffffffc, 0xed}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x8, 0x9, 0x0, 0x1, {0x40, 0x0, 0x21d, 0x6, 0x3, 0x2e}, {0xa, 0x0, 0x1, 0x9, 0x81, 0xfffffff7}, 0x27, 0x3ff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_ROUTE4_ACT={0x38, 0x6, [@m_tunnel_key={0x34, 0x1e, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xa50, 0x6, [@m_skbedit={0xa4c, 0xc, 0x0, 0x0, {{0xc}, {0x4}, {0xa1d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1000}, 0x1, 0x0, 0x0, 0x8848}, 0x20000804)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2)

39.9978ms ago: executing program 1 (id=1177):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1)

39.762875ms ago: executing program 2 (id=1178):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x4)
write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r5 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 4 (id=1179):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000002000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}, 0x1, 0x900}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="b8971d2736e5b704b72cf378fd9878bf7e97fc9caac7db0341baf6625b5cdabcf2f08a896d287650d2cf58949eb219dd36f1d70aa5d3474fc6f90337dfaf591a09c888317ff74463094671f38842bcebb66d2b2d0e09392422e5f52a63e6059bc29070ff4bbe89e81e45bc773613ac423c3ab8f5b271359dbd3e8773ac136c3eb4438f9dc26c793c462ed873250c8c607688876ac4e047027dcd71b49afe4dc28db564daec9d530e492ee12a0a907590ee3ae4c60a1d4cd3bca6574673f5efa5e7170139277a12727a", 0x66)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x1, 0x53, 0x202, 0x1, 0x4})

kernel console output (not intermixed with test programs):

1: Product: syz
[  350.613874][ T5909] pwc: recv_control_msg error -71 req 04 val 1100
[  350.628573][    T9] usb 3-1: Manufacturer: syz
[  350.644032][    T9] usb 3-1: SerialNumber: syz
[  350.651775][ T5909] pwc: recv_control_msg error -71 req 04 val 1200
[  350.672097][    T9] usb 3-1: config 0 descriptor??
[  350.687140][ T5909] pwc: Registered as video103.
[  350.829629][    T9] ti_usb_3410_5052 3-1:0.0: required endpoints missing
[  350.848120][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[  351.031729][ T5909] usb 1-1: USB disconnect, device number 58
[  351.500089][ T5909] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  351.658982][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  351.672169][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short
[  351.681470][ T5909] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  351.697373][ T5909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.722574][ T5909] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  351.741409][ T5909] usb 1-1: config 1 has no interface number 1
[  351.756779][ T5909] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  351.798644][ T5909] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  351.831743][ T5909] usb 1-1: config 1 interface 2 has no altsetting 0
[  351.850376][ T5909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  351.933428][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.947329][ T5909] usb 1-1: Product: syz
[  351.951717][ T5909] usb 1-1: Manufacturer: syz
[  351.966490][ T5909] usb 1-1: SerialNumber: syz
[  352.119639][ T9593] vhci_hcd: connection reset by peer
[  352.137141][   T49] vhci_hcd vhci_hcd.3: stop threads
[  352.143243][   T49] vhci_hcd vhci_hcd.3: release socket
[  352.150573][   T49] vhci_hcd vhci_hcd.3: disconnect device
[  352.224748][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  352.242170][ T5909] usb 1-1: MIDIStreaming interface descriptor not found
[  352.401109][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  352.424281][ T5890] usb 4-1: MIDIStreaming interface descriptor not found
[  352.446615][ T5909] usb 1-1: USB disconnect, device number 59
[  352.646585][ T5890] usb 4-1: USB disconnect, device number 47
[  352.888985][ T5812] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  353.022384][ T5881] usb 3-1: USB disconnect, device number 58
[  353.059103][ T5812] usb 2-1: Using ep0 maxpacket: 32
[  353.101921][ T5812] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  353.125718][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.144286][ T5812] usb 2-1: Product: syz
[  353.154378][ T5812] usb 2-1: Manufacturer: syz
[  353.165434][ T5812] usb 2-1: SerialNumber: syz
[  353.178693][ T5812] usb 2-1: config 0 descriptor??
[  353.249064][ T5909] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  353.260892][ T5812] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  353.423673][ T5909] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  353.434807][ T5909] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  353.451160][ T5909] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  353.459052][ T5881] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  353.480503][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.619382][ T5909] usb 1-1: Product: syz
[  353.623591][ T5909] usb 1-1: Manufacturer: syz
[  353.628189][ T5909] usb 1-1: SerialNumber: syz
[  353.721286][ T5881] usb 3-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  353.733742][ T5881] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  353.759453][ T5881] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  353.782602][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.809705][ T5881] usb 3-1: Product: syz
[  353.814147][ T5881] usb 3-1: Manufacturer: syz
[  353.819337][ T5881] usb 3-1: SerialNumber: syz
[  354.228606][ T9630] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  354.371090][ T9647] ip6t_srh: unknown srh match flags  4000
[  354.489338][  T795] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  354.574029][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.859'.
[  354.605590][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'.
[  355.231507][ T5812] gspca_ov534_9: reg_r err -32
[  355.288924][    T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  355.438974][    T9] usb 4-1: Using ep0 maxpacket: 16
[  355.451539][    T9] usb 4-1: config 0 has no interfaces?
[  355.459515][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  355.468628][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  355.476717][    T9] usb 4-1: Manufacturer: syz
[  355.485461][    T9] usb 4-1: config 0 descriptor??
[  355.498922][ T5812] gspca_ov534_9: Unknown sensor 0000
[  355.499057][ T5812] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  355.629649][ T9663] netlink: 'syz.4.860': attribute type 322 has an invalid length.
[  355.915489][ T9655] netlink: 'syz.3.858': attribute type 1 has an invalid length.
[  355.993211][ T5909] usb 1-1: USB disconnect, device number 60
[  356.188903][ T9666] kvm: pic: non byte write
[  356.440581][ T9655] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.504526][ T5909] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  356.691133][ T5909] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 5632, setting to 1024
[  356.756950][ T5909] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  356.812486][ T5881] usb 3-1: USB disconnect, device number 59
[  356.941000][ T5909] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  357.013731][ T5890] usb 2-1: USB disconnect, device number 57
[  357.050170][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  357.061100][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.075738][ T5909] usb 1-1: Product: syz
[  357.080346][ T5909] usb 1-1: Manufacturer: syz
[  357.085207][ T5909] usb 1-1: SerialNumber: syz
[  357.159057][ T9675] netlink: 'syz.1.863': attribute type 4 has an invalid length.
[  357.192631][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'.
[  357.314084][ T9670] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  357.791750][ T9682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.865'.
[  357.989271][ T9670] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  358.049087][ T5945] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  358.165355][ T5812] usb 4-1: USB disconnect, device number 48
[  358.213489][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.253801][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.283129][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  358.314307][ T5945] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  358.382382][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.424786][   T13] bond0 (unregistering): Released all slaves
[  358.443136][ T5945] usb 2-1: config 0 descriptor??
[  358.618957][ T5890] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  358.884325][ T5890] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  358.900113][ T5945] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  358.926153][ T5890] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  358.952562][ T5890] usb 5-1: config 0 has no interface number 0
[  359.016476][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  359.051304][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.081554][ T5890] usb 5-1: Product: syz
[  359.085786][ T5890] usb 5-1: Manufacturer: syz
[  359.108761][ T5890] usb 5-1: SerialNumber: syz
[  359.146735][ T5890] usb 5-1: config 0 descriptor??
[  359.301022][ T5909] cdc_ncm 1-1:1.0: bind() failure
[  359.317488][ T5909] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  359.327871][ T5909] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  359.339722][ T5909] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  359.375093][ T5909] usb 1-1: USB disconnect, device number 61
[  359.518951][ T5945] usb 4-1: new low-speed USB device number 49 using dummy_hcd
[  359.669823][ T5945] usb 4-1: Invalid ep0 maxpacket: 64
[  359.825402][ T5945] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[  360.088942][ T5945] usb 4-1: Invalid ep0 maxpacket: 64
[  360.097165][ T5945] usb usb4-port1: attempt power cycle
[  360.268944][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  360.589124][   T24] usb 3-1: Using ep0 maxpacket: 16
[  360.597483][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.608759][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.631077][ T5945] usb 4-1: new low-speed USB device number 51 using dummy_hcd
[  360.649120][   T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  360.668487][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.686025][ T5945] usb 4-1: Invalid ep0 maxpacket: 64
[  360.725502][   T24] usb 3-1: config 0 descriptor??
[  360.797584][    T9] usb 2-1: USB disconnect, device number 58
[  360.829381][ T5945] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  360.872573][ T5945] usb 4-1: Invalid ep0 maxpacket: 64
[  360.887873][ T5945] usb usb4-port1: unable to enumerate USB device
[  361.148423][ T9705] lo: entered allmulticast mode
[  361.169520][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'.
[  361.213167][   T24] ntrig 0003:1B96:0008.0011: item fetching failed at offset 3/7
[  361.225175][   T24] ntrig 0003:1B96:0008.0011: parse failed
[  361.245322][   T24] ntrig 0003:1B96:0008.0011: probe with driver ntrig failed with error -22
[  361.309317][ T5881] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  361.408923][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  361.418218][ T9704] lo: left allmulticast mode
[  361.430150][ T5945] usb 3-1: USB disconnect, device number 60
[  361.460969][ T5881] usb 1-1: Using ep0 maxpacket: 8
[  361.474514][ T5881] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  361.483233][ T5881] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  361.558268][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  361.585953][ T5881] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  361.599498][    T9] usb 2-1: Using ep0 maxpacket: 8
[  361.617042][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  361.631685][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.643570][    T9] usb 2-1: Product: syz
[  361.648131][    T9] usb 2-1: Manufacturer: syz
[  361.654160][    T9] usb 2-1: SerialNumber: syz
[  361.668068][ T5881] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.721099][ T5881] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  361.744270][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.039891][ T5890] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  362.049686][ T5881] usb 1-1: usb_control_msg returned -32
[  362.059569][ T5881] usbtmc 1-1:16.0: can't read capabilities
[  362.068929][ T5890] uvcvideo 5-1:0.64: No valid video chain found.
[  362.089439][ T5890] usb 5-1: USB disconnect, device number 59
[  362.343857][    T9] usb 2-1: clock source 0 is not valid, cannot use
[  362.363581][   T30] audit: type=1326 audit(1776096105.144:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  362.427363][ T5881] usb 1-1: USB disconnect, device number 62
[  362.453345][   T30] audit: type=1326 audit(1776096105.144:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  362.862224][   T30] audit: type=1326 audit(1776096105.144:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.239058][   T30] audit: type=1326 audit(1776096105.144:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.427902][   T30] audit: type=1326 audit(1776096105.144:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.523811][   T30] audit: type=1326 audit(1776096105.154:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.682074][   T30] audit: type=1326 audit(1776096105.154:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.789926][   T30] audit: type=1326 audit(1776096105.154:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.891044][   T30] audit: type=1326 audit(1776096105.154:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  363.952660][   T30] audit: type=1326 audit(1776096105.154:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.2.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa14af9c819 code=0x7ffc0000
[  365.143915][ T9755] bond5: option lacp_rate: invalid value (240)
[  365.166106][    T9] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  365.186055][    T9] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  365.199466][    T9] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  365.209493][    T9] usb 2-1: clock source 0 is not valid, cannot use
[  365.216690][    T9] usb 2-1: 2:1: cannot get freq (v2/v3): err -71
[  365.237043][    T9] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  365.253995][ T9755] bond5 (unregistering): Released all slaves
[  365.350104][    T9] usb 2-1: USB disconnect, device number 59
[  365.677019][ T9761] dvmrp1: entered allmulticast mode
[  365.855181][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'.
[  365.896313][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'.
[  365.908345][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'.
[  366.349298][ T9772] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  366.355861][ T9772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  366.379096][ T5812] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  366.390714][ T9772] vhci_hcd vhci_hcd.0: Device attached
[  366.504807][ T9773] vhci_hcd: connection closed
[  366.506278][ T1162] vhci_hcd vhci_hcd.3: stop threads
[  366.524929][ T1162] vhci_hcd vhci_hcd.3: release socket
[  366.539498][ T1162] vhci_hcd vhci_hcd.3: disconnect device
[  366.569145][ T5890] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  366.579013][ T5812] usb 3-1: Using ep0 maxpacket: 8
[  366.588277][ T5812] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  366.598053][ T5812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.608297][ T5812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  366.621563][ T5812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  366.659251][ T5812] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  366.680370][ T5812] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  366.691202][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.029710][ T5812] usb 3-1: usb_control_msg returned -32
[  367.052767][ T5812] usbtmc 3-1:16.0: can't read capabilities
[  367.323344][ T9788] 8021q: VLANs not supported on ip6tnl0
[  367.344752][ T9765] usbtmc 3-1:16.0: usb_control_msg returned -71
[  367.353045][ T9767] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90
[  367.362567][ T5812] usb 3-1: USB disconnect, device number 61
[  367.399175][ T5881] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  367.407039][   T24] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  367.521461][ T9791] vlan2: entered promiscuous mode
[  367.526703][ T9791] vlan2: entered allmulticast mode
[  367.531941][ T9791] hsr_slave_1: entered allmulticast mode
[  367.542533][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'.
[  367.588923][ T5881] usb 5-1: device descriptor read/64, error -71
[  367.621002][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  367.668603][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.705729][   T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  367.880942][ T5881] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  367.901788][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.947854][   T24] usb 2-1: config 0 descriptor??
[  368.076831][ T5881] usb 5-1: device descriptor read/64, error -71
[  368.200078][ T5881] usb usb5-port1: attempt power cycle
[  368.348630][ T5890] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  368.521598][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  368.533918][ T5890] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  368.554389][ T5890] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  368.568252][ T5881] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  368.578278][   T24] cypress 0003:04B4:DE64.0012: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0
[  368.609223][ T5890] usb 1-1: config 63 has no interface number 0
[  368.621309][ T5881] usb 5-1: device descriptor read/8, error -71
[  368.634915][ T5890] usb 1-1: config 63 interface 66 has no altsetting 0
[  368.689815][ T5890] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  368.699383][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.799046][ T5890] usb 1-1: Product: syz
[  368.805393][ T5890] usb 1-1: Manufacturer: syz
[  368.817900][ T5890] usb 1-1: SerialNumber: syz
[  368.864783][ T5945] usb 2-1: USB disconnect, device number 60
[  368.899492][ T5881] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  368.940944][ T5881] usb 5-1: device descriptor read/8, error -71
[  369.049713][ T5881] usb usb5-port1: unable to enumerate USB device
[  369.068383][ T5890] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  369.088048][ T5890] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  369.124043][ T5890] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  369.169257][ T5890] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  369.204174][ T5890] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  369.280991][ T5890] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  369.281085][ T5890] uvcvideo 1-1:63.66: No streaming interface found for terminal 29.
[  369.281115][ T5890] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized!
[  369.312621][ T5890] usb 1-1: USB disconnect, device number 63
[  369.741909][ T9814] netlink: zone id is out of range
[  369.794415][ T5890] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  369.971873][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  369.981703][ T5890] usb 1-1: not running at top speed; connect to a high speed hub
[  369.995821][ T5890] usb 1-1: config 2 has no interfaces?
[  370.011198][ T5890] usb 1-1: string descriptor 0 read error: -22
[  370.022707][ T5890] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=3d.a2
[  370.049353][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.317030][ T5890] usb 1-1: USB disconnect, device number 64
[  371.824058][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'.
[  371.846033][ T9838] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  372.630753][ T5812] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  372.809195][ T5812] usb 3-1: Using ep0 maxpacket: 16
[  372.822142][ T5812] usb 3-1: config 0 has no interfaces?
[  372.827744][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  372.837887][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.885268][ T5812] usb 3-1: config 0 descriptor??
[  373.129882][ T9845] kvm: kvm [9840]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  373.155952][ T9845] kvm: kvm [9840]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  373.171938][ T9862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  373.183369][ T9862] gretap1: entered promiscuous mode
[  373.313569][ T9862] gretap1: entered allmulticast mode
[  373.340650][ T9868] tmpfs: Unknown parameter 'fd'
[  373.842523][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  373.851877][ T9881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.003879][ T9883] input: syz0 as /devices/virtual/input/input20
[  374.080075][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.291588][    T9] usb 3-1: USB disconnect, device number 62
[  375.364049][ T9894] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.919'.
[  375.373656][ T9894] netlink: Conntrack attr has 4 unknown bytes
[  375.687980][ T9901] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  376.527567][ T9911] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  378.546423][ T9946] netlink: 10 bytes leftover after parsing attributes in process `syz.1.927'.
[  378.579207][   T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  378.669875][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.676614][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.741373][   T24] usb 3-1: Using ep0 maxpacket: 8
[  378.775290][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  378.823366][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  378.878745][   T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  378.984794][   T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  379.011327][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.028561][   T24] usb 3-1: Product: syz
[  379.034739][   T24] usb 3-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  379.121221][   T24] usb 3-1: SerialNumber: syz
[  379.612893][   T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  379.635151][   T24] usb 3-1: unit 2 not found!
[  379.815763][   T24] usb 3-1: USB disconnect, device number 63
[  379.941455][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  380.698984][   T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  380.866220][   T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  380.883159][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.900354][   T24] usb 2-1: config 0 descriptor??
[  381.387715][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.936'.
[  381.464115][T10008] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  381.928941][ T5812] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  382.099650][ T5812] usb 4-1: Using ep0 maxpacket: 8
[  382.107038][ T5812] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  382.116242][ T5812] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  382.138278][ T5812] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  382.169703][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  382.224680][ T5812] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  382.258940][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.297530][ T5812] usb 4-1: Product: syz
[  382.333157][ T5812] usb 4-1: Manufacturer: syz
[  382.339591][ T5812] usb 4-1: SerialNumber: syz
[  382.363721][ T5812] usb 4-1: config 0 descriptor??
[  382.383602][ T5812] hub 4-1:0.0: bad descriptor, ignoring hub
[  382.391096][ T5812] hub 4-1:0.0: probe with driver hub failed with error -5
[  382.433160][ T5812] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  382.615543][ T5812] usb 4-1: USB disconnect, device number 53
[  382.868561][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'.
[  382.924048][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'.
[  383.189001][ T5881] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  383.349694][ T5881] usb 5-1: Using ep0 maxpacket: 16
[  383.370887][ T5881] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  383.388961][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.407705][ T5881] usb 5-1: Product: syz
[  383.548612][ T5881] usb 5-1: Manufacturer: syz
[  383.566816][ T5881] usb 5-1: SerialNumber: syz
[  383.598288][   T24] usb 2-1: Cannot set autoneg
[  383.603778][   T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  383.615506][ T5890] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  383.653503][ T5881] usb 5-1: config 0 descriptor??
[  383.674295][ T5881] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  383.682383][   T24] usb 2-1: USB disconnect, device number 61
[  383.799189][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  383.833089][ T5890] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  383.848905][ T5890] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  383.885738][ T5890] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  383.939702][ T5890] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  383.964814][T10065] macvtap1: entered allmulticast mode
[  383.973189][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.974734][    T9] usb 5-1: USB disconnect, device number 64
[  383.989422][T10065] vlan0: entered allmulticast mode
[  383.994741][ T5890] usb 1-1: Product: syz
[  384.007445][T10065] veth0_vlan: entered allmulticast mode
[  384.013494][ T5890] usb 1-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  384.045186][T10065] team0: Device macvtap1 failed to register rx_handler
[  384.072826][T10065] vlan0: left allmulticast mode
[  384.077976][T10065] veth0_vlan: left allmulticast mode
[  384.208856][ T5890] usb 1-1: SerialNumber: syz
[  384.469837][ T5890] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  384.492308][ T5890] usb 1-1: unit 2 not found!
[  384.616553][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.950'.
[  384.639364][T10083] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  384.796640][ T5890] usb 1-1: USB disconnect, device number 65
[  384.975137][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  385.469251][ T5812] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  385.643074][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  385.677093][ T5812] usb 5-1: config 0 has no interfaces?
[  385.694254][ T5812] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  385.783936][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.818635][ T5812] usb 5-1: config 0 descriptor??
[  386.349123][T10084] kvm: kvm [10077]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  386.359594][T10084] kvm: kvm [10077]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  386.469094][ T5882] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  386.734690][ T5882] usb 1-1: Using ep0 maxpacket: 16
[  386.743575][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.800957][ T5882] usb 1-1: config 0 has no interfaces?
[  386.813322][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  386.822588][ T5882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  386.867405][ T5882] usb 1-1: Manufacturer: syz
[  386.895844][ T5882] usb 1-1: config 0 descriptor??
[  387.157060][T10101] netlink: 'syz.0.952': attribute type 1 has an invalid length.
[  387.258677][T10101] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.924646][ T5881] usb 5-1: USB disconnect, device number 65
[  387.946983][T10125] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.063632][ T5945] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  388.106071][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'.
[  388.315079][ T5945] usb 2-1: device descriptor read/64, error -71
[  388.595570][ T5945] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  388.666198][T10125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.779115][ T5945] usb 2-1: device descriptor read/64, error -71
[  388.951479][ T5945] usb usb2-port1: attempt power cycle
[  388.959656][ T5882] usb 1-1: USB disconnect, device number 66
[  388.989941][T10125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.072445][T10125] tipc: Resetting bearer <eth:vlan1>
[  389.210777][   T66] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.232914][   T66] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.298990][ T5945] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  389.333114][ T5945] usb 2-1: device descriptor read/8, error -71
[  389.350398][   T83] bond0 (unregistering): Released all slaves
[  389.417563][   T66] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.458378][   T66] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.624590][ T5945] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  389.633812][T10150] xt_connbytes: Forcing CT accounting to be enabled
[  389.645046][   T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  389.681639][ T5945] usb 2-1: device descriptor read/8, error -71
[  389.799185][ T5945] usb usb2-port1: unable to enumerate USB device
[  389.819070][   T24] usb 1-1: Using ep0 maxpacket: 16
[  389.830833][   T24] usb 1-1: config 1 has an invalid interface number: 58 but max is 0
[  389.847680][   T24] usb 1-1: config 1 has no interface number 0
[  389.861486][   T24] usb 1-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024
[  389.884947][   T24] usb 1-1: config 1 interface 58 altsetting 6 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  389.904008][   T24] usb 1-1: config 1 interface 58 altsetting 6 endpoint 0x8D has invalid wMaxPacketSize 0
[  389.921163][   T24] usb 1-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8D has invalid maxpacket 0
[  389.931188][ T5882] usb 5-1: new low-speed USB device number 66 using dummy_hcd
[  389.949758][   T24] usb 1-1: config 1 interface 58 has no altsetting 0
[  389.961201][   T24] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4
[  389.971691][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.985174][   T24] usb 1-1: Product: syz
[  389.990759][   T24] usb 1-1: Manufacturer: syz
[  389.998986][   T24] usb 1-1: SerialNumber: syz
[  390.007184][T10142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  390.089450][ T5882] usb 5-1: device descriptor read/64, error -71
[  390.308692][   T24] kvaser_usb 1-1:1.58: error -EPROTO: Cannot get software info
[  390.324359][   T24] kvaser_usb 1-1:1.58: probe with driver kvaser_usb failed with error -71
[  390.338045][ T5882] usb 5-1: new low-speed USB device number 67 using dummy_hcd
[  390.357941][   T24] usb 1-1: USB disconnect, device number 67
[  390.511231][ T5882] usb 5-1: device descriptor read/64, error -71
[  390.629515][ T5882] usb usb5-port1: attempt power cycle
[  391.059226][ T5882] usb 5-1: new low-speed USB device number 68 using dummy_hcd
[  391.116905][ T5882] usb 5-1: device descriptor read/8, error -71
[  391.640489][ T5882] usb 5-1: new low-speed USB device number 69 using dummy_hcd
[  391.827145][ T5882] usb 5-1: device descriptor read/8, error -71
[  391.966385][ T5882] usb usb5-port1: unable to enumerate USB device
[  392.508429][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'.
[  392.568944][T10188] capability: warning: `syz.1.971' uses 32-bit capabilities (legacy support in use)
[  392.610222][T10186] netlink: 43 bytes leftover after parsing attributes in process `syz.1.971'.
[  392.680090][T10186] netlink: 'syz.1.971': attribute type 5 has an invalid length.
[  392.710873][T10186] netlink: 43 bytes leftover after parsing attributes in process `syz.1.971'.
[  392.789611][T10196] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  393.021316][T10202] loop3: detected capacity change from 0 to 7
[  393.199108][T10202] Dev loop3: unable to read RDB block 7
[  393.219660][T10202]  loop3: unable to read partition table
[  393.257405][T10202] loop3: partition table beyond EOD, truncated
[  393.281763][T10205] netlink: 'syz.1.975': attribute type 21 has an invalid length.
[  393.290735][T10202] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  393.367026][T10205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.975'.
[  393.388452][ T5193] Dev loop3: unable to read RDB block 7
[  393.396692][ T5193]  loop3: unable to read partition table
[  393.424510][ T5193] loop3: partition table beyond EOD, truncated
[  393.444760][T10205] netlink: 'syz.1.975': attribute type 4 has an invalid length.
[  393.509092][T10205] netlink: 'syz.1.975': attribute type 5 has an invalid length.
[  393.516797][T10205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.975'.
[  393.919347][ T5882] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  393.938874][   T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  394.069324][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  394.087185][ T5882] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  394.096845][   T24] usb 3-1: Using ep0 maxpacket: 16
[  394.112180][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.121515][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.148854][ T5882] usb 4-1: Product: syz
[  394.153055][ T5882] usb 4-1: Manufacturer: syz
[  394.157665][ T5882] usb 4-1: SerialNumber: syz
[  394.163777][   T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  394.174945][ T5910] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  394.198964][   T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  394.215970][ T5882] usb 4-1: config 0 descriptor??
[  394.231612][ T5882] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  394.243700][   T24] usb 3-1: config 1 interface 2 has no altsetting 0
[  394.262139][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  394.271980][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.289101][   T24] usb 3-1: Product: syz
[  394.293348][   T24] usb 3-1: Manufacturer: syz
[  394.297985][   T24] usb 3-1: SerialNumber: syz
[  394.345386][ T5910] usb 2-1: device descriptor read/64, error -71
[  394.552787][   T24] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  394.560895][   T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  394.569702][   T24] usb 3-1: found format II with max.bitrate = 3, frame size=7
[  394.577544][   T24] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  394.651413][ T5910] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  394.706135][   T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  394.726946][   T24] usb 3-1: found format II with max.bitrate = 3, frame size=7
[  394.748782][   T24] usb 3-1: selecting invalid altsetting 0
[  394.767906][   T24] usb 3-1: selecting invalid altsetting 0
[  394.809310][ T5910] usb 2-1: device descriptor read/64, error -71
[  394.822985][T10220] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  394.848443][T10220] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  394.885013][T10220] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  394.919592][   T24] usb 3-1: USB disconnect, device number 64
[  394.929838][ T5910] usb usb2-port1: attempt power cycle
[  395.107648][T10211] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1
[  395.288956][ T5910] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  395.324177][ T5910] usb 2-1: device descriptor read/8, error -71
[  395.369184][   T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  395.448946][ T5881] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  395.542194][   T24] usb 3-1: config 0 has no interfaces?
[  395.547823][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  395.560602][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.573406][   T24] usb 3-1: config 0 descriptor??
[  395.579388][ T5910] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[  395.610157][ T5910] usb 2-1: device descriptor read/8, error -71
[  395.621333][ T5881] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  395.630353][ T5881] usb 5-1: config 0 has no interface number 0
[  395.636466][ T5881] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  395.647751][ T5881] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  395.661315][ T5881] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  395.671011][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.679330][ T5881] usb 5-1: Product: syz
[  395.683558][ T5881] usb 5-1: Manufacturer: syz
[  395.688207][ T5881] usb 5-1: SerialNumber: syz
[  395.697128][ T5881] usb 5-1: config 0 descriptor??
[  395.709815][T10227] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  395.719715][ T5910] usb usb2-port1: unable to enumerate USB device
[  395.728130][ T5881] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  395.740291][T10231] PKCS8: Unsupported PKCS#8 version
[  395.749815][ T5881] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  395.763875][T10231] binder: 10228:10231 ioctl c0306201 200000000280 returned -14
[  395.788517][ T5882] gspca_ov534_9: reg_r err -32
[  395.810771][T10231] binder: 10228:10231 ioctl 3b81 200000000200 returned -22
[  395.821137][ T5812] usb 3-1: USB disconnect, device number 65
[  395.944443][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  396.079716][ T5882] gspca_ov534_9: Unknown sensor 0000
[  396.079823][ T5882] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  396.160575][T10227] netlink: 'syz.4.983': attribute type 1 has an invalid length.
[  396.172722][T10227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.983'.
[  396.199219][T10227] fuse: Bad value for 'rootmode'
[  396.214638][T10227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.983'.
[  396.238659][ T5882] usb 5-1: USB disconnect, device number 70
[  396.247813][ T5882] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  396.267589][ T5882] cyberjack 5-1:0.69: device disconnected
[  396.273696][ T5881] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  396.434994][ T5881] usb 3-1: config 0 has no interfaces?
[  396.441100][ T5881] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  396.450479][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.469828][ T5881] usb 3-1: config 0 descriptor??
[  396.677672][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.686917][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.387661][ T5812] usb 4-1: USB disconnect, device number 54
[  397.503320][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[  397.874590][ T5812] usb 3-1: USB disconnect, device number 66
[  398.419671][T10280] netlink: 'syz.2.995': attribute type 13 has an invalid length.
[  399.026192][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'.
[  399.056701][T10295] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  399.073583][T10296] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  400.161167][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.284773][T10309] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  401.292430][T10308] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  401.294845][T10309] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  401.298623][T10308] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  401.320739][T10309] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  401.327633][T10309] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  401.389321][T10308] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  401.415563][T10308] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  401.442458][T10308] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  401.469070][T10308] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  401.496369][T10308] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  401.513042][T10308] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  401.536482][T10308] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  401.547080][T10308] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  401.579934][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'.
[  401.597698][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'.
[  401.608916][    T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  401.619085][ T5812] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  401.624551][ T5910] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  401.629178][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'.
[  401.652618][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'.
[  401.776675][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1006'.
[  401.785918][    T9] usb 3-1: device descriptor read/64, error -71
[  401.798950][ T5910] usb 1-1: Using ep0 maxpacket: 8
[  401.808923][ T5812] usb 2-1: Using ep0 maxpacket: 8
[  401.815065][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  401.816474][ T5812] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  401.827029][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  401.834629][ T5812] usb 2-1: config 0 has no interface number 0
[  401.844999][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  401.854641][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  401.861786][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  401.873617][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  401.897159][ T5812] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  401.897244][ T5812] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  401.897313][ T5812] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  401.897346][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.902069][ T5812] usb 2-1: config 0 descriptor??
[  401.947115][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  401.951161][ T5812] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  401.989352][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  402.002881][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.015218][ T5910] usb 1-1: config 0 descriptor??
[  402.024269][T10315] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  402.028940][    T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  402.169116][    T9] usb 3-1: device descriptor read/64, error -71
[  402.299385][    T9] usb usb3-port1: attempt power cycle
[  402.345443][ T5882] usb 2-1: USB disconnect, device number 70
[  402.345527][    C0] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[  402.362102][ T5882] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  402.362134][T10352] ldusb: No device or device unplugged -19
[  402.409176][ T5812] psmouse serio2: Failed to reset mouse on : -5
[  402.503968][ T5909] usb 1-1: USB disconnect, device number 68
[  402.505907][ T5826] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  402.648983][    T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  402.656838][T10359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.665063][T10358] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.675412][T10359] syzkaller0: entered promiscuous mode
[  402.680276][    T9] usb 3-1: device descriptor read/8, error -71
[  402.681373][T10359] syzkaller0: entered allmulticast mode
[  402.695676][T10358] binder: 10357:10358 ioctl c0306201 200000000080 returned -14
[  402.703976][T10359] binder: 10357:10359 ioctl c0306201 200000000080 returned -14
[  402.722183][T10358] binder: 10357:10358 ioctl 8922 200000002280 returned -22
[  402.730749][T10357] tipc: Resetting bearer <eth:syzkaller0>
[  402.746750][T10357] tipc: Disabling bearer <eth:syzkaller0>
[  402.829237][ T5945] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  402.918977][    T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  402.939534][    T9] usb 3-1: device descriptor read/8, error -71
[  402.995345][ T5945] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config
[  403.013758][ T5945] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  403.025885][ T5945] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  403.035299][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.043653][ T5945] usb 2-1: Product: syz
[  403.047948][ T5945] usb 2-1: Manufacturer: syz
[  403.053585][    T9] usb usb3-port1: unable to enumerate USB device
[  403.064239][ T5945] usb 2-1: SerialNumber: syz
[  403.238904][ T5910] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  403.403339][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  403.420461][ T5910] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  403.492314][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.541780][ T5910] usb 4-1: config 0 descriptor??
[  403.566719][T10366] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  404.027880][ T5910] hid_parser_main: 222 callbacks suppressed
[  404.027905][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.042245][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.054069][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.067260][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.111969][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.154620][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.167061][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.188070][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.207929][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.233194][ T5910] asus 0003:0B05:1ABE.0013: unknown main item tag 0x0
[  404.265834][ T5910] asus 0003:0B05:1ABE.0013: unbalanced collection at end of report description
[  404.414328][ T5910] asus 0003:0B05:1ABE.0013: Asus hid parse failed: -22
[  404.431823][ T5910] asus 0003:0B05:1ABE.0013: probe with driver asus failed with error -22
[  404.464608][ T5910] usb 4-1: USB disconnect, device number 55
[  405.164979][T10386] warning: `syz.3.1017' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  405.178710][T10386] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1017'.
[  405.189165][T10386] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1017'.
[  405.205379][T10386] tipc: Failed to remove unknown binding: 66,1,1/2126:1002930770/1002930772
[  405.637464][ T5945] usb 2-1: USB disconnect, device number 71
[  406.129302][ T5812] misc userio: Buffer overflowed, userio client isn't keeping up
[  406.519126][    T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  406.692571][    T9] usb 2-1: Using ep0 maxpacket: 32
[  406.713048][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.876064][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.923766][    T9] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  406.949923][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.974900][    T9] usb 2-1: config 0 descriptor??
[  407.099003][ T5910] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  407.200658][    T9] zydacron 0003:13EC:0006.0014: item fetching failed at offset 0/2
[  407.212689][    T9] zydacron 0003:13EC:0006.0014: parse failed
[  407.234608][    T9] zydacron 0003:13EC:0006.0014: probe with driver zydacron failed with error -22
[  407.263192][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  407.297652][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  407.359162][T10414] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  407.378053][ T5910] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  407.398933][    T9] usb 2-1: USB disconnect, device number 72
[  407.428742][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  407.463039][ T5812] input: PS/2 Generic Mouse as /devices/serio2/input/input22
[  407.481647][ T5910] usb 1-1: SerialNumber: syz
[  407.718180][ T5910] usb 1-1: 0:2 : does not exist
[  407.731545][ T5812] psmouse serio2: Failed to enable mouse on 
[  407.852473][ T5910] usb 1-1: USB disconnect, device number 69
[  407.880323][  T795] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  407.932190][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  408.040424][  T795] usb 3-1: Using ep0 maxpacket: 8
[  408.054668][  T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  408.083413][  T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  408.096861][  T795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  408.107090][  T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  408.120179][  T795] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  408.130820][  T795] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  408.140351][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.160014][  T795] usb 3-1: config 0 descriptor??
[  408.170184][T10412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  408.650084][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'.
[  408.660161][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'.
[  408.693145][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1027'.
[  408.722996][    T9] usb 3-1: USB disconnect, device number 71
[  408.724863][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  409.667616][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1031'.
[  409.695051][T10458] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  409.933918][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  410.707120][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'.
[  410.761885][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'.
[  410.813667][T10473] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  410.908969][ T5945] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  411.069275][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  411.131277][ T5945] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30
[  411.178222][ T5945] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.276340][ T5945] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  411.359109][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0
[  411.365811][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  411.436157][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.604135][ T5945] usb 2-1: config 0 descriptor??
[  412.008372][T10496] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  412.079735][  T795] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  412.267334][  T795] usb 1-1: Using ep0 maxpacket: 8
[  412.286346][  T795] usb 1-1: config 249 has an invalid interface number: 27 but max is 3
[  412.294835][  T795] usb 1-1: config 249 has an invalid interface number: 188 but max is 3
[  412.320536][  T795] usb 1-1: config 249 has an invalid interface number: 197 but max is 3
[  412.349034][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  412.359096][  T795] usb 1-1: config 249 contains an unexpected descriptor of type 0x2, skipping
[  412.395045][  T795] usb 1-1: config 249 has an invalid interface number: 35 but max is 3
[  412.424491][  T795] usb 1-1: config 249 has no interface number 0
[  412.447585][  T795] usb 1-1: config 249 has no interface number 1
[  412.478559][  T795] usb 1-1: config 249 has no interface number 2
[  412.544771][  T795] usb 1-1: config 249 has no interface number 3
[  412.584933][  T795] usb 1-1: config 249 interface 27 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  412.685794][  T795] usb 1-1: config 249 interface 27 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 8
[  413.248925][    T9] usb 4-1: Using ep0 maxpacket: 8
[  413.262121][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  413.279096][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  413.295996][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  413.304125][  T795] usb 1-1: config 249 interface 27 altsetting 5 has an endpoint descriptor with address 0xF4, changing to 0x84
[  413.368979][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x84, skipping
[  413.372787][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  413.416365][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  413.429225][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  413.438566][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.464299][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  413.500536][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  413.509675][    T9] usb 4-1: config 0 descriptor??
[  413.559306][  T795] usb 1-1: config 249 interface 27 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  413.606862][T10494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  413.619615][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  413.649957][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  413.706464][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[  413.779540][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  413.868498][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  413.958880][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x3, skipping
[  413.991902][  T795] usb 1-1: config 249 interface 27 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[  414.028866][  T795] usb 1-1: config 249 interface 27 altsetting 5 has 17 endpoint descriptors, different from the interface descriptor's value: 16
[  414.119118][  T795] usb 1-1: config 249 interface 188 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  414.178281][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[  414.186060][T10514] input: syz0 as /devices/virtual/input/input23
[  414.228325][ T5945] usbhid 2-1:0.0: can't add hid device: -71
[  414.265251][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  414.300739][ T5945] usb 2-1: USB disconnect, device number 73
[  414.379280][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[  414.425268][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  414.459094][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[  414.484111][  T795] usb 1-1: config 249 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  414.501279][    T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  414.508895][  T795] usb 1-1: config 249 interface 188 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  414.542958][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  414.571401][  T795] usb 1-1: config 249 interface 188 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  414.588901][  T795] usb 1-1: config 249 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  414.605565][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  414.630181][T10360] usb 4-1: USB disconnect, device number 56
[  414.637653][ T5826] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  414.648911][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  414.678990][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  414.699225][    T9] usb 3-1: Using ep0 maxpacket: 32
[  414.704457][ T5945] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  414.719144][    T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  414.735379][    T9] usb 3-1: config 0 has no interface number 0
[  414.745428][    T9] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  414.753344][  T795] usb 1-1: config 249 interface 197 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.764928][    T9] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  414.817683][  T795] usb 1-1: config 249 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  414.830427][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  414.841870][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  414.847750][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  414.867133][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.876350][    T9] usb 3-1: Product: syz
[  414.880802][    T9] usb 3-1: Manufacturer: syz
[  414.885432][    T9] usb 3-1: SerialNumber: syz
[  414.922580][  T795] usb 1-1: config 249 interface 197 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.923657][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short
[  414.948138][    T9] usb 3-1: config 0 descriptor??
[  414.954034][  T795] usb 1-1: config 249 interface 197 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  414.956122][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.975920][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  414.996180][ T5945] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  415.006842][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.022908][ T5945] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  415.033800][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.042230][ T5945] usb 2-1: Product: syz
[  415.046544][ T5945] usb 2-1: Manufacturer: syz
[  415.052076][ T5945] usb 2-1: SerialNumber: syz
[  415.053122][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  415.079039][  T795] usb 1-1: config 249 interface 197 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5
[  415.088716][ T5945] usb 2-1: config 0 descriptor??
[  415.091063][  T795] usb 1-1: config 249 interface 197 altsetting 0 endpoint 0x5 has invalid maxpacket 43079, setting to 1024
[  415.106882][ T5945] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  415.108675][  T795] usb 1-1: config 249 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  415.169278][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  415.186871][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  415.339102][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  415.371745][  T795] usb 1-1: config 249 interface 197 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  415.402705][  T795] usb 1-1: config 249 interface 197 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  415.430014][    T9] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000
[  415.440327][    T9] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  415.442537][  T795] usb 1-1: config 249 interface 27 has no altsetting 0
[  415.471865][  T795] usb 1-1: config 249 interface 188 has no altsetting 0
[  415.473067][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'.
[  415.491492][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'.
[  415.522190][  T795] usb 1-1: config 249 interface 35 has no altsetting 0
[  415.530080][  T795] usb 1-1: string descriptor 0 read error: -71
[  415.532044][T10529] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  415.536542][  T795] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=fc.6e
[  415.566789][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.576011][T10360] usb 2-1: USB disconnect, device number 74
[  415.646735][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.684242][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.695067][  T795] usb 1-1: can't set config #249, error -71
[  415.742854][  T795] usb 1-1: USB disconnect, device number 70
[  415.744160][    T9] radio-si470x 3-1:0.35: si470x_get_report: usb_control_msg returned -71
[  415.798017][    T9] radio-si470x 3-1:0.35: si470x_get_scratch: si470x_get_report returned -71
[  415.822636][    T9] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  415.833856][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  415.833883][   T30] audit: type=1326 audit(1776096158.734:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1983f9c819 code=0x0
[  415.909272][    T9] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  415.937145][    T9] usb 3-1: USB disconnect, device number 72
[  416.267468][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'.
[  416.305990][T10540] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  416.753975][T10545] netlink: 'syz.3.1054': attribute type 11 has an invalid length.
[  416.892820][T10548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1055'.
[  417.021610][T10553] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  417.061387][T10553] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  417.144572][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.239293][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.252710][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.270473][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.286052][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.299838][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.315287][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  417.333048][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  418.126999][T10569] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  418.328980][  T795] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  418.523580][  T795] usb 2-1: Using ep0 maxpacket: 16
[  418.789740][ T5882] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  418.800587][   T30] audit: type=1326 audit(1776096161.634:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  418.889556][  T795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.902469][  T795] usb 2-1: config 0 has no interfaces?
[  419.029159][ T5910] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  419.038882][   T30] audit: type=1326 audit(1776096161.634:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  419.111100][ T5882] usb 3-1: Using ep0 maxpacket: 8
[  419.126726][  T795] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  419.136031][  T795] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  419.145035][  T795] usb 2-1: Manufacturer: syz
[  419.152815][  T795] usb 2-1: config 0 descriptor??
[  419.157923][ T5882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  419.169058][ T5882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  419.178716][ T5882] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  419.229263][ T5882] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  419.229410][   T30] audit: type=1326 audit(1776096161.634:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  419.246599][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.343159][ T5910] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  419.348851][   T30] audit: type=1326 audit(1776096161.634:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  419.359017][ T5910] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  419.491543][ T5882] usb 3-1: Product: syz
[  419.526085][T10564] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[  419.554012][ T5882] usb 3-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  419.625890][ T5910] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  419.712392][T10564] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.800137][   T30] audit: type=1326 audit(1776096161.634:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  419.855653][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  419.906751][ T5882] usb 3-1: SerialNumber: syz
[  419.931449][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  419.996411][   T30] audit: type=1326 audit(1776096161.634:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  420.037998][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  420.516439][ T5882] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  420.536496][ T5910] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  420.549523][   T30] audit: type=1326 audit(1776096161.634:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  420.575541][ T5882] usb 3-1: unit 2 not found!
[  420.715006][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.730592][   T30] audit: type=1326 audit(1776096161.634:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  420.759711][ T5910] usb 1-1: config 0 descriptor??
[  420.838454][T10583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  420.870452][   T30] audit: type=1326 audit(1776096161.644:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.008485][ T5882] usb 3-1: USB disconnect, device number 73
[  421.074283][ T5910] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  421.074818][   T30] audit: type=1326 audit(1776096161.644:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.237543][   T30] audit: type=1326 audit(1776096161.644:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.277648][    C0] usblp0: nonzero read bulk status received: -71
[  421.288928][T10583] usblp0: error -71 reading from printer
[  421.297746][    C0] usblp0: nonzero read bulk status received: -71
[  421.441484][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.469484][   T30] audit: type=1326 audit(1776096161.644:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.669866][  T795] usb 2-1: USB disconnect, device number 75
[  421.752406][   T30] audit: type=1326 audit(1776096161.644:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.853034][   T30] audit: type=1326 audit(1776096161.644:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  421.961621][   T30] audit: type=1326 audit(1776096161.644:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  422.019743][ T2991] bond0 (unregistering): Released all slaves
[  422.104931][   T30] audit: type=1326 audit(1776096161.644:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  422.148278][T10596] __nla_validate_parse: 44 callbacks suppressed
[  422.148298][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.188665][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.218521][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.242270][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.277456][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.301409][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.327867][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.347068][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.362180][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.376732][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  422.462824][   T30] audit: type=1326 audit(1776096161.644:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  422.505123][T10596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.580869][T10602] openvswitch: netlink: IP tunnel dst address not specified
[  422.683012][   T30] audit: type=1326 audit(1776096161.644:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fc79c819 code=0x7ffc0000
[  423.062621][  T795] usb 1-1: USB disconnect, device number 71
[  423.072790][  T795] usblp0: removed
[  423.242966][T10609] program syz.0.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  423.644783][T10617] loop2: detected capacity change from 0 to 7
[  423.679579][T10617] Dev loop2: unable to read RDB block 7
[  423.706287][T10617]  loop2: AHDI p1 p2 p3
[  423.726473][T10617] loop2: partition table partially beyond EOD, truncated
[  423.773237][T10619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  423.777885][T10617] loop2: p1 start 1818582900 is beyond EOD, 
[  423.793054][T10618] delete_channel: no stack
[  423.804930][T10617] truncated
[  423.817074][T10617] loop2: p3 start 335544320 is beyond EOD, truncated
[  424.328939][  T795] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  424.499960][T10360] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  424.558914][    T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  424.589989][  T795] usb 4-1: Using ep0 maxpacket: 16
[  424.599446][  T795] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  424.622400][  T795] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  424.635166][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.653213][  T795] usb 4-1: Product: syz
[  424.662812][  T795] usb 4-1: Manufacturer: syz
[  424.667470][  T795] usb 4-1: SerialNumber: syz
[  424.678863][T10360] usb 2-1: Using ep0 maxpacket: 8
[  424.703414][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  424.730867][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  424.745659][T10360] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  424.748996][ T5881] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  424.768940][    T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  424.785111][    T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  424.809222][    T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  424.829279][    T9] usb 1-1: config 220 has no interface number 2
[  424.841373][T10360] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  424.851804][    T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  424.865262][T10360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.875559][T10360] usb 2-1: Product: syz
[  424.881353][    T9] usb 1-1: config 220 interface 0 has no altsetting 0
[  424.888449][T10360] usb 2-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  424.923879][    T9] usb 1-1: config 220 interface 76 has no altsetting 0
[  424.931289][    T9] usb 1-1: config 220 interface 1 has no altsetting 0
[  424.943141][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  424.953249][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.958866][ T5881] usb 3-1: Using ep0 maxpacket: 16
[  424.962476][T10360] usb 2-1: SerialNumber: syz
[  424.981090][    T9] usb 1-1: Product: syz
[  425.026203][ T5881] usb 3-1: config 0 has no interfaces?
[  425.042436][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  425.067302][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.095851][ T5881] usb 3-1: config 0 descriptor??
[  425.163559][    T9] usb 1-1: Manufacturer: syz
[  425.191544][    T9] usb 1-1: SerialNumber: syz
[  425.517001][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.537991][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.582352][    T9] usb 1-1: selecting invalid altsetting 0
[  425.614692][    T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  425.638492][    T9] uvcvideo 1-1:220.0: No valid video chain found.
[  425.666040][    T9] usb 1-1: selecting invalid altsetting 0
[  425.676646][    T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  425.734048][    T9] usb 1-1: USB disconnect, device number 72
[  426.892969][  T795] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  426.903250][T10646] xt_TPROXY: Can be used only with -p tcp or -p udp
[  427.033361][T10360] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  427.049997][  T795] usb 4-1: USB disconnect, device number 57
[  427.065082][T10360] usb 2-1: unit 2 not found!
[  427.172229][T10653] loop5: detected capacity change from 0 to 7
[  427.219211][ T5823]  loop5:
[  427.229238][ T5823] loop5: partition table partially beyond EOD, truncated
[  427.254732][T10653]  loop5:
[  427.264624][T10653] loop5: partition table partially beyond EOD, truncated
[  427.280124][T10360] usb 2-1: USB disconnect, device number 76
[  427.391226][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  427.391245][   T30] audit: type=1326 audit(1776096170.294:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10652 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb499c819 code=0x7ffc0000
[  427.660153][ T8938] udevd[8938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.692438][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  427.786562][   T30] audit: type=1326 audit(1776096170.294:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10652 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb499c819 code=0x7ffc0000
[  427.859996][  T795] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  428.040392][   T29] usb 3-1: USB disconnect, device number 75
[  428.139235][  T795] usb 4-1: Using ep0 maxpacket: 16
[  428.210797][  T795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.230683][  T795] usb 4-1: config 0 has no interfaces?
[  428.252019][  T795] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  428.276542][  T795] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  428.285994][  T795] usb 4-1: Manufacturer: syz
[  428.328581][  T795] usb 4-1: config 0 descriptor??
[  428.898330][   T29] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  428.956657][T10660] netlink: 'syz.3.1084': attribute type 1 has an invalid length.
[  429.527677][T10660] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.609843][   T29] usb 5-1: Using ep0 maxpacket: 16
[  429.682902][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.694748][   T29] usb 5-1: config 0 has no interfaces?
[  429.938742][   T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  429.955007][   T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  430.013057][   T29] usb 5-1: Manufacturer: syz
[  430.084361][   T29] usb 5-1: config 0 descriptor??
[  430.760081][T10685] syzkaller0: entered promiscuous mode
[  430.795604][T10685] syzkaller0: entered allmulticast mode
[  430.834832][T10668] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  431.062242][T10668] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.137678][  T795] usb 4-1: USB disconnect, device number 58
[  431.377835][ T2991] bond0 (unregistering): Released all slaves
[  431.398422][T10693] __nla_validate_parse: 14 callbacks suppressed
[  431.398446][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'.
[  431.426160][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'.
[  431.608061][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.617415][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.631151][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.640472][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.649534][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.658634][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.667939][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  431.677676][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[  432.179986][  T795] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  432.340369][  T795] usb 2-1: Using ep0 maxpacket: 16
[  432.360462][  T795] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  432.379112][T10360] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  432.441817][  T795] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  432.457882][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.496523][  T795] usb 2-1: Product: syz
[  432.511415][   T29] usb 5-1: USB disconnect, device number 71
[  432.527812][  T795] usb 2-1: Manufacturer: syz
[  432.535825][  T795] usb 2-1: SerialNumber: syz
[  432.552334][T10360] usb 4-1: Using ep0 maxpacket: 8
[  432.575302][T10360] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  432.599394][T10360] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  432.630410][T10360] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  432.712163][T10360] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  432.730389][T10360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.754110][T10360] usb 4-1: Product: syz
[  432.758330][T10360] usb 4-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  432.794482][ T2991] bond0 (unregistering): Released all slaves
[  432.864428][T10360] usb 4-1: SerialNumber: syz
[  432.909516][ T5910] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  433.047537][   T30] audit: type=1326 audit(1776096175.914:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.218942][   T30] audit: type=1326 audit(1776096175.914:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.238852][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  433.306211][ T5910] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32
[  433.328426][ T5910] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  433.358575][ T5910] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  433.376486][   T30] audit: type=1326 audit(1776096175.914:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.399705][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.407841][ T5910] usb 3-1: Product: syz
[  433.428486][ T5910] usb 3-1: Manufacturer: syz
[  433.439295][ T5910] usb 3-1: SerialNumber: syz
[  433.450746][   T30] audit: type=1326 audit(1776096175.924:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.502487][   T30] audit: type=1326 audit(1776096175.924:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.550141][   T30] audit: type=1326 audit(1776096175.924:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.585965][   T30] audit: type=1326 audit(1776096175.924:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.612821][T10707] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  433.629217][T10707] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  433.805943][   T30] audit: type=1326 audit(1776096175.924:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.875235][   T30] audit: type=1326 audit(1776096175.924:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  433.982061][   T30] audit: type=1326 audit(1776096175.924:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10708 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  434.591329][  T795] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  434.882668][T10360] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  434.895585][T10360] usb 4-1: unit 2 not found!
[  434.943699][  T795] usb 2-1: USB disconnect, device number 77
[  435.391327][T10360] usb 4-1: USB disconnect, device number 59
[  435.554285][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  435.662341][ T7856] udevd[7856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  435.932853][ T5909] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  436.187189][ T5909] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  436.196117][ T5909] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  436.207044][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  436.235724][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  436.281751][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  436.305115][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  436.344006][ T5909] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  436.358879][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.393581][ T5909] usb 1-1: config 0 descriptor??
[  436.403923][T10734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  436.570139][T10749] binder: BINDER_SET_CONTEXT_MGR already set
[  436.587715][T10749] binder: 10744:10749 ioctl 4018620d 2000000002c0 returned -16
[  436.655946][ T5909] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  436.962042][    C1] usblp0: nonzero read bulk status received: -71
[  436.973401][T10734] usblp0: error -71 reading from printer
[  436.992916][    C0] usblp0: nonzero read bulk status received: -71
[  437.124005][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  437.151234][ T5910] usb 3-1: MIDIStreaming interface descriptor not found
[  437.568125][ T5910] usb 3-1: USB disconnect, device number 76
[  437.876075][ T8938] udevd[8938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.049918][T10764] netlink: 'syz.2.1112': attribute type 4 has an invalid length.
[  438.779169][ T5910] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  439.034175][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  439.056022][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  439.074854][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  439.119037][ T5910] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  439.194303][ T5910] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  439.209914][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.240476][ T5910] usb 4-1: Product: syz
[  439.244666][ T5910] usb 4-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  439.387846][ T5910] usb 4-1: SerialNumber: syz
[  439.396331][ T5909] usb 1-1: USB disconnect, device number 73
[  439.428387][ T5909] usblp0: removed
[  439.437737][T10777] loop2: detected capacity change from 0 to 7
[  439.495754][T10777] Dev loop2: unable to read RDB block 7
[  439.533591][T10777]  loop2: AHDI p1 p2 p3
[  439.569351][T10777] loop2: partition table partially beyond EOD, truncated
[  439.606120][T10777] loop2: p1 start 1818582900 is beyond EOD, truncated
[  439.628028][T10777] loop2: p3 start 335544320 is beyond EOD, truncated
[  439.657454][ T5910] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  439.669304][ T5910] usb 4-1: unit 2 not found!
[  439.686694][T10782] __nla_validate_parse: 100 callbacks suppressed
[  439.686710][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.746056][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.816095][ T5910] usb 4-1: USB disconnect, device number 60
[  439.872106][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.898645][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  439.920783][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.932522][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.972407][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  439.987881][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  440.000727][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  440.010106][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  440.022737][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  440.086400][T10796] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  440.101920][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  440.108289][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.126293][T10796] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  440.199238][ T5910] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  440.352758][ T5910] usb 4-1: not running at top speed; connect to a high speed hub
[  440.362312][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4
[  440.374210][ T5910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  440.384665][ T5910] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 4
[  440.398388][ T5910] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  440.407813][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.416778][ T5910] usb 4-1: Product: 쥲⬃宫읏룩ᘥ빼㓲뮊嚆᣽댞埚鏡獊㠯艽祎᏶⸒萞機翃藾쇷鮚폅ꑣꎊ뽽ត站恩閊틞握璃Ḛ᪃봼擒禝㜶쪾쪀仸绣
[  440.418956][    T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  440.465588][ T5910] usb 4-1: Manufacturer: а
[  440.504938][ T5910] usb 4-1: SerialNumber: syz
[  440.618893][    T9] usb 2-1: Using ep0 maxpacket: 8
[  440.629943][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  440.639789][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.648504][    T9] usb 2-1: Product: syz
[  440.655907][    T9] usb 2-1: Manufacturer: syz
[  440.661049][    T9] usb 2-1: SerialNumber: syz
[  440.672354][    T9] usb 2-1: config 0 descriptor??
[  440.739100][T10360] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  440.892899][T10360] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.911696][    T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  440.948076][   T30] kauditd_printk_skb: 115 callbacks suppressed
[  440.948097][   T30] audit: type=1326 audit(1776096183.834:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  440.996294][T10360] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  441.016893][   T30] audit: type=1326 audit(1776096183.834:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.061146][ T5910] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  441.070736][ T5910] usb 4-1: unit 2 not found!
[  441.071542][T10360] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  441.086994][   T30] audit: type=1326 audit(1776096183.834:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.110978][T10360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.149685][T10360] usb 1-1: Product: syz
[  441.154020][T10360] usb 1-1: Manufacturer: syz
[  441.158628][T10360] usb 1-1: SerialNumber: syz
[  441.186667][   T30] audit: type=1326 audit(1776096183.834:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.220006][   T30] audit: type=1326 audit(1776096183.834:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.254707][ T5909] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  441.444884][T10360] cdc_ncm 1-1:1.0: bind() failure
[  441.486456][T10360] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  441.491375][ T5910] usb 4-1: USB disconnect, device number 61
[  441.527050][T10360] cdc_ncm 1-1:1.1: bind() failure
[  441.551437][   T30] audit: type=1326 audit(1776096183.834:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.617036][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.635491][   T30] audit: type=1326 audit(1776096183.834:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.654260][T10816] loop2: detected capacity change from 0 to 7
[  441.785257][T10360] usb 1-1: USB disconnect, device number 74
[  441.809064][ T5909] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  441.829039][ T5909] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  441.861528][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  441.871035][   T30] audit: type=1326 audit(1776096183.834:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.900216][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  441.926437][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  441.941126][T10816] Dev loop2: unable to read RDB block 7
[  441.946753][T10816]  loop2: AHDI p1 p2 p3
[  441.958652][   T30] audit: type=1326 audit(1776096183.834:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  441.990033][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  442.004656][ T5909] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  442.015647][   T30] audit: type=1326 audit(1776096183.834:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10809 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f136bb9c819 code=0x7ffc0000
[  442.040360][T10816] loop2: partition table partially beyond EOD, truncated
[  442.055252][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.070013][T10816] loop2: p1 start 1818582900 is beyond EOD, truncated
[  442.070888][ T5909] usb 5-1: config 0 descriptor??
[  442.088135][T10816] loop2: p3 start 335544320 is beyond EOD, truncated
[  442.100489][T10814] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  442.417966][ T5909] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  442.430429][    T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  442.466042][    T9] usb 2-1: USB disconnect, device number 78
[  442.619822][    C1] usblp0: nonzero read bulk status received: -71
[  442.626403][T10811] usblp0: error -71 reading from printer
[  442.632656][    C1] usblp0: nonzero read bulk status received: -71
[  442.989595][   T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  443.028576][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.047538][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.152881][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.184633][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  443.207536][   T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  443.224805][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  443.244774][   T24] usb 1-1: SerialNumber: syz
[  443.299403][ T5910] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  443.501063][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  443.501106][ T5910] usb 2-1: Using ep0 maxpacket: 32
[  443.527053][   T24] usb 1-1: 0:2 : does not exist
[  443.537573][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short
[  443.556088][ T5910] usb 2-1: config 1 has an invalid interface number: 255 but max is 2
[  443.764116][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.779950][ T5910] usb 2-1: config 1 has no interface number 2
[  443.786065][ T5910] usb 2-1: config 1 interface 255 has no altsetting 0
[  443.793998][   T24] usb 1-1: USB disconnect, device number 75
[  443.801475][ T5910] usb 2-1: config 1 interface 1 has no altsetting 0
[  443.831468][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40
[  443.843230][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.873393][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  443.896139][ T5910] usb 2-1: Product: syz
[  443.906231][ T5910] usb 2-1: Manufacturer: syz
[  443.916324][ T5910] usb 2-1: SerialNumber: syz
[  443.923609][  T795] usb 5-1: USB disconnect, device number 72
[  443.932128][  T795] usblp0: removed
[  443.940156][    T9] usb 4-1: Using ep0 maxpacket: 8
[  443.949490][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  443.969541][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  443.979415][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  443.995133][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  444.009166][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.114070][    T9] usb 4-1: Product: syz
[  444.118308][    T9] usb 4-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  444.191954][    T9] usb 4-1: SerialNumber: syz
[  444.286393][T10854] loop2: detected capacity change from 0 to 7
[  444.307425][T10854] Dev loop2: unable to read RDB block 7
[  444.328328][T10854]  loop2: AHDI p1 p2 p3
[  444.358729][ T5910] usb 2-1: USB disconnect, device number 79
[  444.367567][T10854] loop2: partition table partially beyond EOD, truncated
[  444.400007][T10854] loop2: p1 start 1818582900 is beyond EOD, truncated
[  444.432063][T10854] loop2: p3 start 335544320 is beyond EOD, truncated
[  444.486240][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.514941][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  444.599767][    T9] usb 4-1: unit 2 not found!
[  445.430381][    T9] usb 4-1: USB disconnect, device number 62
[  445.812314][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  446.008886][T10360] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  446.088906][    T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  446.175769][T10360] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  446.191611][T10883] __nla_validate_parse: 47 callbacks suppressed
[  446.191633][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.207103][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.225054][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.239287][T10360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.252160][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.272552][T10360] usb 2-1: config 0 descriptor??
[  446.290040][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.338111][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.374118][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.391284][    T9] usb 4-1: device descriptor read/all, error -71
[  446.466895][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.516230][T10865] xt_hashlimit: max too large, truncated to 1048576
[  446.532468][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.602857][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.630750][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.639913][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.725269][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  446.725301][   T30] audit: type=1326 audit(1776096189.594:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  446.780805][   T30] audit: type=1326 audit(1776096189.594:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  446.808730][   T30] audit: type=1326 audit(1776096189.594:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  446.919735][T10360] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  446.922656][   T30] audit: type=1326 audit(1776096189.604:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  446.950301][   T30] audit: type=1326 audit(1776096189.604:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  446.956112][T10360] [drm:udl_init] *ERROR* Selecting channel failed
[  446.975361][   T30] audit: type=1326 audit(1776096189.604:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  447.004358][   T30] audit: type=1326 audit(1776096189.604:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  447.031374][   T30] audit: type=1326 audit(1776096189.604:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  447.066471][   T30] audit: type=1326 audit(1776096189.604:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  447.098870][    T9] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  447.099726][   T30] audit: type=1326 audit(1776096189.604:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1983f9c819 code=0x7ffc0000
[  447.234733][T10360] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  447.265483][T10360] [drm] Initialized udl on minor 2
[  447.285107][T10360] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  447.335730][T10360] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  447.388718][ T5812] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  447.508220][ T5812] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  447.529651][T10360] usb 2-1: USB disconnect, device number 80
[  447.549125][    T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  447.575764][    T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  447.605466][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  447.683080][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  447.719897][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  447.736350][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  447.756531][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  447.785225][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.879871][T10902] netlink: 'syz.1.1156': attribute type 15 has an invalid length.
[  448.037491][    T9] usb 4-1: config 0 descriptor??
[  448.073188][T10894] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  448.228915][T10360] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  448.309343][    T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  448.428885][T10360] usb 2-1: Using ep0 maxpacket: 32
[  448.457618][T10360] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  448.492474][T10360] usb 2-1: config 0 has no interface number 0
[  448.502654][    C1] usblp0: nonzero read bulk status received: -71
[  448.519083][T10894] usblp0: error -71 reading from printer
[  448.525207][    C1] usblp0: nonzero read bulk status received: -71
[  448.534057][T10360] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  448.575433][T10360] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  448.591438][T10360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.612009][T10360] usb 2-1: Product: syz
[  448.640402][T10360] usb 2-1: Manufacturer: syz
[  448.654132][T10360] usb 2-1: SerialNumber: syz
[  448.682905][T10360] usb 2-1: config 0 descriptor??
[  448.717376][T10360] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  450.895986][T10360] usb 2-1: qt2_attach - failed to power on unit: -71
[  450.915553][T10360] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  450.983237][T10360] usb 2-1: USB disconnect, device number 81
[  451.377212][ T5910] usb 4-1: USB disconnect, device number 64
[  451.448611][ T5910] usblp0: removed
[  451.475254][T10932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  451.539325][T10360] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  451.717409][T10360] usb 2-1: Using ep0 maxpacket: 8
[  451.736423][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  451.779124][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  451.832969][T10360] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7
[  451.884252][T10360] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  451.908846][T10360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.927889][T10360] usb 2-1: Product: syz
[  451.937537][T10360] usb 2-1: Manufacturer: 鈍댽☘膓퐺奓亟᎖䘻뤍䗌uퟃ텁缉ꞁ⍕茲覑臲鯥갽‶㍸ᗼ₫彏䚝䱭ޯ¸␬怚ᘰ踃딩鮛깧Ҍ⢿烵浭㜎䏎ࡁ稓㚲࿧䋪鏟퓏遽杶渻➦淒ܓ蒮摇歈ꈑ獥䙥㩇儷煚昙ʨ꡿珏蹑䜦脙儮離⪮⏈ᙔ巉죤膮Ჷ⮘프㦥꿲଀⦭
[  452.064236][T10360] usb 2-1: SerialNumber: syz
[  452.151354][  T795] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  452.190665][T10943] __nla_validate_parse: 44 callbacks suppressed
[  452.190687][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.207540][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.257952][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.270415][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.279971][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.289855][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.306614][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.316404][T10360] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  452.323742][T10360] usb 2-1: unit 2 not found!
[  452.329139][   T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  452.340217][  T795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  452.353076][  T795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  452.364161][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.375956][  T795] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  452.385669][  T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  452.393749][  T795] usb 4-1: SerialNumber: syz
[  452.398717][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.416191][T10360] usb 2-1: USB disconnect, device number 82
[  452.433470][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  452.471875][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.492008][ T5910] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  452.500208][   T24] usb 3-1: Using ep0 maxpacket: 16
[  452.511321][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.523839][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  452.547144][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  452.558172][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  452.568313][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  452.590721][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  452.601732][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  452.610508][   T24] usb 3-1: Manufacturer: syz
[  452.635729][  T795] usb 4-1: 0:2 : does not exist
[  452.671503][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  452.680445][ T5910] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config
[  452.699278][   T24] usb 3-1: config 0 descriptor??
[  452.714066][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  452.749372][  T795] usb 4-1: USB disconnect, device number 65
[  452.762033][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40
[  452.780851][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.790563][ T5910] usb 5-1: Product: syz
[  452.820401][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.828952][T10360] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[  452.857303][ T5910] usb 5-1: Manufacturer: syz
[  452.866952][ T5910] usb 5-1: SerialNumber: syz
[  453.001520][T10360] usb 2-1: not running at top speed; connect to a high speed hub
[  453.028358][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4
[  453.057411][T10360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  453.081602][T10360] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 4
[  453.118072][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  453.125443][   T24] rc_core: IR keymap rc-hauppauge not found
[  453.140271][   T24] Registered IR keymap rc-empty
[  453.145504][T10360] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  453.159340][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.166619][T10360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.186949][T10360] usb 2-1: Product: 쥲⬃宫읏룩ᘥ빼㓲뮊嚆᣽댞埚鏡獊㠯艽祎᏶⸒萞機翃藾쇷鮚폅ꑣꎊ뽽ត站恩閊틞握璃Ḛ᪃봼擒禝㜶쪾쪀仸绣
[  453.187363][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.231390][T10360] usb 2-1: Manufacturer: а
[  453.235984][T10360] usb 2-1: SerialNumber: syz
[  453.273647][ T5910] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  453.284568][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  453.303411][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24
[  453.330421][ T5910] usb 5-1: USB disconnect, device number 73
[  453.372832][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.402096][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.417652][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  453.448132][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.478949][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.509460][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.570852][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.589290][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.610079][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.636662][T10938] delete_channel: no stack
[  453.642507][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.668938][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  453.682741][T10360] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  453.703551][T10360] usb 2-1: unit 2 not found!
[  453.704276][   T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  453.720995][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  453.746498][   T24] usb 3-1: USB disconnect, device number 77
[  453.868091][T10360] usb 2-1: USB disconnect, device number 83
[  454.216772][ T7999] udevd[7999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  454.340585][  T795] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  454.478514][T10970] 
[  454.480914][T10970] =====================================================
[  454.487847][T10970] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  454.495304][T10970] syzkaller #0 Tainted: G             L     
[  454.501278][T10970] -----------------------------------------------------
[  454.508200][T10970] syz.2.1178/10970 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  454.515919][T10970] ffff888035888558 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0
[  454.524643][T10970] 
[  454.524643][T10970] and this task is already holding:
[  454.532023][T10970] ffff88807a9d8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  454.541767][T10970] which would create a new lock dependency:
[  454.547658][T10970]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3}
[  454.555743][T10970] 
[  454.555743][T10970] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  454.565182][T10970]  (&dev->event_lock#2){..-.}-{3:3}
[  454.565207][T10970] 
[  454.565207][T10970] ... which became SOFTIRQ-irq-safe at:
[  454.578094][T10970]   lock_acquire+0xf0/0x2e0
[  454.582603][T10970]   _raw_spin_lock_irqsave+0x40/0x60
[  454.587903][T10970]   input_event+0x76/0xe0
[  454.592258][T10970]   xpad360_process_packet+0x1fe/0xdd0
[  454.597723][T10970]   xpad_irq_in+0x1583/0x25e0
[  454.602402][T10970]   __usb_hcd_giveback_urb+0x376/0x540
[  454.607869][T10970]   dummy_timer+0xbbd/0x4650
[  454.612460][T10970]   __hrtimer_run_queues+0x53a/0xcc0
[  454.617756][T10970]   hrtimer_run_softirq+0x182/0x5a0
[  454.622960][T10970]   handle_softirqs+0x22a/0x870
[  454.627817][T10970]   __irq_exit_rcu+0x5f/0x150
[  454.632500][T10970]   irq_exit_rcu+0x9/0x30
[  454.636836][T10970]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  454.642559][T10970]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  454.648629][T10970]   _raw_spin_unlock_irqrestore+0x47/0x80
[  454.654350][T10970]   folios_put_refs+0x71a/0x8d0
[  454.659227][T10970]   shmem_undo_range+0x52c/0x1660
[  454.664297][T10970]   shmem_evict_inode+0x240/0x9e0
[  454.669339][T10970]   evict+0x61e/0xb10
[  454.673346][T10970]   __dentry_kill+0x1a2/0x5e0
[  454.678032][T10970]   finish_dput+0xc9/0x480
[  454.682468][T10970]   __fput+0x691/0xa70
[  454.686556][T10970]   task_work_run+0x1d9/0x270
[  454.691237][T10970]   do_exit+0x70f/0x23c0
[  454.695490][T10970]   do_group_exit+0x21b/0x2d0
[  454.700184][T10970]   get_signal+0x1284/0x1330
[  454.704781][T10970]   arch_do_signal_or_restart+0xbc/0x830
[  454.710416][T10970]   exit_to_user_mode_loop+0x86/0x480
[  454.715795][T10970]   do_syscall_64+0x32d/0xf80
[  454.720482][T10970]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.726473][T10970] 
[  454.726473][T10970] to a SOFTIRQ-irq-unsafe lock:
[  454.733501][T10970]  (tasklist_lock){.+.+}-{3:3}
[  454.733529][T10970] 
[  454.733529][T10970] ... which became SOFTIRQ-irq-unsafe at:
[  454.746164][T10970] ...
[  454.746171][T10970]   lock_acquire+0xf0/0x2e0
[  454.753262][T10970]   _raw_read_lock+0x36/0x50
[  454.757874][T10970]   __do_wait+0xde/0x740
[  454.762116][T10970]   do_wait+0x1e7/0x540
[  454.766273][T10970]   kernel_wait+0xd6/0x1c0
[  454.770689][T10970]   call_usermodehelper_exec_work+0xbe/0x230
[  454.776686][T10970]   process_scheduled_works+0xb6e/0x18c0
[  454.782325][T10970]   worker_thread+0xa53/0xfc0
[  454.787013][T10970]   kthread+0x388/0x470
[  454.791167][T10970]   ret_from_fork+0x51e/0xb90
[  454.795848][T10970]   ret_from_fork_asm+0x1a/0x30
[  454.800711][T10970] 
[  454.800711][T10970] other info that might help us debug this:
[  454.800711][T10970] 
[  454.810936][T10970] Chain exists of:
[  454.810936][T10970]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  454.810936][T10970] 
[  454.824507][T10970]  Possible interrupt unsafe locking scenario:
[  454.824507][T10970] 
[  454.832825][T10970]        CPU0                    CPU1
[  454.838189][T10970]        ----                    ----
[  454.843554][T10970]   lock(tasklist_lock);
[  454.847800][T10970]                                local_irq_disable();
[  454.854554][T10970]                                lock(&dev->event_lock#2);
[  454.861760][T10970]                                lock(&client->buffer_lock);
[  454.869137][T10970]   <Interrupt>
[  454.872589][T10970]     lock(&dev->event_lock#2);
[  454.877451][T10970] 
[  454.877451][T10970]  *** DEADLOCK ***
[  454.877451][T10970] 
[  454.885594][T10970] 7 locks held by syz.2.1178/10970:
[  454.890789][T10970]  #0: ffff88802bcbc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[  454.899937][T10970]  #1: ffff88801f3a0230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  454.910045][T10970]  #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  454.919713][T10970]  #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  454.929315][T10970]  #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  454.938467][T10970]  #5: ffff88807a9d8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  454.948663][T10970]  #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  454.957731][T10970] 
[  454.957731][T10970] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  454.968137][T10970]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  454.973796][T10970]     IN-SOFTIRQ-W at:
[  454.977865][T10970]                       lock_acquire+0xf0/0x2e0
[  454.984111][T10970]                       _raw_spin_lock_irqsave+0x40/0x60
[  454.991143][T10970]                       input_event+0x76/0xe0
[  454.997215][T10970]                       xpad360_process_packet+0x1fe/0xdd0
[  455.004423][T10970]                       xpad_irq_in+0x1583/0x25e0
[  455.010846][T10970]                       __usb_hcd_giveback_urb+0x376/0x540
[  455.018072][T10970]                       dummy_timer+0xbbd/0x4650
[  455.024397][T10970]                       __hrtimer_run_queues+0x53a/0xcc0
[  455.031429][T10970]                       hrtimer_run_softirq+0x182/0x5a0
[  455.038377][T10970]                       handle_softirqs+0x22a/0x870
[  455.044970][T10970]                       __irq_exit_rcu+0x5f/0x150
[  455.051388][T10970]                       irq_exit_rcu+0x9/0x30
[  455.057458][T10970]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[  455.064920][T10970]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  455.072730][T10970]                       _raw_spin_unlock_irqrestore+0x47/0x80
[  455.080189][T10970]                       folios_put_refs+0x71a/0x8d0
[  455.086784][T10970]                       shmem_undo_range+0x52c/0x1660
[  455.093554][T10970]                       shmem_evict_inode+0x240/0x9e0
[  455.100322][T10970]                       evict+0x61e/0xb10
[  455.106047][T10970]                       __dentry_kill+0x1a2/0x5e0
[  455.112468][T10970]                       finish_dput+0xc9/0x480
[  455.118636][T10970]                       __fput+0x691/0xa70
[  455.124449][T10970]                       task_work_run+0x1d9/0x270
[  455.130870][T10970]                       do_exit+0x70f/0x23c0
[  455.136847][T10970]                       do_group_exit+0x21b/0x2d0
[  455.143264][T10970]                       get_signal+0x1284/0x1330
[  455.149593][T10970]                       arch_do_signal_or_restart+0xbc/0x830
[  455.156966][T10970]                       exit_to_user_mode_loop+0x86/0x480
[  455.164080][T10970]                       do_syscall_64+0x32d/0xf80
[  455.170508][T10970]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.178227][T10970]     INITIAL USE at:
[  455.182212][T10970]                      lock_acquire+0xf0/0x2e0
[  455.188371][T10970]                      _raw_spin_lock_irqsave+0x40/0x60
[  455.195315][T10970]                      input_inject_event+0xa5/0x340
[  455.202000][T10970]                      kbd_led_trigger_activate+0xbc/0x100
[  455.209203][T10970]                      led_trigger_set+0x535/0x960
[  455.215717][T10970]                      led_trigger_set_default+0x260/0x2a0
[  455.222914][T10970]                      led_classdev_register_ext+0x787/0x9c0
[  455.230285][T10970]                      input_leds_connect+0x517/0x790
[  455.237057][T10970]                      input_register_device+0xd00/0x1160
[  455.244191][T10970]                      atkbd_connect+0x731/0xa50
[  455.250522][T10970]                      serio_driver_probe+0x82/0xd0
[  455.257111][T10970]                      really_probe+0x267/0xaf0
[  455.263361][T10970]                      __driver_probe_device+0x18c/0x320
[  455.270391][T10970]                      driver_probe_device+0x4f/0x240
[  455.277160][T10970]                      __driver_attach+0x34c/0x640
[  455.283668][T10970]                      bus_for_each_dev+0x23b/0x2c0
[  455.290264][T10970]                      serio_handle_event+0x20a/0xdd0
[  455.297031][T10970]                      process_scheduled_works+0xb6e/0x18c0
[  455.304321][T10970]                      worker_thread+0xa53/0xfc0
[  455.310656][T10970]                      kthread+0x388/0x470
[  455.316460][T10970]                      ret_from_fork+0x51e/0xb90
[  455.322799][T10970]                      ret_from_fork_asm+0x1a/0x30
[  455.329330][T10970]   }
[  455.331917][T10970]   ... key      at: [<ffffffff9a617c60>] input_allocate_device.__key.7+0x0/0x20
[  455.341037][T10970] -> (&client->buffer_lock){....}-{3:3} {
[  455.346775][T10970]    INITIAL USE at:
[  455.350665][T10970]                    lock_acquire+0xf0/0x2e0
[  455.356648][T10970]                    _raw_spin_lock_irq+0x3d/0x50
[  455.363069][T10970]                    evdev_read+0x37d/0xcb0
[  455.368979][T10970]                    vfs_read+0x20c/0xa70
[  455.374704][T10970]                    ksys_read+0x150/0x270
[  455.380509][T10970]                    do_syscall_64+0x14d/0xf80
[  455.386669][T10970]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.394126][T10970]  }
[  455.396624][T10970]  ... key      at: [<ffffffff9a617f00>] evdev_open.__key.27+0x0/0x20
[  455.404786][T10970]  ... acquired at:
[  455.408586][T10970]    _raw_spin_lock+0x2e/0x40
[  455.413274][T10970]    evdev_pass_values+0xb9/0xbd0
[  455.418297][T10970]    evdev_events+0x1e6/0x340
[  455.422972][T10970]    input_pass_values+0x288/0x890
[  455.428089][T10970]    input_event_dispose+0x330/0x6b0
[  455.433386][T10970]    input_inject_event+0x1dd/0x340
[  455.438590][T10970]    evdev_write+0x325/0x4c0
[  455.443183][T10970]    vfs_write+0x29a/0xb90
[  455.447603][T10970]    ksys_write+0x150/0x270
[  455.452106][T10970]    do_syscall_64+0x14d/0xf80
[  455.456874][T10970]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.462948][T10970] 
[  455.465275][T10970] 
[  455.465275][T10970] the dependencies between the lock to be acquired
[  455.465284][T10970]  and SOFTIRQ-irq-unsafe lock:
[  455.478818][T10970]   -> (tasklist_lock){.+.+}-{3:3} {
[  455.484142][T10970]      HARDIRQ-ON-R at:
[  455.488301][T10970]                         lock_acquire+0xf0/0x2e0
[  455.494723][T10970]                         _raw_read_lock+0x36/0x50
[  455.501247][T10970]                         __do_wait+0xde/0x740
[  455.507435][T10970]                         do_wait+0x1e7/0x540
[  455.513530][T10970]                         kernel_wait+0xd6/0x1c0
[  455.519860][T10970]                         call_usermodehelper_exec_work+0xbe/0x230
[  455.527760][T10970]                         process_scheduled_works+0xb6e/0x18c0
[  455.535311][T10970]                         worker_thread+0xa53/0xfc0
[  455.541902][T10970]                         kthread+0x388/0x470
[  455.547967][T10970]                         ret_from_fork+0x51e/0xb90
[  455.554563][T10970]                         ret_from_fork_asm+0x1a/0x30
[  455.561335][T10970]      SOFTIRQ-ON-R at:
[  455.565495][T10970]                         lock_acquire+0xf0/0x2e0
[  455.571918][T10970]                         _raw_read_lock+0x36/0x50
[  455.578427][T10970]                         __do_wait+0xde/0x740
[  455.584582][T10970]                         do_wait+0x1e7/0x540
[  455.590652][T10970]                         kernel_wait+0xd6/0x1c0
[  455.596980][T10970]                         call_usermodehelper_exec_work+0xbe/0x230
[  455.604872][T10970]                         process_scheduled_works+0xb6e/0x18c0
[  455.612427][T10970]                         worker_thread+0xa53/0xfc0
[  455.619033][T10970]                         kthread+0x388/0x470
[  455.625099][T10970]                         ret_from_fork+0x51e/0xb90
[  455.631706][T10970]                         ret_from_fork_asm+0x1a/0x30
[  455.638500][T10970]      INITIAL USE at:
[  455.642586][T10970]                        lock_acquire+0xf0/0x2e0
[  455.648925][T10970]                        _raw_write_lock_irq+0x3d/0x50
[  455.655780][T10970]                        copy_process+0x247a/0x3cd0
[  455.662378][T10970]                        kernel_clone+0x248/0x8e0
[  455.668806][T10970]                        user_mode_thread+0x110/0x180
[  455.675585][T10970]                        rest_init+0x23/0x300
[  455.681677][T10970]                        start_kernel+0x385/0x3d0
[  455.688102][T10970]                        x86_64_start_reservations+0x24/0x30
[  455.695509][T10970]                        x86_64_start_kernel+0x143/0x1c0
[  455.702560][T10970]                        common_startup_64+0x13e/0x147
[  455.709420][T10970]      INITIAL READ USE at:
[  455.713925][T10970]                             lock_acquire+0xf0/0x2e0
[  455.720689][T10970]                             _raw_read_lock+0x36/0x50
[  455.727560][T10970]                             __do_wait+0xde/0x740
[  455.734066][T10970]                             do_wait+0x1e7/0x540
[  455.740481][T10970]                             kernel_wait+0xd6/0x1c0
[  455.747158][T10970]                             call_usermodehelper_exec_work+0xbe/0x230
[  455.755406][T10970]                             process_scheduled_works+0xb6e/0x18c0
[  455.763308][T10970]                             worker_thread+0xa53/0xfc0
[  455.770259][T10970]                             kthread+0x388/0x470
[  455.776671][T10970]                             ret_from_fork+0x51e/0xb90
[  455.783615][T10970]                             ret_from_fork_asm+0x1a/0x30
[  455.790737][T10970]    }
[  455.793416][T10970]    ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[  455.801321][T10970]    ... acquired at:
[  455.805300][T10970]    _raw_read_lock+0x36/0x50
[  455.809983][T10970]    send_sigio+0x101/0x370
[  455.814492][T10970]    dnotify_handle_event+0x169/0x440
[  455.819868][T10970]    fsnotify+0x1831/0x1ae0
[  455.824375][T10970]    path_openat+0x15c2/0x3860
[  455.829144][T10970]    do_file_open+0x23e/0x4a0
[  455.833829][T10970]    do_sys_openat2+0x113/0x200
[  455.838686][T10970]    __x64_sys_open+0x11e/0x150
[  455.843546][T10970]    do_syscall_64+0x14d/0xf80
[  455.848319][T10970]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.854387][T10970] 
[  455.856713][T10970]  -> (&f_owner->lock){....}-{3:3} {
[  455.862029][T10970]     INITIAL USE at:
[  455.866009][T10970]                      lock_acquire+0xf0/0x2e0
[  455.872172][T10970]                      _raw_write_lock_irq+0x3d/0x50
[  455.878853][T10970]                      __f_setown+0x67/0x370
[  455.884844][T10970]                      fcntl_dirnotify+0x3f9/0x6a0
[  455.891350][T10970]                      do_fcntl+0x77e/0x1a20
[  455.897329][T10970]                      __se_sys_fcntl+0xc8/0x150
[  455.903659][T10970]                      do_syscall_64+0x14d/0xf80
[  455.909991][T10970]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.917620][T10970]     INITIAL READ USE at:
[  455.922032][T10970]                           lock_acquire+0xf0/0x2e0
[  455.928626][T10970]                           _raw_read_lock_irqsave+0x48/0x60
[  455.935996][T10970]                           send_sigio+0x38/0x370
[  455.942420][T10970]                           dnotify_handle_event+0x169/0x440
[  455.949803][T10970]                           fsnotify+0x1831/0x1ae0
[  455.956326][T10970]                           path_openat+0x15c2/0x3860
[  455.963101][T10970]                           do_file_open+0x23e/0x4a0
[  455.969788][T10970]                           do_sys_openat2+0x113/0x200
[  455.976648][T10970]                           __x64_sys_open+0x11e/0x150
[  455.983503][T10970]                           do_syscall_64+0x14d/0xf80
[  455.990274][T10970]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.998339][T10970]   }
[  456.000929][T10970]   ... key      at: [<ffffffff9a2f86e0>] file_f_owner_allocate.__key+0x0/0x20
[  456.009888][T10970]   ... acquired at:
[  456.013777][T10970]    _raw_read_lock_irqsave+0x48/0x60
[  456.019154][T10970]    send_sigio+0x38/0x370
[  456.023576][T10970]    kill_fasync+0x24d/0x4d0
[  456.028166][T10970]    sock_wake_async+0x137/0x160
[  456.033102][T10970]    sk_wake_async+0x184/0x280
[  456.037872][T10970]    unix_release_sock+0x74f/0xc80
[  456.042984][T10970]    unix_release+0x92/0xd0
[  456.047496][T10970]    sock_close+0xc3/0x240
[  456.051918][T10970]    __fput+0x44f/0xa70
[  456.056090][T10970]    task_work_run+0x1d9/0x270
[  456.060869][T10970]    do_exit+0x70f/0x23c0
[  456.065230][T10970]    do_group_exit+0x21b/0x2d0
[  456.070021][T10970]    get_signal+0x1284/0x1330
[  456.074710][T10970]    arch_do_signal_or_restart+0xbc/0x830
[  456.080440][T10970]    exit_to_user_mode_loop+0x86/0x480
[  456.085907][T10970]    do_syscall_64+0x32d/0xf80
[  456.090686][T10970]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.096761][T10970] 
[  456.099084][T10970] -> (&new->fa_lock){...-}-{3:3} {
[  456.104227][T10970]    IN-SOFTIRQ-R at:
[  456.108206][T10970]                     lock_acquire+0xf0/0x2e0
[  456.114282][T10970]                     _raw_read_lock_irqsave+0x48/0x60
[  456.121142][T10970]                     kill_fasync+0x199/0x4d0
[  456.127213][T10970]                     sock_wake_async+0x137/0x160
[  456.133632][T10970]                     sk_wake_async+0x189/0x280
[  456.139877][T10970]                     tcp_rcv_state_process+0x1e6a/0x4810
[  456.146994][T10970]                     tcp_v4_do_rcv+0x6bb/0x1430
[  456.153324][T10970]                     tcp_v4_rcv+0x2825/0x31f0
[  456.159480][T10970]                     ip_protocol_deliver_rcu+0x221/0x440
[  456.166599][T10970]                     ip_local_deliver_finish+0x3bb/0x6f0
[  456.173710][T10970]                     NF_HOOK+0x336/0x3c0
[  456.179429][T10970]                     NF_HOOK+0x336/0x3c0
[  456.185148][T10970]                     process_backlog+0xaa3/0x1950
[  456.191655][T10970]                     __napi_poll+0xae/0x340
[  456.197649][T10970]                     net_rx_action+0x627/0xf70
[  456.203914][T10970]                     handle_softirqs+0x22a/0x870
[  456.210361][T10970]                     __irq_exit_rcu+0x5f/0x150
[  456.216635][T10970]                     irq_exit_rcu+0x9/0x30
[  456.222540][T10970]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[  456.229836][T10970]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  456.237477][T10970]                     lock_acquire+0x20b/0x2e0
[  456.243639][T10970]                     folio_try_get+0x38/0x340
[  456.249799][T10970]                     next_uptodate_folio+0xcb/0x5d0
[  456.256505][T10970]                     filemap_map_pages+0x155a/0x2130
[  456.263271][T10970]                     do_pte_missing+0x211a/0x3490
[  456.269777][T10970]                     handle_mm_fault+0x1bec/0x3310
[  456.276375][T10970]                     __get_user_pages+0x165b/0x29d0
[  456.283060][T10970]                     populate_vma_page_range+0x2be/0x3c0
[  456.290180][T10970]                     __mm_populate+0x25f/0x390
[  456.296426][T10970]                     vm_mmap_pgoff+0x3aa/0x4f0
[  456.302675][T10970]                     do_syscall_64+0x14d/0xf80
[  456.308926][T10970]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.316475][T10970]    INITIAL USE at:
[  456.320376][T10970]                    lock_acquire+0xf0/0x2e0
[  456.326365][T10970]                    _raw_write_lock_irq+0x3d/0x50
[  456.332869][T10970]                    fasync_remove_entry+0xf1/0x1c0
[  456.339465][T10970]                    lease_modify+0x4f7/0x6c0
[  456.345539][T10970]                    locks_remove_file+0x5f0/0xf70
[  456.352038][T10970]                    __fput+0x3ae/0xa70
[  456.357591][T10970]                    task_work_run+0x1d9/0x270
[  456.363744][T10970]                    exit_to_user_mode_loop+0xed/0x480
[  456.370597][T10970]                    do_syscall_64+0x32d/0xf80
[  456.376759][T10970]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.384214][T10970]    INITIAL READ USE at:
[  456.388546][T10970]                         lock_acquire+0xf0/0x2e0
[  456.394966][T10970]                         _raw_read_lock_irqsave+0x48/0x60
[  456.402172][T10970]                         kill_fasync+0x199/0x4d0
[  456.408592][T10970]                         sock_wake_async+0x137/0x160
[  456.415354][T10970]                         sock_def_error_report+0x332/0x390
[  456.422644][T10970]                         sk_error_report+0x48/0x2b0
[  456.429321][T10970]                         unix_dgram_connect+0x96b/0xc20
[  456.436345][T10970]                         __sys_connect+0x312/0x450
[  456.442934][T10970]                         __x64_sys_connect+0x7a/0x90
[  456.449700][T10970]                         do_syscall_64+0x14d/0xf80
[  456.456294][T10970]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.464183][T10970]  }
[  456.466683][T10970]  ... key      at: [<ffffffff9a2f8700>] fasync_insert_entry.__key+0x0/0x20
[  456.475367][T10970]  ... acquired at:
[  456.479167][T10970]    _raw_read_lock_irqsave+0x48/0x60
[  456.484551][T10970]    kill_fasync+0x199/0x4d0
[  456.489150][T10970]    evdev_pass_values+0x627/0xbd0
[  456.494270][T10970]    evdev_events+0x1e6/0x340
[  456.498949][T10970]    input_pass_values+0x288/0x890
[  456.504063][T10970]    input_event_dispose+0x330/0x6b0
[  456.509357][T10970]    input_inject_event+0x1dd/0x340
[  456.514562][T10970]    evdev_write+0x325/0x4c0
[  456.519155][T10970]    vfs_write+0x29a/0xb90
[  456.523580][T10970]    ksys_write+0x150/0x270
[  456.528085][T10970]    do_syscall_64+0x14d/0xf80
[  456.532856][T10970]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.538927][T10970] 
[  456.541252][T10970] 
[  456.541252][T10970] stack backtrace:
[  456.547153][T10970] CPU: 0 UID: 0 PID: 10970 Comm: syz.2.1178 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  456.547175][T10970] Tainted: [L]=SOFTLOCKUP
[  456.547181][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  456.547192][T10970] Call Trace:
[  456.547198][T10970]  <TASK>
[  456.547205][T10970]  dump_stack_lvl+0xe8/0x150
[  456.547228][T10970]  __lock_acquire+0x2a94/0x2cf0
[  456.547256][T10970]  lock_acquire+0xf0/0x2e0
[  456.547275][T10970]  ? kill_fasync+0x199/0x4d0
[  456.547295][T10970]  _raw_read_lock_irqsave+0x48/0x60
[  456.547314][T10970]  ? kill_fasync+0x199/0x4d0
[  456.547330][T10970]  kill_fasync+0x199/0x4d0
[  456.547346][T10970]  ? kill_fasync+0x53/0x4d0
[  456.547363][T10970]  evdev_pass_values+0x627/0xbd0
[  456.547381][T10970]  ? evdev_pass_values+0x5b1/0xbd0
[  456.547400][T10970]  evdev_events+0x1e6/0x340
[  456.547415][T10970]  ? evdev_events+0x79/0x340
[  456.547430][T10970]  ? input_pass_values+0x8d/0x890
[  456.547444][T10970]  input_pass_values+0x288/0x890
[  456.547460][T10970]  ? input_handle_event+0x70c/0xf30
[  456.547482][T10970]  input_event_dispose+0x330/0x6b0
[  456.547504][T10970]  input_inject_event+0x1dd/0x340
[  456.547525][T10970]  ? input_inject_event+0xb6/0x340
[  456.547547][T10970]  evdev_write+0x325/0x4c0
[  456.547564][T10970]  ? __pfx_evdev_write+0x10/0x10
[  456.547581][T10970]  ? bpf_lsm_file_permission+0x9/0x20
[  456.547601][T10970]  ? security_file_permission+0x75/0x260
[  456.547623][T10970]  ? rw_verify_area+0x255/0x4d0
[  456.547639][T10970]  ? __pfx_evdev_write+0x10/0x10
[  456.547655][T10970]  vfs_write+0x29a/0xb90
[  456.547673][T10970]  ? __pfx_vfs_write+0x10/0x10
[  456.547690][T10970]  ? __fget_files+0x2a/0x420
[  456.547705][T10970]  ? __fget_files+0x2a/0x420
[  456.547720][T10970]  ? __fget_files+0x3a0/0x420
[  456.547734][T10970]  ? __fget_files+0x2a/0x420
[  456.547749][T10970]  ksys_write+0x150/0x270
[  456.547767][T10970]  ? __pfx_ksys_write+0x10/0x10
[  456.547786][T10970]  do_syscall_64+0x14d/0xf80
[  456.547807][T10970]  ? trace_irq_disable+0x3b/0x150
[  456.547820][T10970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.547836][T10970]  ? clear_bhb_loop+0x40/0x90
[  456.547853][T10970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.547869][T10970] RIP: 0033:0x7fa14af9c819
[  456.547883][T10970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.547898][T10970] RSP: 002b:00007fa14be28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  456.547914][T10970] RAX: ffffffffffffffda RBX: 00007fa14b215fa0 RCX: 00007fa14af9c819
[  456.547926][T10970] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000007
[  456.547936][T10970] RBP: 00007fa14b032c91 R08: 0000000000000000 R09: 0000000000000000
[  456.547947][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.547956][T10970] R13: 00007fa14b216038 R14: 00007fa14b215fa0 R15: 00007fa14b33fa48
[  456.547973][T10970]  </TASK>
[  457.088824][  T795] usb 4-1: Using ep0 maxpacket: 16
[  457.612022][  T795] usb 4-1: device descriptor read/all, error -71