last executing test programs:

15.78020199s ago: executing program 0 (id=1229):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

15.056557681s ago: executing program 4 (id=1230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r11 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4)

13.387087507s ago: executing program 3 (id=1234):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x121800, 0x0)
r1 = userfaultfd(0x80001)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x3, 0x1, 0x4, 0x1a, "518aba4d000000000000000000000000002000"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect(0x3, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000366345940d112c10e23290102030109024600015109f0030904"], 0x0)

12.106515929s ago: executing program 4 (id=1235):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff10000040"])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x61659570, 0x22, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x10, 0x8000, 0x4, 0xfffff94c}})
statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800)
ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xe2})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300))
setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8", 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xcc, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x1ff}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x44880)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f00000007c0)={'batadv_slave_1\x00', {0x2, 0x0, @empty}})

10.98867714s ago: executing program 0 (id=1236):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
dup3(r3, r0, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

10.193706051s ago: executing program 2 (id=1238):
creat(0x0, 0xd931d3864d39ddd8)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd)
syz_open_procfs(0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r3, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
keyctl$session_to_parent(0x12)

9.900677684s ago: executing program 4 (id=1239):
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1d, 0x6, 0x558, 0x0, 0x280, 0x368, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0)

9.401329249s ago: executing program 3 (id=1240):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r2, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)

8.661179635s ago: executing program 2 (id=1241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, 0xffffffffffffffff, 0xdd0bb000)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {<r1=>0xffffffffffffffff}, {0xee01}, 0xe, 0x25f})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000420000004000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008500"/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x10001, <r4=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r4, 0x4)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r6 = dup2(r5, 0xffffffffffffffff)
read$FUSE(r6, &(0x7f00000028c0)={0x2020}, 0x2020)
r7 = socket(0x10, 0x803, 0x0)
r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a45321, &(0x7f0000000080)={{0x80}, 'port1\x00'})
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x400000000004)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd14", 0x7c}, {&(0x7f0000001480)="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", 0xde5}], 0x2)
syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800)

8.363504658s ago: executing program 0 (id=1243):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
dup3(r1, r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040040)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x1000, r8}, 0x38)
syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

7.47811384s ago: executing program 1 (id=1244):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
kcmp(0xffffffffffffffff, r2, 0x1, r1, r1)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblcr\x00', 0x0, 0x2, 0x6e}, 0x2c)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x100000cd, 0x12d5f, 0x3}}, 0x44)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x0, 0x1, 0x2, 0x2}}, 0x2e)
sendmmsg$sock(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000)

7.316967418s ago: executing program 1 (id=1245):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x20000080)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e0000001"], 0x38}}, 0x0)

7.152698983s ago: executing program 3 (id=1246):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000001140)={0x80, 0x1})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893)
getpgid(0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1ff8, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000140)={0x20, 0x17, 0x3, "d659f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
r4 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000})
io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)

6.712625085s ago: executing program 2 (id=1247):
io_uring_setup(0x1694, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000004580), 0x654, 0x0)
futex(&(0x7f000000cffc)=0xf5000000, 0x4, 0x801, 0x0, &(0x7f0000000040)=0xfffffffd, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r4, 0x0, 0x400d0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0x1}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

6.678384778s ago: executing program 1 (id=1248):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, 0x0, 0x4000080)
r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17})
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000000)={0x0, 0x0})
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

6.468040514s ago: executing program 4 (id=1249):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x34}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000000280))
openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000400)={0x0, 0x3, 0x41d}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)

6.111322062s ago: executing program 3 (id=1250):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000006c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x2d4}}, 0x404c000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x21, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x23456})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180))
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)={0x25, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}]}]}, 0x2c}}, 0x81)

5.916563037s ago: executing program 4 (id=1251):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x801c581f, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x200d, 0xfff, 0x7, {0x4, 0x640}})
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = gettid()
syz_open_procfs(r3, &(0x7f0000000140)='uid_map\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
r5 = add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)

5.524877483s ago: executing program 2 (id=1252):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000bf0f0000ff01000008000000", @ANYRES32, @ANYBLOB="00000085ba"], 0x50)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9", 0x14}], 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61b21, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8d5}, 0x40080c0)
r6 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000fe5000/0x3000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x3000})
close_range(r4, 0xffffffffffffffff, 0x0)

5.301289768s ago: executing program 3 (id=1253):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
dup3(r3, r0, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.388616357s ago: executing program 0 (id=1254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r4)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r7, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8", 0x3a, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x408d4)

4.388163291s ago: executing program 2 (id=1255):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket(0x21, 0x80005, 0xb2d3)
getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x191, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17f, 0x1, 0x1, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x80, {{0xb, 0x24, 0x6, 0x0, 0x0, "4ac28aa465bf"}, {0x5, 0x24, 0x0, 0x2a5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x3, 0x7}, [@mdlm_detail={0x91, 0x24, 0x13, 0xa, "44f236187698290a0ea752d576c39230311e87f583cf9625b689dd65df30d151e39493e0cc477c635cf75d8a9899d69686a0bce50e51d122bb12b6c4c1b448d6b5e6da1089fc43612deb0422eca66272a92d38f31bb509b449f72fc931d9f1315d2c1744353087fbb9c64723e37d106e9135eeb567e8c1ec0b8519a90a36d64a9db4a46b8fdb9c9b4438f42104"}, @obex={0x5, 0x24, 0x15, 0xa24}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x10}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x7}, @mdlm_detail={0x90, 0x24, 0x13, 0x6, "a9f27dcf2f7557d6ecc447e8955e20f444ca474dfbda3c2411d296027af07c09899d6e29513a6c843db23dd285f1c3921628abe036c698654e3c13fdfb4b0e774e39cca6e16bfe54323f37029ed15e4b90dc0d7d6717b6dc318a45fc793f4cef3044b778444a514fb6bcf869f85041c651705cc2a707852c1bcb552387684c4a28a94f3cc4b65d62332233e7"}, @mbim={0xc, 0x24, 0x1b, 0xc060, 0x6, 0x98, 0xcb, 0x5, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x268, 0x6, 0x40, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2c, 0x2, 0xff}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x80, 0x1, 0x40, 0x90}, 0x1c, &(0x7f0000000140)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x1, 0x8001}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x3, 0xff00, 0xa, [0x1013f00]}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140c}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "f127caeb1e5d1e6d77773582259ea4d7a187791f3df1c39120a4c40161ca79b79a16bd80c2e251b35ee3168cd425c6536505ece058e58220dc465ca35cd6f79773730e30c4edef092c11f8aa2a685469d87b5f65de6d661694f7ca9ba4c8cdb9da90a8b2e277a04b7bb9f56c2dcf9cc294daf67f7ad9e1c1"}}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = dup(r3)
ftruncate(0xffffffffffffffff, 0xc17a)
prlimit64(0x0, 0xe, 0x0, 0x0)
getdents(r4, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x80010, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

4.179112476s ago: executing program 1 (id=1256):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1000}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getpid()
r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

4.092000626s ago: executing program 4 (id=1257):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x5, 0x3f, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x5, 0x70083)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

2.927674666s ago: executing program 1 (id=1258):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0)
listen(r2, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000", 0x42}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x1fb081, 0x150)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006)
r5 = dup(0xffffffffffffffff)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x80, 0x1, 0xfffffffc, 0x5, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x66, 0x0, 0xd, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x7, 0x66, [@empty]}, @ssrr={0x89, 0xf, 0x15, [@remote, @loopback, @private=0x8]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x9d}, @lsrr={0x83, 0x7, 0x13, [@private=0xa010102]}]}}}}})

2.645675285s ago: executing program 3 (id=1259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r11 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4)

984.74217ms ago: executing program 1 (id=1260):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00')
r1 = userfaultfd(0x80801)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(r4, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020)

184.904212ms ago: executing program 0 (id=1261):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

84.51627ms ago: executing program 2 (id=1262):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0882, 0x0)
syz_open_dev$vim2m(0x0, 0xd, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf80, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e0, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfb6)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r4 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1})
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040))
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x880, &(0x7f0000000140)={0x0, 0xbee2, 0x0, 0x2, 0x3fdffffc}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r5, 0x7323, 0x0, 0x5, 0x0, 0x0)

0s ago: executing program 0 (id=1263):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x80)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='\xbd[@]*,[\x00', &(0x7f0000000040)="62ab03dacc6db4", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001)
r8 = getpgid(0x0)
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8})
fcntl$setsig(r7, 0xa, 0x1c)
sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES64=r2, @ANYBLOB="000000000000000000000000000000000000000000110000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac1414bb08000100", @ANYRES32=r3, @ANYBLOB="080004"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd2c, 0x25dfdc00, {0xa, 0x0, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x2, 0x0, 0x24008800}, 0x10)

kernel console output (not intermixed with test programs):

 has invalid maxpacket 59391, setting to 1024
[  419.603298][ T5956] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  419.612954][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.628410][ T9010] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  419.772959][ T5938] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  419.895310][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  419.925352][ T5938] usb 5-1: Using ep0 maxpacket: 16
[  419.932821][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.954384][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.976161][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  419.999545][ T5938] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  420.018936][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.046375][ T5938] usb 5-1: config 0 descriptor??
[  420.055341][    T9] usb 3-1: Using ep0 maxpacket: 8
[  420.072385][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.091325][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.111604][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  420.131917][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.152235][    T9] usb 3-1: config 0 descriptor??
[  420.448113][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'.
[  420.480941][ T5938] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  420.488493][ T5938] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  420.496121][ T5938] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  420.513137][ T5938] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  420.525130][ T5938] microsoft 0003:045E:07DA.000B: no inputs found
[  420.531648][ T5938] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  420.679861][ T5956] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  420.699070][ T5956] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input21
[  420.757906][ T5956] usb 2-1: USB disconnect, device number 36
[  420.763943][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  420.769320][ T5938] usb 5-1: USB disconnect, device number 31
[  421.186799][ T9046] netlink: 27 bytes leftover after parsing attributes in process `syz.0.639'.
[  421.472033][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  421.488662][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  421.625276][    T9] usb 3-1: USB disconnect, device number 33
[  421.715441][   T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  421.958534][   T10] usb 1-1: Using ep0 maxpacket: 16
[  422.075975][    T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  422.295393][    T9] usb 3-1: Using ep0 maxpacket: 8
[  422.321340][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  422.368323][    T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  422.377852][    T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  422.387116][    T9] usb 3-1: Product: syz
[  422.409925][    T9] usb 3-1: Manufacturer: syz
[  422.422385][    T9] usb 3-1: SerialNumber: syz
[  422.609566][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'.
[  422.695857][    T9] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[  422.811789][    T9] usb 3-1: Handspring Visor / Palm OS: port 79, is for unknown use
[  422.869578][    T9] usb 3-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  422.930197][    T9] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  422.985112][    T9] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  423.051464][    T9] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  423.147085][    T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  423.302999][    T9] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  423.444631][    T9] usb 3-1: USB disconnect, device number 34
[  423.525512][ T5956] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  423.540504][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  423.617147][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  423.617166][   T30] audit: type=1800 audit(1757466772.474:81): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.654" name="file2" dev="tmpfs" ino=731 res=0 errno=0
[  423.656049][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  423.705060][    T9] visor 3-1:1.0: device disconnected
[  423.736384][ T5956] usb 4-1: Using ep0 maxpacket: 8
[  423.751904][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  423.779237][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  423.823879][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  423.927346][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  423.977946][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  424.036159][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  424.053947][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  424.091489][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  424.121221][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  424.152162][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  424.192421][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  424.227738][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  424.255159][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  424.284577][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  424.297913][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  424.316134][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  424.357136][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'.
[  424.361330][ T5956] usb 4-1: string descriptor 0 read error: -22
[  424.373375][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  424.384660][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.475524][    T9] usb 2-1: Using ep0 maxpacket: 16
[  424.481490][ T5956] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  424.484830][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  424.504609][    T9] usb 2-1: config 9 has an invalid interface number: 48 but max is 0
[  424.514011][    T9] usb 2-1: config 9 has no interface number 0
[  424.523523][    T9] usb 2-1: config 9 interface 48 has no altsetting 0
[  424.551974][    T9] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  424.561774][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.572197][    T9] usb 2-1: Product: syz
[  424.583112][    T9] usb 2-1: Manufacturer: syz
[  424.590946][    T9] usb 2-1: SerialNumber: syz
[  424.847047][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  424.857721][    T9] gspca_vc032x: reg_w err -71
[  424.862550][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.866254][ T5952] usb 4-1: USB disconnect, device number 30
[  424.870758][ T9110] usb 4-1: Couldn't submit interrupt_out_urb -19
[  424.884681][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.890563][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.896871][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.905355][ T5956] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  424.912363][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.918961][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.925690][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.938677][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.952526][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.964606][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.970714][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.976761][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.982106][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.988408][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  424.993878][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  425.000159][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  425.005952][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  425.011655][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  425.017544][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  425.023167][    T9] gspca_vc032x: Unknown sensor...
[  425.030289][    T9] vc032x 2-1:9.48: probe with driver vc032x failed with error -22
[  425.042491][    T9] usb 2-1: USB disconnect, device number 37
[  425.078252][ T5956] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  425.121591][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  425.138826][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  425.145277][ T5956] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  425.147665][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  425.164839][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  425.188600][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  425.200081][   T10] usb 1-1: can't read configurations, error -71
[  425.212265][ T5956] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  425.220061][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  425.232047][ T5956] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  425.250225][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  425.264405][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  425.284151][ T5956] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  425.293251][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  425.311331][ T5956] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  425.343513][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  425.355291][ T5956] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  425.389006][ T5956] usb 5-1: string descriptor 0 read error: -22
[  425.395850][ T5956] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  425.405000][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.436157][ T5956] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  425.575371][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  425.667009][ T5956] usb 5-1: USB disconnect, device number 32
[  425.755091][    T9] usb 4-1: Using ep0 maxpacket: 8
[  425.770576][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.792855][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.823966][ T9132] netlink: 'syz.0.670': attribute type 4 has an invalid length.
[  425.832119][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  425.843373][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.864411][    T9] usb 4-1: config 0 descriptor??
[  426.385926][ T5956] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  426.597750][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.624485][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.710150][ T5956] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  426.735893][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.781935][ T5956] usb 3-1: config 0 descriptor??
[  426.855289][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  427.003380][ T5956] usbhid 3-1:0.0: can't add hid device: -71
[  427.021811][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  427.029842][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  427.145657][ T5956] usb 3-1: USB disconnect, device number 35
[  427.261639][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  427.304690][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  427.406169][    T9] usb 4-1: USB disconnect, device number 31
[  427.680318][ T9167] netlink: 35 bytes leftover after parsing attributes in process `syz.2.683'.
[  427.689720][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'.
[  429.205314][   T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  429.355278][   T10] usb 2-1: Using ep0 maxpacket: 8
[  429.463390][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  429.506904][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  429.581087][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  429.621679][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  429.659520][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  429.690796][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  429.701076][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  429.840665][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  429.884507][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  429.954093][ T5954] usb 1-1: unable to get BOS descriptor or descriptor too short
[  430.008978][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  430.009129][ T5954] usb 1-1: unable to read config index 0 descriptor/start: -71
[  430.040141][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  430.048850][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  430.061079][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  430.079083][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  430.090740][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  430.111705][   T10] usb 2-1: string descriptor 0 read error: -22
[  430.118532][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  430.138002][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.200562][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  430.209307][   T10] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  430.250191][ T5954] usb 1-1: can't read configurations, error -71
[  430.375467][    T9] usb 4-1: Using ep0 maxpacket: 8
[  430.390004][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  430.428701][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  430.455374][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  430.470407][   T10] usb 2-1: USB disconnect, device number 38
[  430.476575][ T9193] usb 2-1: Couldn't submit interrupt_out_urb -19
[  430.486832][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  430.519566][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  430.540987][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  430.551898][   T30] audit: type=1326 audit(1757466779.414:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000
[  430.551910][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  430.593823][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  430.605703][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  430.625081][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  430.639783][   T30] audit: type=1326 audit(1757466779.414:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  430.701238][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  430.726203][   T30] audit: type=1326 audit(1757466779.414:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000
[  430.748745][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  430.768067][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  430.780656][   T30] audit: type=1326 audit(1757466779.414:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  430.803478][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  430.815109][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  430.829456][   T30] audit: type=1326 audit(1757466779.454:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000
[  430.856679][   T30] audit: type=1326 audit(1757466779.454:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000
[  430.896111][    T9] usb 4-1: string descriptor 0 read error: -22
[  430.902653][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  430.911829][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.922337][   T30] audit: type=1326 audit(1757466779.454:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  430.952829][   T30] audit: type=1326 audit(1757466779.454:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000
[  430.978619][   T30] audit: type=1326 audit(1757466779.454:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  430.984723][    T9] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  431.011586][   T30] audit: type=1326 audit(1757466779.454:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  431.065717][ T5956] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  431.165465][   T92] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  431.221230][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.236884][ T5956] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  431.257953][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  431.268815][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.285615][ T5956] usb 5-1: Product: syz
[  431.289827][ T5956] usb 5-1: Manufacturer: syz
[  431.294435][ T5956] usb 5-1: SerialNumber: syz
[  431.299207][ T5959] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  431.326075][   T92] usb 2-1: Using ep0 maxpacket: 8
[  431.333627][ T5954] usb 4-1: USB disconnect, device number 32
[  431.333676][ T9220] usb 4-1: Couldn't submit interrupt_out_urb -19
[  431.344085][   T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.390097][   T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  431.403589][   T92] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  431.413667][   T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.427190][   T92] usb 2-1: config 0 descriptor??
[  431.455392][ T5959] usb 3-1: Using ep0 maxpacket: 8
[  431.463725][ T5959] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  431.473081][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.481220][ T5959] usb 3-1: Product: syz
[  431.485829][ T5959] usb 3-1: Manufacturer: syz
[  431.490505][ T5959] usb 3-1: SerialNumber: syz
[  431.499699][ T5959] usb 3-1: config 0 descriptor??
[  431.508416][ T5959] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  431.523619][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.532646][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.554490][ T5956] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  431.576628][ T5956] usb 5-1: USB disconnect, device number 33
[  431.905473][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  432.065411][    T9] usb 4-1: Using ep0 maxpacket: 8
[  432.072877][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.084400][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.094275][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  432.095298][ T5956] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  432.103764][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.123889][    T9] usb 4-1: config 0 descriptor??
[  432.269316][ T5956] usb 5-1: config index 0 descriptor too short (expected 301, got 72)
[  432.277823][ T5956] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  432.288422][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  432.298295][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  432.309588][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.319559][ T5956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  432.335410][ T5956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  432.347684][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.371294][ T5956] usbtmc 5-1:16.0: bulk endpoints not found
[  432.546657][   T10] usb 3-1: USB disconnect, device number 36
[  432.620869][ T5938] usb 5-1: USB disconnect, device number 34
[  432.672318][   T92] usbhid 2-1:0.0: can't add hid device: -71
[  432.678840][   T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  432.692998][   T92] usb 2-1: USB disconnect, device number 39
[  433.115553][ T5956] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  433.125627][   T92] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  433.285409][ T5956] usb 1-1: Using ep0 maxpacket: 8
[  433.295117][   T92] usb 2-1: config 0 has no interfaces?
[  433.304480][ T5956] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  433.313399][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  433.325659][   T92] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  433.334810][   T92] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  433.349628][ T5956] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  433.365268][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  433.376823][   T92] usb 2-1: Product: syz
[  433.381045][   T92] usb 2-1: Manufacturer: syz
[  433.398667][   T92] usb 2-1: config 0 descriptor??
[  433.403856][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  433.425482][ T1226] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  433.436020][ T5956] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  433.446574][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  433.468502][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  433.474763][ T5956] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  433.483844][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  433.498169][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  433.516054][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  433.526237][    T9] usb 4-1: USB disconnect, device number 33
[  433.529902][ T5956] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  433.542870][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  433.556835][ T5956] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  433.580120][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  433.594904][ T5956] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  433.612370][ T5956] usb 1-1: string descriptor 0 read error: -22
[  433.625494][ T5956] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  433.628296][ T5938] usb 2-1: USB disconnect, device number 40
[  433.635128][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.646319][ T5956] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  434.002365][ T5938] usb 1-1: USB disconnect, device number 38
[  434.008538][ T9252] usb 1-1: Couldn't submit interrupt_out_urb -19
[  434.655362][   T92] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  434.815264][   T92] usb 1-1: Using ep0 maxpacket: 8
[  434.829551][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.860385][   T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.875586][   T92] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  434.884771][   T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.898596][   T92] usb 1-1: config 0 descriptor??
[  435.765366][ T5938] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  435.935402][ T5938] usb 5-1: Using ep0 maxpacket: 16
[  435.951831][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.144677][ T5938] usb 5-1: config 0 has no interfaces?
[  436.151187][   T92] usbhid 1-1:0.0: can't add hid device: -71
[  436.203403][   T92] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  436.207775][ T5938] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  436.255812][ T1226] usb 3-1: unable to get BOS descriptor or descriptor too short
[  436.267475][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.278121][ T1226] usb 3-1: unable to read config index 0 descriptor/start: -71
[  436.298166][ T1226] usb 3-1: can't read configurations, error -71
[  436.308461][    T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  436.317912][ T5938] usb 5-1: config 0 descriptor??
[  436.332611][   T92] usb 1-1: USB disconnect, device number 39
[  436.485381][    T9] usb 2-1: Using ep0 maxpacket: 16
[  436.768607][ T5938] usb 5-1: USB disconnect, device number 35
[  438.858352][ T5956] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  439.026765][ T5956] usb 1-1: Using ep0 maxpacket: 16
[  439.073419][ T5956] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  439.096951][ T5956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  439.121700][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  439.156213][ T5956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  439.167920][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.189254][ T5956] usb 1-1: Product: syz
[  439.208212][ T5956] usb 1-1: Manufacturer: syz
[  439.222488][ T5956] usb 1-1: SerialNumber: syz
[  439.315406][ T5952] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  439.412756][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  439.443085][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  439.473190][    T9] usb 2-1: can't read configurations, error -71
[  439.490408][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  439.543996][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  439.577952][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  439.590578][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  439.603647][ T5952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  439.613895][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.657832][ T5952] usb 3-1: config 0 descriptor??
[  439.663576][ T5956] usb 1-1: 0:2 : does not exist
[  439.665680][ T9346] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  440.118286][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.128449][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.135954][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.143382][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.151891][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.159467][ T5952] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  440.176077][ T5952] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  440.205341][ T5954] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  440.298393][ T5956] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  440.319197][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.327465][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  440.397397][ T5956] usb 1-1: USB disconnect, device number 40
[  440.409524][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  440.421370][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  440.436113][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  440.446482][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  440.462094][ T1226] usb 3-1: USB disconnect, device number 39
[  440.511919][ T5954] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  440.535423][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.554851][ T5954] usb 5-1: config 0 descriptor??
[  440.745367][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  440.895419][    T9] usb 2-1: Using ep0 maxpacket: 8
[  440.910371][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  440.918880][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  440.930535][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  440.947365][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  440.967084][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  441.001280][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  441.010264][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  441.039387][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  441.064880][ T5954] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  441.076789][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  441.118988][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  441.157105][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  441.158704][ T9380] syzkaller1: entered promiscuous mode
[  441.164580][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  441.164614][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  441.164637][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  441.186201][ T9380] syzkaller1: entered allmulticast mode
[  441.276314][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  441.308506][    T9] usb 2-1: string descriptor 0 read error: -22
[  441.329689][ T1226] usb 5-1: USB disconnect, device number 36
[  441.338853][    T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  441.382172][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.433267][    T9] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  441.757122][ T5866] usb 2-1: USB disconnect, device number 43
[  441.757223][ T9397] usb 2-1: Couldn't submit interrupt_out_urb -19
[  441.851445][ T9404] macsec1: entered promiscuous mode
[  441.857401][ T9404] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  441.864920][ T9404] macsec1: entered allmulticast mode
[  441.871503][ T9404] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  442.068249][   T92] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  442.247649][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  442.284880][   T92] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  442.405958][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.423343][   T92] usb 4-1: config 0 descriptor??
[  442.429832][ T9402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  442.465400][ T5954] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  442.615323][ T5954] usb 2-1: Using ep0 maxpacket: 8
[  442.630159][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.645494][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.664226][ T5954] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  442.675271][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.737166][ T5954] usb 2-1: config 0 descriptor??
[  442.745719][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  442.869373][   T92] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  442.878499][   T92] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  442.887295][   T92] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  442.896347][   T92] elan 0003:04F3:0755.000E: unknown main item tag 0x0
[  443.134968][   T92] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  443.186337][   T92] usb 4-1: USB disconnect, device number 34
[  443.300807][ T9431] fido_id[9431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  444.096587][ T5954] usbhid 2-1:0.0: can't add hid device: -71
[  444.102886][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  444.129654][ T5954] usb 2-1: USB disconnect, device number 44
[  445.486192][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  445.494914][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[  445.503083][    T9] usb 5-1: can't read configurations, error -71
[  447.336762][   T92] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  447.508720][   T92] usb 4-1: Using ep0 maxpacket: 8
[  447.567790][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  447.579973][   T92] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  447.589528][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.607023][   T92] usb 4-1: config 0 descriptor??
[  447.867351][   T92] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  448.072374][   T92] usb 4-1: USB disconnect, device number 35
[  448.090049][ T9532] syzkaller1: entered promiscuous mode
[  448.156265][ T9532] syzkaller1: entered allmulticast mode
[  448.834916][ T9554] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  450.230275][ T9587] netlink: 'syz.0.839': attribute type 4 has an invalid length.
[  450.405347][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  450.612620][    T9] usb 5-1: Using ep0 maxpacket: 32
[  450.630293][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  450.647756][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.665663][    T9] usb 5-1: Product: syz
[  450.696353][    T9] usb 5-1: Manufacturer: syz
[  450.736710][    T9] usb 5-1: SerialNumber: syz
[  450.804053][    T9] usb 5-1: config 0 descriptor??
[  450.813802][    T9] gspca_main: sunplus-2.14.0 probing 046d:0960
[  451.030688][    T9] gspca_sunplus: reg_w_riv err -71
[  451.038258][    T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  451.067296][    T9] usb 5-1: USB disconnect, device number 39
[  451.790315][ T5954] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  451.957236][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  452.057813][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  452.100559][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  452.133269][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  452.161495][ T9622] netlink: 'syz.4.850': attribute type 4 has an invalid length.
[  452.176813][ T5954] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.196254][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.215166][ T5954] usb 2-1: config 0 descriptor??
[  452.239628][ T9626] netlink: 'syz.4.850': attribute type 4 has an invalid length.
[  452.325547][ T9622] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  452.752909][ T5954] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  452.766162][ T9632] syzkaller1: entered promiscuous mode
[  452.771666][ T9632] syzkaller1: entered allmulticast mode
[  453.893714][ T5938] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  454.147170][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  454.161838][ T5938] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  454.258236][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.301367][ T5938] usb 1-1: config 0 descriptor??
[  454.314178][ T9647] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  454.774769][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'.
[  454.784693][ T5938] hid_parser_main: 1 callbacks suppressed
[  454.784719][ T5938] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  454.800933][   T92] usb 2-1: USB disconnect, device number 45
[  454.805658][ T5938] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  454.814660][ T5938] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  454.817447][ T9663] macsec2: entered promiscuous mode
[  454.823047][ T5938] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  454.836264][ T5938] elan 0003:04F3:0755.0010: unknown main item tag 0x0
[  454.845415][ T9663] team0: entered promiscuous mode
[  454.851458][ T9663] macsec2: entered allmulticast mode
[  454.858174][ T9663] team0: entered allmulticast mode
[  454.864348][ T9663] team0: Device macsec2 is already an upper device of the team interface
[  454.883008][ T5938] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  454.883245][ T9663] team0: left allmulticast mode
[  454.919121][ T9663] team0: left promiscuous mode
[  454.989216][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a14ec00: rx timeout, send abort
[  455.072978][ T5938] usb 1-1: USB disconnect, device number 41
[  455.489392][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a14e800: rx timeout, send abort
[  455.498817][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a14ec00: abort rx timeout. Force session deactivation
[  455.997783][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a14e800: abort rx timeout. Force session deactivation
[  457.358837][ T9727] loop2: detected capacity change from 0 to 7
[  457.382884][ T9727] Dev loop2: unable to read RDB block 7
[  457.394271][ T9727]  loop2: unable to read partition table
[  457.401235][ T9727] loop2: partition table beyond EOD, truncated
[  457.410445][ T9727] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  457.908521][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  458.496285][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  458.496307][   T30] audit: type=1326 audit(1757466807.354:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.545033][   T30] audit: type=1326 audit(1757466807.354:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.572657][   T30] audit: type=1326 audit(1757466807.364:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.600927][   T30] audit: type=1326 audit(1757466807.394:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.675749][ T5866] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  458.692127][   T30] audit: type=1326 audit(1757466807.394:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.832461][   T30] audit: type=1326 audit(1757466807.394:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70de539 code=0x7ffc0000
[  458.854834][ T5866] usb 4-1: Using ep0 maxpacket: 8
[  458.917161][ T5866] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  458.927310][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  458.977806][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.904'.
[  459.100507][ T5866] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.116076][   T30] audit: type=1326 audit(1757466807.394:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  459.152111][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.162034][   T30] audit: type=1326 audit(1757466807.394:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  459.172704][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.200228][   T30] audit: type=1326 audit(1757466807.394:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70de539 code=0x7ffc0000
[  459.236997][   T30] audit: type=1326 audit(1757466807.394:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  459.281127][ T5866] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  459.288968][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  459.333411][ T5866] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.393468][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.433042][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.472398][ T5866] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  459.484110][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  459.539733][ T5866] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  459.554942][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  459.567460][ T5866] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  459.659865][ T5866] usb 4-1: string descriptor 0 read error: -22
[  459.669325][ T5866] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  459.710350][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.752198][ T5866] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  460.141541][ T5954] usb 4-1: USB disconnect, device number 36
[  460.141735][ T9754] usb 4-1: Couldn't submit interrupt_out_urb -19
[  460.235526][ T5866] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  460.456247][ T5866] usb 3-1: Using ep0 maxpacket: 16
[  460.537713][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'.
[  460.644888][ T9796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  460.799590][ T5938] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  460.967526][ T5938] usb 4-1: Using ep0 maxpacket: 8
[  461.031397][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.117186][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.274633][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  461.329766][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.364051][ T5938] usb 4-1: config 0 descriptor??
[  461.743356][ T5938] usbhid 4-1:0.0: can't add hid device: -71
[  461.751073][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  461.834937][ T5938] usb 4-1: USB disconnect, device number 37
[  463.266065][ T1226] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  463.323656][ T5866] usb 3-1: unable to get BOS descriptor or descriptor too short
[  463.408204][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -71
[  463.416163][ T5866] usb 3-1: can't read configurations, error -71
[  463.445849][ T1226] usb 4-1: Using ep0 maxpacket: 8
[  463.453197][ T1226] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  463.462118][ T1226] usb 4-1: config 0 has no interface number 0
[  463.472310][ T1226] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  463.516770][ T1226] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  463.554250][ T1226] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  463.587367][ T1226] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  463.615063][ T1226] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  463.626145][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.642360][ T1226] usb 4-1: config 0 descriptor??
[  463.661933][ T1226] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  463.756611][ T5938] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  463.880065][ T1226] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  463.937601][ T5938] usb 1-1: config 0 has no interfaces?
[  463.944797][ T5938] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  463.989959][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  464.008912][ T1226] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  464.044100][ T5938] usb 1-1: SerialNumber: syz
[  464.083389][ T5938] usb 1-1: config 0 descriptor??
[  464.126362][ T5954] usb 4-1: USB disconnect, device number 38
[  464.126404][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  464.311213][ T9853] IPVS: length: 24 != 3277873272
[  464.337959][ T5938] usb 1-1: USB disconnect, device number 42
[  464.402470][ T5954] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  464.410491][ T9845] ldusb: No device or device unplugged -19
[  464.656213][ T9873] pim6reg1: entered promiscuous mode
[  464.671953][ T9873] pim6reg1: entered allmulticast mode
[  464.803305][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'.
[  464.822885][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'.
[  464.848208][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'.
[  465.645994][ T5866] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  465.810381][ T5866] usb 4-1: config 4 has an invalid interface number: 156 but max is 0
[  465.822385][ T5866] usb 4-1: config 4 has no interface number 0
[  465.961561][ T5866] usb 4-1: config 4 interface 156 has no altsetting 0
[  466.012959][ T5866] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  466.032540][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.041125][ T5866] usb 4-1: Product: syz
[  466.055360][ T5866] usb 4-1: Manufacturer: syz
[  466.060171][ T5866] usb 4-1: SerialNumber: syz
[  466.132958][ T5866] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  466.271602][ T5866] usb 4-1: setting power ON
[  466.279551][ T5866] dvb-usb: bulk message failed: -22 (2/0)
[  466.313718][ T5866] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  466.380616][ T5866] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  466.417026][ T5866] dvb_usb_cxusb 4-1:4.156: probe with driver dvb_usb_cxusb failed with error -22
[  466.454859][ T5866] usb 4-1: USB disconnect, device number 39
[  466.505318][ T5938] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  466.670222][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  466.695286][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  466.710629][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  466.729767][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  466.753967][ T5938] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  466.763626][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.788737][ T5938] usb 1-1: config 0 descriptor??
[  466.794794][ T9903] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  467.294433][ T5938] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  467.528645][   T30] kauditd_printk_skb: 70 callbacks suppressed
[  467.528665][   T30] audit: type=1326 audit(1757466816.394:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  467.697747][   T30] audit: type=1326 audit(1757466816.394:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  467.720212][   T30] audit: type=1326 audit(1757466816.394:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70de539 code=0x7ffc0000
[  467.725688][ T5938] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  467.744589][   T30] audit: type=1326 audit(1757466816.394:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  467.784286][   T30] audit: type=1326 audit(1757466816.394:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.962" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  467.898763][ T5938] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  467.917328][ T5938] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  467.945318][ T5938] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  467.976550][ T5938] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  467.995231][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.017717][ T9926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  468.113314][ T9938] loop2: detected capacity change from 0 to 7
[  468.136943][ T9938] Dev loop2: unable to read RDB block 7
[  468.150791][ T9938]  loop2: unable to read partition table
[  468.161160][ T9938] loop2: partition table beyond EOD, truncated
[  468.168259][ T9938] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  468.367433][ T9944] loop2: detected capacity change from 0 to 7
[  468.376202][ T9944]  loop2:
[  468.379357][ T9944] loop2: partition table partially beyond EOD, truncated
[  468.866351][ T5938] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  468.901516][ T5938] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input26
[  469.329393][   T92] usb 1-1: USB disconnect, device number 43
[  469.799757][ T9971] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer.
[  469.829910][ T9973] loop2: detected capacity change from 0 to 7
[  469.840883][ T9973]  loop2:
[  469.847984][ T9973] loop2: partition table partially beyond EOD, truncated
[  470.052529][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'.
[  470.085978][ T5866] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  470.106359][ T5956] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  470.250429][ T5866] usb 2-1: Using ep0 maxpacket: 32
[  470.263477][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.278216][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.288352][ T5866] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  470.299975][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.305989][ T5956] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  470.314545][ T5866] usb 2-1: config 0 descriptor??
[  470.329502][ T5956] usb 4-1: config 0 has no interfaces?
[  470.340016][ T5956] usb 4-1: config 0 has no interfaces?
[  470.356574][ T5956] usb 4-1: config 0 has no interfaces?
[  470.363381][ T5956] usb 4-1: config 0 has no interfaces?
[  470.373479][ T5956] usb 4-1: config 0 has no interfaces?
[  470.386843][ T5956] usb 4-1: config 0 has no interfaces?
[  470.393487][ T5956] usb 4-1: config 0 has no interfaces?
[  470.400690][ T5956] usb 4-1: config 0 has no interfaces?
[  470.410126][ T5956] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  470.420430][ T5956] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  470.429870][ T5956] usb 4-1: Product: syz
[  470.434617][ T5956] usb 4-1: Manufacturer: syz
[  470.440865][ T5956] usb 4-1: SerialNumber: syz
[  470.452175][ T5956] usb 4-1: config 0 descriptor??
[  470.626504][ T5956] usb 5-1: USB disconnect, device number 40
[  470.626657][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  470.689504][ T1226] usb 4-1: USB disconnect, device number 40
[  470.772393][ T5866] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  470.942485][T10001] loop2: detected capacity change from 0 to 7
[  470.950223][T10001] Dev loop2: unable to read RDB block 7
[  470.960698][T10001]  loop2: unable to read partition table
[  470.967902][T10001] loop2: partition table beyond EOD, truncated
[  470.981856][T10001] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  471.089484][ T9971] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer.
[  471.113187][T10004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  471.485352][ T5866] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  471.670436][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.685345][ T5866] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  471.694440][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.718974][ T5866] usb 5-1: config 0 descriptor??
[  471.738280][ T5866] pwc: Askey VC010 type 2 USB webcam detected.
[  471.909482][   T30] audit: type=1326 audit(1757466820.774:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10015 comm="syz.2.994" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0
[  472.143013][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00
[  472.152148][ T5866] pwc: recv_control_msg error -32 req 02 val 2700
[  472.172107][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00
[  472.206860][ T5866] pwc: recv_control_msg error -32 req 04 val 1000
[  472.426360][ T5866] pwc: recv_control_msg error -32 req 04 val 1400
[  472.433939][ T5866] pwc: recv_control_msg error -71 req 02 val 2000
[  472.441604][ T5866] pwc: recv_control_msg error -71 req 02 val 2100
[  472.448565][ T5866] pwc: recv_control_msg error -71 req 04 val 1500
[  472.455545][ T5866] pwc: recv_control_msg error -71 req 02 val 2500
[  472.465795][ T5866] pwc: recv_control_msg error -71 req 02 val 2400
[  472.483247][ T5866] pwc: recv_control_msg error -71 req 02 val 2600
[  472.619181][ T5866] pwc: recv_control_msg error -71 req 02 val 2900
[  472.627356][ T5866] pwc: recv_control_msg error -71 req 02 val 2800
[  472.646535][ T5866] pwc: recv_control_msg error -71 req 04 val 1100
[  472.653531][ T5866] pwc: recv_control_msg error -71 req 04 val 1200
[  472.728549][ T5866] pwc: Registered as video103.
[  472.750505][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27
[  472.771144][ T5866] usb 5-1: USB disconnect, device number 41
[  472.838662][   T10] usb 2-1: USB disconnect, device number 46
[  473.377774][ T5866] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  473.385692][   T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  473.626887][ T5866] usb 1-1: Using ep0 maxpacket: 16
[  473.641679][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.700439][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.741861][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.769504][   T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  473.797512][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.852112][   T10] usb 2-1: config 0 descriptor??
[  474.323045][   T10] wacom 0003:056A:00F0.0014: item fetching failed at offset 10/11
[  474.387709][   T10] wacom 0003:056A:00F0.0014: parse failed
[  474.417913][   T10] wacom 0003:056A:00F0.0014: probe with driver wacom failed with error -22
[  474.655802][   T92] usb 2-1: USB disconnect, device number 47
[  475.933593][   T92] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  475.967654][   T92] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  476.813759][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short
[  476.836517][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -71
[  476.846661][ T5866] usb 1-1: can't read configurations, error -71
[  477.292755][T10082] netlink: 'syz.2.1018': attribute type 4 has an invalid length.
[  477.309978][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'.
[  477.344455][T10095] netlink: 'syz.2.1018': attribute type 4 has an invalid length.
[  477.390514][T10099] netlink: 'syz.3.1024': attribute type 4 has an invalid length.
[  477.408081][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[  477.440770][T10104] netlink: 'syz.3.1024': attribute type 4 has an invalid length.
[  477.547438][T10082] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  477.996568][ T5866] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  478.159032][T10120] fuse: Bad value for 'fd'
[  478.343972][ T5866] usb 1-1: config 0 has no interfaces?
[  478.349800][ T5866] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  478.361492][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.443427][ T5866] usb 1-1: config 0 descriptor??
[  478.612741][ T5954] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  478.671305][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.693845][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.845450][ T5954] usb 3-1: Using ep0 maxpacket: 16
[  478.853170][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  478.863866][ T5954] usb 3-1: config 0 has no interfaces?
[  478.876110][ T5954] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  478.901340][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.941101][ T5954] usb 3-1: config 0 descriptor??
[  479.310710][ T5954] usb 3-1: USB disconnect, device number 42
[  480.050381][T10136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  480.462255][   T92] usb 1-1: USB disconnect, device number 45
[  482.039738][T10146] netlink: 'syz.3.1040': attribute type 4 has an invalid length.
[  482.066568][T10146] netlink: 'syz.3.1040': attribute type 4 has an invalid length.
[  482.128633][T10146] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  482.355585][   T92] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  482.516171][   T92] usb 3-1: Using ep0 maxpacket: 16
[  482.547626][   T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.599426][   T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.644188][   T92] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  482.654394][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.709196][   T92] usb 3-1: config 0 descriptor??
[  482.815591][ T5938] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  483.204035][ T5938] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  483.220783][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.255480][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.424776][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  483.467160][   T92] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0016/input/input28
[  483.536899][ T5938] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  483.566477][ T5938] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  483.574619][ T5938] usb 2-1: Manufacturer: syz
[  483.671891][   T92] creative-sb0540 0003:041E:3100.0016: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0
[  483.739926][ T5938] usb 2-1: config 0 descriptor??
[  484.192677][ T5938] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  484.238635][ T5938] appleir 0003:05AC:8243.0017: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  484.655380][   T92] usb 3-1: reset high-speed USB device number 43 using dummy_hcd
[  485.421470][T10206] fuse: Invalid rootmode
[  485.527633][T10197] raw-gadget.1 gadget.1: fail, usb_ep_queue returned -108
[  485.695313][ T5938] usb 2-1: reset high-speed USB device number 48 using dummy_hcd
[  486.183087][ T5956] usb 3-1: USB disconnect, device number 43
[  486.634261][ T5866] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  486.691374][   T10] usb 2-1: USB disconnect, device number 48
[  486.922347][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.973391][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.047726][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  487.060140][T10229] netlink: 'syz.3.1058': attribute type 4 has an invalid length.
[  487.185532][ T5866] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  487.202172][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.210433][T10230] netlink: 'syz.3.1058': attribute type 4 has an invalid length.
[  487.229043][ T5866] usb 5-1: config 0 descriptor??
[  487.549690][T10229] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  488.015435][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  488.165775][   T10] usb 1-1: Using ep0 maxpacket: 32
[  488.186350][   T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  488.198677][   T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  488.215576][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  488.238636][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  488.312904][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  488.348360][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  488.368444][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  488.379594][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.436868][   T10] usb 1-1: config 0 descriptor??
[  488.754029][   T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  488.788658][ T5866] usbhid 5-1:0.0: can't add hid device: -71
[  488.794703][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  488.866822][ T5866] usb 5-1: USB disconnect, device number 42
[  488.876672][   T10] usb 1-1: USB disconnect, device number 46
[  488.907985][   T10] usblp0: removed
[  489.335523][   T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  489.506751][   T10] usb 1-1: Using ep0 maxpacket: 32
[  489.564666][   T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  489.745966][T10265] fuse: Invalid rootmode
[  489.845735][   T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  489.854407][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  490.078787][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  490.147433][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  490.277001][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  490.314748][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  490.335648][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.585124][T10274] netlink: zone id is out of range
[  490.669544][   T10] usb 1-1: config 0 descriptor??
[  490.705687][T10274] netlink: zone id is out of range
[  490.710862][T10274] netlink: zone id is out of range
[  490.745386][T10274] netlink: zone id is out of range
[  490.751324][T10274] netlink: zone id is out of range
[  490.763471][T10274] netlink: zone id is out of range
[  490.785712][T10274] netlink: zone id is out of range
[  490.792151][T10274] netlink: zone id is out of range
[  490.797946][T10274] netlink: zone id is out of range
[  490.848381][   T10] usb 1-1: can't set config #0, error -71
[  490.899233][   T10] usb 1-1: USB disconnect, device number 47
[  492.929901][T10314] syz_tun: entered allmulticast mode
[  493.191960][T10314] dvmrp6: entered allmulticast mode
[  493.348032][T10292] netlink: 'syz.3.1083': attribute type 4 has an invalid length.
[  493.381407][T10311] syz_tun: left allmulticast mode
[  493.413695][T10319] netlink: 'syz.3.1083': attribute type 4 has an invalid length.
[  493.417669][T10311] dvmrp6: left allmulticast mode
[  493.697628][T10325] net_ratelimit: 56 callbacks suppressed
[  493.697648][T10325] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  493.871480][T10331] binder_alloc: 10329: pid 10329 spamming oneway? 1 buffers allocated for a total size of 4096
[  495.016162][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'.
[  495.920328][T10361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  495.969658][T10364] warning: `syz.3.1105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  496.772659][T10370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  497.877719][   T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  498.038911][   T10] usb 4-1: Using ep0 maxpacket: 8
[  498.073243][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  498.101776][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.138074][   T10] usb 4-1: Product: syz
[  498.153874][   T10] usb 4-1: Manufacturer: syz
[  498.163111][   T10] usb 4-1: SerialNumber: syz
[  498.191814][   T10] usb 4-1: config 0 descriptor??
[  498.198476][T10384] netlink: 'syz.2.1109': attribute type 4 has an invalid length.
[  498.285056][T10385] netlink: 'syz.2.1109': attribute type 4 has an invalid length.
[  498.379496][T10384] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  498.440602][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  498.863395][T10398] veth0_to_team: entered promiscuous mode
[  499.733373][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  499.858231][   T10] usb 4-1: USB disconnect, device number 41
[  500.490165][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  500.587653][T10414] netlink: 'syz.1.1120': attribute type 10 has an invalid length.
[  500.666459][T10414] bond0: (slave wlan1): Opening slave failed
[  501.552426][ T5956] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  501.801645][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.808567][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  501.885988][ T5956] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  501.896487][ T5956] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  501.921550][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  502.165352][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.699369][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  502.822272][ T5956] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  502.838940][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  502.966873][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.980292][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.158033][   T10] usb 3-1: USB disconnect, device number 44
[  503.520051][   T92] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  503.695446][   T92] usb 4-1: Using ep0 maxpacket: 16
[  503.710359][   T30] audit: type=1326 audit(1757466852.554:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  503.733128][   T30] audit: type=1326 audit(1757466852.554:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  503.767761][   T30] audit: type=1326 audit(1757466852.554:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707e539 code=0x7ffc0000
[  503.790773][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.899177][   T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.934457][   T92] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  503.943673][   T30] audit: type=1326 audit(1757466852.554:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  503.965892][   T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.979390][   T92] usb 4-1: config 0 descriptor??
[  503.984653][   T30] audit: type=1326 audit(1757466852.554:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  504.205654][   T30] audit: type=1326 audit(1757466852.554:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707e539 code=0x7ffc0000
[  504.301675][T10447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1128'.
[  504.556450][T10456] tipc: Started in network mode
[  504.627072][T10456] tipc: Node identity 6a4822e0d048, cluster identity 4711
[  504.711980][T10456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.876956][T10457] syzkaller0: entered promiscuous mode
[  504.910987][T10457] syzkaller0: entered allmulticast mode
[  505.020590][T10457] tipc: Resetting bearer <eth:syzkaller0>
[  505.156200][T10455] tipc: Resetting bearer <eth:syzkaller0>
[  505.456804][T10455] tipc: Disabling bearer <eth:syzkaller0>
[  505.819861][   T92] usbhid 4-1:0.0: can't add hid device: -71
[  505.835519][   T92] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  505.922761][   T92] usb 4-1: USB disconnect, device number 42
[  506.362082][   T30] audit: type=1326 audit(1757466855.224:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  506.488419][   T30] audit: type=1326 audit(1757466855.224:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  506.514005][T10477] netlink: 'syz.1.1133': attribute type 4 has an invalid length.
[  506.524801][T10477] netlink: 'syz.1.1133': attribute type 4 has an invalid length.
[  506.617469][T10477] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  506.643213][   T30] audit: type=1326 audit(1757466855.504:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf707e539 code=0x7ffc0000
[  507.062156][   T30] audit: type=1326 audit(1757466855.534:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.1130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000
[  507.140809][T10485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'.
[  507.232083][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'.
[  507.373698][T10491] syz_tun: entered allmulticast mode
[  507.383731][T10486] syz_tun: left allmulticast mode
[  507.446681][T10490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.489404][T10494] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  507.540765][T10494] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  507.586800][T10490] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  507.608759][T10490] tipc: Resetting bearer <eth:syzkaller0>
[  507.649844][T10500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.677873][T10500] syzkaller0: entered promiscuous mode
[  507.695600][T10500] syzkaller0: entered allmulticast mode
[  507.783656][T10500] tipc: Resetting bearer <eth:syzkaller0>
[  507.801730][T10497] tipc: Resetting bearer <eth:syzkaller0>
[  507.842382][T10497] tipc: Disabling bearer <eth:syzkaller0>
[  508.010078][T10511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  508.114517][ T5952] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  508.133388][T10511] syzkaller0: entered promiscuous mode
[  508.139035][T10511] syzkaller0: entered allmulticast mode
[  508.221058][T10511] tipc: Resetting bearer <eth:syzkaller0>
[  508.425510][T10510] tipc: Resetting bearer <eth:syzkaller0>
[  508.466349][T10510] tipc: Disabling bearer <eth:syzkaller0>
[  508.467515][ T5952] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  508.495366][ T5952] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  508.515340][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  508.567235][ T5952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  508.618537][ T5952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  508.677147][ T5952] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  508.686486][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  508.728567][ T5952] usb 2-1: Product: syz
[  508.750197][ T5952] usb 2-1: Manufacturer: syz
[  508.777183][ T5952] cdc_wdm 2-1:1.0: skipping garbage
[  508.782690][ T5952] cdc_wdm 2-1:1.0: skipping garbage
[  508.801601][ T5952] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  508.809690][ T5952] cdc_wdm 2-1:1.0: Unknown control protocol
[  508.957622][T10524] tipc: Started in network mode
[  508.972959][T10524] tipc: Node identity ceea5504bb0d, cluster identity 4711
[  509.005592][T10524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.037270][T10525] syzkaller0: entered promiscuous mode
[  509.042770][T10525] syzkaller0: entered allmulticast mode
[  509.158656][T10525] tipc: Resetting bearer <eth:syzkaller0>
[  509.171230][T10523] tipc: Resetting bearer <eth:syzkaller0>
[  509.211729][T10523] tipc: Disabling bearer <eth:syzkaller0>
[  509.247781][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  509.248014][ T1226] usb 2-1: USB disconnect, device number 49
[  509.254721][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  509.266550][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  509.315360][T10505] cdc_wdm 2-1:1.0: Tx URB error: -19
[  509.427785][T10529] netlink: 'syz.0.1150': attribute type 4 has an invalid length.
[  509.463456][T10529] netlink: 'syz.0.1150': attribute type 4 has an invalid length.
[  509.520297][T10529] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  509.765298][   T10] usb 3-1: new low-speed USB device number 45 using dummy_hcd
[  509.943008][T10540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.955419][ T5866] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  509.965922][T10540] syzkaller0: entered promiscuous mode
[  509.973314][T10540] syzkaller0: entered allmulticast mode
[  509.981070][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  509.989084][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  510.020044][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.045399][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  510.056936][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  510.070298][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  510.071953][T10540] tipc: Resetting bearer <eth:syzkaller0>
[  510.084193][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  510.095786][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.108190][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  510.119977][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  510.120031][T10539] tipc: Resetting bearer <eth:syzkaller0>
[  510.148287][ T5866] usb 4-1: config 0 has no interfaces?
[  510.153790][ T5866] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  510.163920][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.164075][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  510.183752][T10539] tipc: Disabling bearer <eth:syzkaller0>
[  510.705678][ T5866] usb 4-1: config 0 descriptor??
[  510.715403][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  510.755025][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.772788][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  510.804266][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  510.877262][   T10] usb 3-1: string descriptor 0 read error: -22
[  510.883687][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  510.893241][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.990139][   T10] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  511.363842][ T5938] usb 3-1: USB disconnect, device number 45
[  511.621610][T10554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  512.227581][T10564] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  512.435337][ T5952] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  512.666945][ T5952] usb 1-1: config 0 has no interfaces?
[  512.675070][ T5952] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  512.695712][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  512.737681][ T5952] usb 1-1: Product: syz
[  512.750305][T10570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  512.763520][ T5952] usb 1-1: Manufacturer: syz
[  512.770542][ T5952] usb 1-1: SerialNumber: syz
[  512.803986][ T5952] usb 1-1: config 0 descriptor??
[  512.819642][T10570] netem: change failed
[  513.171843][ T5954] usb 4-1: USB disconnect, device number 43
[  513.384041][ T5952] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  513.585569][ T5952] usb 2-1: Using ep0 maxpacket: 16
[  513.719384][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  514.471189][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  514.486074][ T5952] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  514.541959][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.556667][T10586] binder_alloc: 10585: binder_alloc_buf, no vma
[  514.589902][ T5952] usb 2-1: Product: syz
[  514.612540][ T5952] usb 2-1: Manufacturer: syz
[  514.635797][ T5952] usb 2-1: SerialNumber: syz
[  514.667939][ T5952] usb 2-1: config 0 descriptor??
[  514.697785][ T5952] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  514.712902][ T5952] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  514.864303][T10594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.874245][T10594] syzkaller0: entered promiscuous mode
[  514.881173][T10594] syzkaller0: entered allmulticast mode
[  514.892883][T10594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  514.928846][T10594] tipc: Resetting bearer <eth:syzkaller0>
[  514.937647][T10593] tipc: Resetting bearer <eth:syzkaller0>
[  514.953280][T10593] tipc: Disabling bearer <eth:syzkaller0>
[  514.955302][ T5938] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  514.996057][ T5866] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  515.098683][   T10] usb 1-1: USB disconnect, device number 48
[  515.115388][ T5938] usb 4-1: Using ep0 maxpacket: 16
[  515.140138][ T5938] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.184292][ T5866] usb 5-1: Using ep0 maxpacket: 8
[  515.194339][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0
[  515.207449][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  515.230313][ T5938] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  515.242184][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  515.254390][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.263684][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  515.279630][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  515.292100][ T5938] usb 4-1: config 0 descriptor??
[  515.302248][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  515.329128][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  515.338149][ T5952] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  515.343831][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  515.364552][ T5952] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  515.371857][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  515.371892][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  515.371917][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  515.373401][ T5866] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  515.425056][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  515.440414][ T5866] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  515.452711][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  515.465635][ T5866] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  515.509695][ T5866] usb 5-1: string descriptor 0 read error: -22
[  515.525052][ T5866] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  515.541083][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.693815][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'.
[  515.725787][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'.
[  515.749067][ T5866] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  516.055043][ T5938] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  516.073909][ T1226] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  516.133607][ T5952] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  516.159425][   T92] usb 5-1: USB disconnect, device number 43
[  516.161361][T10611] usb 5-1: Couldn't submit interrupt_out_urb -19
[  516.169374][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  516.182540][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  516.203237][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  516.211325][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  516.236871][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  516.681444][   T10] usb 4-1: USB disconnect, device number 44
[  516.681690][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  516.744683][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  516.803605][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  516.836341][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  516.842831][ T5952] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  516.865283][ T5954] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  516.891354][ T5952] usb 2-1: USB disconnect, device number 50
[  517.045737][ T5954] usb 5-1: Using ep0 maxpacket: 8
[  517.118906][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.159920][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.170480][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  517.181105][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.194226][ T5954] usb 5-1: config 0 descriptor??
[  517.379793][T10618] bridge2: entered allmulticast mode
[  517.434716][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'.
[  517.442434][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  517.471523][T10620] dummy0: entered promiscuous mode
[  517.485885][ T5952] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  517.592343][T10624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.667950][ T5952] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  517.787497][ T5952] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  517.833962][ T5952] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  517.857997][ T5952] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  517.869054][ T5952] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  517.879379][ T5952] usb 1-1: Manufacturer: syz
[  517.884908][ T5952] usb 1-1: SerialNumber: syz
[  518.158396][ T5952] yealink 1-1:36.0: invalid payload size 0, expected 16
[  518.170608][ T5952] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input29
[  518.194436][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.201497][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.208488][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.215935][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.222941][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.229950][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.236942][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.243912][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  518.250685][    C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  518.269778][ T5952] usb 1-1: USB disconnect, device number 49
[  518.342643][ T1226] usb 3-1: unable to get BOS descriptor or descriptor too short
[  518.357950][ T1226] usb 3-1: unable to read config index 0 descriptor/start: -71
[  518.390633][ T1226] usb 3-1: can't read configurations, error -71
[  518.843359][ T5954] usbhid 5-1:0.0: can't add hid device: -71
[  518.852061][T10632] netlink: 'syz.4.1183': attribute type 2 has an invalid length.
[  518.860265][ T5954] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  518.886237][ T5954] usb 5-1: USB disconnect, device number 44
[  519.115326][ T5952] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  519.386628][ T5952] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  519.398567][ T5952] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  519.409814][ T5952] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  519.426972][ T5952] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  519.436576][ T5952] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  519.444852][ T5952] usb 1-1: Manufacturer: syz
[  519.449572][ T5952] usb 1-1: SerialNumber: syz
[  519.550517][ T5954] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  520.442431][ T5952] yealink 1-1:36.0: invalid payload size 0, expected 16
[  520.630376][ T5952] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input30
[  520.646528][ T5954] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  520.657306][ T5954] usb 5-1: config 0 has no interface number 0
[  520.666437][ T5954] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  520.678631][ T5954] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  520.744272][ T5954] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  520.770915][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.784184][ T5954] usb 5-1: config 0 descriptor??
[  520.824691][ T5954] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input31
[  521.725740][ T1226] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  521.773306][ T5954] usb 5-1: USB disconnect, device number 45
[  522.057013][ T1226] usb 4-1: Using ep0 maxpacket: 32
[  522.103275][ T1226] usb 4-1: config 0 has no interfaces?
[  522.143692][ T1226] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  522.159973][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.207601][ T1226] usb 4-1: Product: syz
[  522.211834][ T1226] usb 4-1: Manufacturer: syz
[  522.275828][ T1226] usb 4-1: SerialNumber: syz
[  522.289827][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.296929][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.303860][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.310813][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.317981][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.325029][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.332993][    C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[  522.333713][ T1226] usb 4-1: config 0 descriptor??
[  522.339818][    C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  522.340580][ T5952] usb 1-1: USB disconnect, device number 50
[  522.623358][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'.
[  522.639661][T10660] team_slave_0: entered promiscuous mode
[  522.645663][T10660] team_slave_1: entered promiscuous mode
[  522.797989][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'.
[  522.807657][T10660] macvtap1: entered promiscuous mode
[  522.846039][T10660] team0: entered promiscuous mode
[  522.868907][T10660] macvlan0: entered promiscuous mode
[  522.888286][T10660] macvtap1: entered allmulticast mode
[  522.909336][ T1226] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  522.934474][T10660] team0: entered allmulticast mode
[  523.000119][T10660] team_slave_0: entered allmulticast mode
[  523.017879][T10660] team_slave_1: entered allmulticast mode
[  523.075822][T10660] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  523.107053][ T1226] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  523.116165][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.137146][T10669] team0: left allmulticast mode
[  523.146226][ T1226] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  523.156845][ T1226] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  523.165433][ T1226] usb 5-1: Manufacturer: syz
[  523.181304][T10669] team_slave_0: left allmulticast mode
[  523.188868][ T1226] usb 5-1: config 0 descriptor??
[  523.250592][T10669] team_slave_1: left allmulticast mode
[  523.286818][T10669] team0: left promiscuous mode
[  523.303664][T10669] macvlan0: left promiscuous mode
[  523.317781][T10669] team_slave_0: left promiscuous mode
[  523.323893][T10669] team_slave_1: left promiscuous mode
[  523.513523][   T10] usb 4-1: USB disconnect, device number 45
[  523.749110][ T1226] rc_core: IR keymap rc-hauppauge not found
[  523.802684][ T1226] Registered IR keymap rc-empty
[  523.832637][T10677] binder: 10661:10677 ioctl c0306201 0 returned -14
[  523.853827][ T1226] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  523.877558][ T1226] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32
[  523.896650][    C0] igorplugusb 5-1:0.0: Error: urb status = -32
[  523.926593][T10662] binder: 10661:10662 ioctl c0306201 80000a00 returned -14
[  524.405905][   T10] usb 5-1: USB disconnect, device number 46
[  524.755417][ T5952] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  524.935309][ T5952] usb 4-1: Using ep0 maxpacket: 8
[  524.955301][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  524.962982][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  524.998948][T10693] syz_tun: entered allmulticast mode
[  525.023660][T10692] syz_tun: left allmulticast mode
[  525.085211][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  525.122077][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  525.145222][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  525.245676][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  525.253168][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  525.284070][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  525.345736][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  525.371557][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  525.454244][T10701] tipc: Started in network mode
[  525.479872][T10701] tipc: Node identity 32e7e4ea9602, cluster identity 4711
[  525.500356][T10701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.525621][   T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  525.554089][T10702] syzkaller0: entered promiscuous mode
[  525.571631][T10702] syzkaller0: entered allmulticast mode
[  525.575282][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  525.614111][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  525.647418][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  525.685565][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  525.732241][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  525.784634][ T5952] usb 4-1: string descriptor 0 read error: -22
[  525.802479][ T5952] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  525.835696][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.871875][ T5952] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  525.924349][ T1226] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  526.165301][   T92] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  526.180499][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.190812][ T1226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  526.204288][ T1226] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  526.213913][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.235437][ T1226] usb 5-1: config 0 descriptor??
[  526.239584][ T5952] usb 4-1: USB disconnect, device number 46
[  526.258168][T10682] adutux: No device or device unplugged -19
[  526.326499][   T92] usb 1-1: Using ep0 maxpacket: 8
[  526.350585][   T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  526.365369][   T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  526.376644][   T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  526.387482][   T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  526.401210][   T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  526.415482][   T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  526.425009][   T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.462359][   T92] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  526.536639][T10701] tipc: Resetting bearer <eth:syzkaller0>
[  526.559955][ T1226] usbhid 5-1:0.0: can't add hid device: -71
[  526.570272][T10699] tipc: Resetting bearer <eth:syzkaller0>
[  526.576968][ T1226] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  526.613425][ T1226] usb 5-1: USB disconnect, device number 47
[  526.628511][T10699] tipc: Disabling bearer <eth:syzkaller0>
[  527.524226][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  527.524241][   T30] audit: type=1326 audit(1757466876.384:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.584435][T10721] fuse: Bad value for 'rootmode'
[  527.619775][   T30] audit: type=1326 audit(1757466876.434:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.652583][T10721] capability: warning: `syz.2.1204' uses 32-bit capabilities (legacy support in use)
[  527.744410][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'.
[  527.746900][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  527.766624][   T30] audit: type=1326 audit(1757466876.434:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.790071][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  527.815293][   T10] usb 2-1: can't read configurations, error -71
[  527.823361][   T30] audit: type=1326 audit(1757466876.444:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.852721][   T30] audit: type=1326 audit(1757466876.444:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.877304][   T30] audit: type=1326 audit(1757466876.444:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.901931][   T30] audit: type=1326 audit(1757466876.444:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  527.993131][T10724] bridge3: port 1(veth5) entered blocking state
[  528.010336][T10724] bridge3: port 1(veth5) entered disabled state
[  528.023169][   T30] audit: type=1326 audit(1757466876.444:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  528.056412][T10724] veth5: entered allmulticast mode
[  528.063138][T10724] veth5: entered promiscuous mode
[  528.228869][   T30] audit: type=1326 audit(1757466876.444:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e539 code=0x7ffc0000
[  528.522779][   T30] audit: type=1326 audit(1757466876.444:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  528.548697][T10723] bridge3: port 2(veth0_to_bond) entered blocking state
[  528.559047][T10723] bridge3: port 2(veth0_to_bond) entered disabled state
[  528.576090][T10723] veth0_to_bond: entered allmulticast mode
[  528.600841][T10723] veth0_to_bond: entered promiscuous mode
[  528.930343][   T10] usb 1-1: USB disconnect, device number 51
[  529.135298][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'.
[  529.195022][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  529.195463][T10739] macvtap1: entered promiscuous mode
[  529.242876][T10739] team0: entered promiscuous mode
[  529.336457][T10739] macvtap1: entered allmulticast mode
[  529.356253][T10739] team0: entered allmulticast mode
[  529.361948][T10739] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  529.485553][T10743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.494870][T10743] syzkaller0: entered promiscuous mode
[  529.501245][T10743] syzkaller0: entered allmulticast mode
[  529.688986][T10742] tipc: Resetting bearer <eth:syzkaller0>
[  529.805288][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  530.036180][T10742] tipc: Disabling bearer <eth:syzkaller0>
[  530.107400][T10748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.108453][   T10] usb 4-1: device descriptor read/64, error -71
[  530.151447][T10748] syzkaller0: entered promiscuous mode
[  530.177027][T10748] syzkaller0: entered allmulticast mode
[  530.290949][T10753] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1212'.
[  530.319387][T10748] tipc: Resetting bearer <eth:syzkaller0>
[  530.348209][T10747] tipc: Resetting bearer <eth:syzkaller0>
[  530.373345][T10747] tipc: Disabling bearer <eth:syzkaller0>
[  530.380090][   T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  530.645634][   T10] usb 4-1: device descriptor read/64, error -71
[  530.685624][   T92] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  530.758942][   T10] usb usb4-port1: attempt power cycle
[  530.836312][   T92] usb 2-1: Using ep0 maxpacket: 8
[  530.849783][   T92] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  530.868084][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  530.883422][   T92] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  530.897493][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  530.920835][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  530.946269][   T92] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  530.955469][ T5952] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  530.968259][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  530.988883][   T92] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  531.011184][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  531.048197][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  531.073031][   T92] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  531.083023][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  531.095013][   T92] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  531.105429][   T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  531.106968][ T5952] usb 1-1: Using ep0 maxpacket: 16
[  531.174267][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  531.186195][   T10] usb 4-1: device descriptor read/8, error -71
[  531.186288][   T92] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  531.216193][ T5952] usb 1-1: config 0 has no interfaces?
[  531.222116][ T5952] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  531.235798][   T92] usb 2-1: string descriptor 0 read error: -22
[  531.242818][   T92] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  531.253493][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.277169][   T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.314874][ T5952] usb 1-1: config 0 descriptor??
[  531.339960][   T92] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  531.425396][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  531.457279][   T10] usb 4-1: device descriptor read/8, error -71
[  531.575897][   T10] usb usb4-port1: unable to enumerate USB device
[  531.684843][ T5952] usb 2-1: USB disconnect, device number 53
[  531.690951][T10758] usb 2-1: Couldn't submit interrupt_out_urb -19
[  531.875388][   T92] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  531.933845][ T5866] usb 1-1: USB disconnect, device number 52
[  532.395298][ T5954] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  532.563055][ T5954] usb 3-1: Using ep0 maxpacket: 16
[  534.182154][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'.
[  534.195416][T10794] tipc: Enabled bearer <udp:syz2>, priority 10
[  534.347504][   T92] usb 5-1: unable to get BOS descriptor or descriptor too short
[  534.369607][   T92] usb 5-1: unable to read config index 0 descriptor/start: -71
[  534.389426][   T92] usb 5-1: can't read configurations, error -71
[  535.312202][ T5959] tipc: Node number set to 1978094852
[  535.990424][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short
[  536.003605][ T5954] usb 3-1: unable to read config index 0 descriptor/start: -71
[  536.196113][ T5954] usb 3-1: can't read configurations, error -71
[  537.045437][ T5938] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  537.335329][ T5938] usb 1-1: Using ep0 maxpacket: 32
[  537.342464][ T5938] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  537.428246][ T5938] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  537.454554][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.478042][ T5938] usb 1-1: Product: syz
[  537.486338][ T5938] usb 1-1: Manufacturer: syz
[  537.499414][ T5938] usb 1-1: SerialNumber: syz
[  537.540855][ T5938] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input33
[  537.847643][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.945771][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.380296][ T8062] schedule_timeout: wrong timeout value ffffffffffffffff
[  538.392708][ T8062] CPU: 1 UID: 0 PID: 8062 Comm: vivid-005-sdr-c Not tainted syzkaller #0 PREEMPT(full) 
[  538.392728][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  538.392735][ T8062] Call Trace:
[  538.392741][ T8062]  <TASK>
[  538.392746][ T8062]  dump_stack_lvl+0x189/0x250
[  538.392770][ T8062]  ? __pfx_dump_stack_lvl+0x10/0x10
[  538.392790][ T8062]  ? __pfx__printk+0x10/0x10
[  538.392834][ T8062]  schedule_timeout+0x1e1/0x270
[  538.392859][ T8062]  ? __pfx_schedule_timeout+0x10/0x10
[  538.392884][ T8062]  ? prepare_to_wait_event+0x437/0x480
[  538.392903][ T8062]  vivid_thread_sdr_cap+0xa62/0xf80
[  538.392932][ T8062]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[  538.392961][ T8062]  ? __pfx_autoremove_wake_function+0x10/0x10
[  538.392982][ T8062]  ? __kthread_parkme+0x7b/0x200
[  538.393000][ T8062]  ? __kthread_parkme+0x1a1/0x200
[  538.393025][ T8062]  kthread+0x70e/0x8a0
[  538.393040][ T8062]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[  538.393050][ T8062]  ? __pfx_kthread+0x10/0x10
[  538.393064][ T8062]  ? _raw_spin_unlock_irq+0x23/0x50
[  538.393080][ T8062]  ? lockdep_hardirqs_on+0x9c/0x150
[  538.393096][ T8062]  ? __pfx_kthread+0x10/0x10
[  538.393119][ T8062]  ret_from_fork+0x3fc/0x770
[  538.393140][ T8062]  ? __pfx_ret_from_fork+0x10/0x10
[  538.393165][ T8062]  ? __switch_to_asm+0x39/0x70
[  538.393182][ T8062]  ? __switch_to_asm+0x33/0x70
[  538.393194][ T8062]  ? __pfx_kthread+0x10/0x10
[  538.393208][ T8062]  ret_from_fork_asm+0x1a/0x30
[  538.393231][ T8062]  </TASK>
[  538.703149][ T5866] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  538.911557][ T5866] usb 2-1: Using ep0 maxpacket: 8
[  538.976305][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  538.997815][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  539.106874][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  539.154524][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  539.172196][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  539.187538][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  539.195044][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  539.195408][ T5954] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  539.224276][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  539.289764][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  539.514301][ T5954] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  539.522940][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  539.523582][ T5954] usb 3-1: config 0 has no interface number 0
[  539.549969][ T5954] usb 3-1: config 0 interface 113 has no altsetting 0
[  539.561477][ T5866] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  539.569370][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  539.611204][ T5866] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  539.617064][ T5954] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  539.632380][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.652903][ T5954] usb 3-1: Product: syz
[  539.663654][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  539.682220][ T5954] usb 3-1: Manufacturer: syz
[  539.708083][ T5954] usb 3-1: SerialNumber: syz
[  539.746905][ T5954] usb 3-1: config 0 descriptor??
[  539.764191][ T5954] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  539.787357][ T5866] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  539.909216][ T5866] usb 2-1: string descriptor 0 read error: -22
[  539.917288][ T5866] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  539.926923][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.935741][ T5959] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  539.949675][ T5866] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  540.362287][ T5866] usb 2-1: USB disconnect, device number 54
[  540.373390][T10836] usb 2-1: Couldn't submit interrupt_out_urb -19
[  541.404852][ T5220] bcm5974 1-1:1.0: could not read from device
[  541.447809][ T5220] bcm5974 1-1:1.0: could not read from device
[  541.474988][ T5938] usb 1-1: USB disconnect, device number 53
[  541.534891][T10850] capability: warning: `syz.4.1235' uses deprecated v2 capabilities in a way that may be insecure
[  541.701894][T10857] fuse: Unknown parameter 'user_id00000000000000000000'
[  542.212324][ T5866] usb 3-1: USB disconnect, device number 50
[  542.467329][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short
[  542.476352][ T5959] usb 4-1: unable to read config index 0 descriptor/start: -71
[  542.483931][ T5959] usb 4-1: can't read configurations, error -71
[  542.831706][T10865] fuseblk: Bad value for 'fd'
[  544.584910][T10901] netlink: 'syz.4.1239': attribute type 4 has an invalid length.
[  544.638006][T10901] netlink: 'syz.4.1239': attribute type 4 has an invalid length.
[  544.674109][T10901] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  545.125273][ T5954] IPVS: starting estimator thread 0...
[  545.215267][T10918] IPVS: using max 25 ests per chain, 60000 per kthread
[  546.480592][T10942] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer.
[  547.982488][T10956] fuse: Unknown parameter 'user_id00000000000000000000'
[  548.908811][ T5938] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  548.966951][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'.
[  549.155415][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.190018][ T5938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  549.296347][ T5938] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  549.313047][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.407170][ T5938] usb 1-1: config 0 descriptor??
[  549.510461][ T5938] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  549.521685][ T5938] dvb-usb: bulk message failed: -22 (3/0)
[  549.573121][ T5938] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  549.624758][ T5938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  549.631992][ T5938] usb 1-1: media controller created
[  549.653875][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  549.693996][ T5938] dvb-usb: bulk message failed: -22 (6/0)
[  549.706373][ T5938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  549.765228][T10970] netlink: 'syz.0.1254': attribute type 7 has an invalid length.
[  549.775340][T10970] netlink: 'syz.0.1254': attribute type 8 has an invalid length.
[  549.784231][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34
[  549.834931][ T5938] dvb-usb: schedule remote query interval to 150 msecs.
[  549.867623][ T5938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  550.125328][ T1226] dvb-usb: bulk message failed: -22 (1/0)
[  550.168470][ T1226] dvb-usb: error while querying for an remote control event.
[  550.347134][ T1226] dvb-usb: bulk message failed: -22 (1/0)
[  550.410257][ T1226] dvb-usb: error while querying for an remote control event.
[  550.625291][ T1226] dvb-usb: bulk message failed: -22 (1/0)
[  550.697696][ T1226] dvb-usb: error while querying for an remote control event.
[  551.015458][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  551.021500][ T5938] dvb-usb: error while querying for an remote control event.
[  551.235657][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  551.353995][ T5938] dvb-usb: error while querying for an remote control event.
[  551.545490][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  551.561858][ T5938] dvb-usb: error while querying for an remote control event.
[  551.875534][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  551.886999][ T5938] dvb-usb: error while querying for an remote control event.
[  552.124653][ T5938] dvb-usb: bulk message failed: -22 (1/0)
[  552.175247][ T5938] dvb-usb: error while querying for an remote control event.
[  552.200316][ T5866] usb 1-1: USB disconnect, device number 54
[  552.284452][ T5866] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  552.515745][T10999] 
[  552.518228][T10999] =====================================================
[  552.525198][T10999] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  552.532654][T10999] syzkaller #0 Not tainted
[  552.537073][T10999] -----------------------------------------------------
[  552.544267][T10999] syz.0.1263/10999 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  552.551975][T10999] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  552.560667][T10999] 
[  552.560667][T10999] and this task is already holding:
[  552.568031][T10999] ffff8880293dd920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  552.576774][T10999] which would create a new lock dependency:
[  552.582691][T10999]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  552.590403][T10999] 
[  552.590403][T10999] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  552.599878][T10999]  (&dev->event_lock#2){..-.}-{3:3}
[  552.599911][T10999] 
[  552.599911][T10999] ... which became SOFTIRQ-irq-safe at:
[  552.612875][T10999]   lock_acquire+0x120/0x360
[  552.617479][T10999]   _raw_spin_lock_irqsave+0xa7/0xf0
[  552.622798][T10999]   input_inject_event+0xa5/0x340
[  552.627921][T10999]   led_trigger_event+0x138/0x210
[  552.632983][T10999]   kbd_bh+0x1c6/0x2e0
[  552.637100][T10999]   tasklet_action_common+0x36c/0x580
[  552.643037][T10999]   handle_softirqs+0x283/0x870
[  552.647910][T10999]   run_ksoftirqd+0x9b/0x100
[  552.652508][T10999]   smpboot_thread_fn+0x53f/0xa60
[  552.657658][T10999]   kthread+0x70e/0x8a0
[  552.662156][T10999]   ret_from_fork+0x3fc/0x770
[  552.666919][T10999]   ret_from_fork_asm+0x1a/0x30
[  552.671777][T10999] 
[  552.671777][T10999] to a SOFTIRQ-irq-unsafe lock:
[  552.678809][T10999]  (tasklist_lock){.+.+}-{3:3}
[  552.678834][T10999] 
[  552.678834][T10999] ... which became SOFTIRQ-irq-unsafe at:
[  552.691453][T10999] ...
[  552.691460][T10999]   lock_acquire+0x120/0x360
[  552.698718][T10999]   _raw_read_lock+0x36/0x50
[  552.703332][T10999]   __do_wait+0xde/0x740
[  552.707575][T10999]   do_wait+0x1f8/0x520
[  552.711735][T10999]   kernel_wait+0xab/0x170
[  552.716155][T10999]   call_usermodehelper_exec_work+0xbe/0x230
[  552.722227][T10999]   process_scheduled_works+0xae1/0x17b0
[  552.727871][T10999]   worker_thread+0x8a0/0xda0
[  552.732575][T10999]   kthread+0x70e/0x8a0
[  552.736747][T10999]   ret_from_fork+0x3fc/0x770
[  552.741536][T10999]   ret_from_fork_asm+0x1a/0x30
[  552.746484][T10999] 
[  552.746484][T10999] other info that might help us debug this:
[  552.746484][T10999] 
[  552.756713][T10999] Chain exists of:
[  552.756713][T10999]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[  552.756713][T10999] 
[  552.769762][T10999]  Possible interrupt unsafe locking scenario:
[  552.769762][T10999] 
[  552.778117][T10999]        CPU0                    CPU1
[  552.783495][T10999]        ----                    ----
[  552.788887][T10999]   lock(tasklist_lock);
[  552.793197][T10999]                                local_irq_disable();
[  552.800071][T10999]                                lock(&dev->event_lock#2);
[  552.807294][T10999]                                lock(&f_owner->lock);
[  552.814150][T10999]   <Interrupt>
[  552.817612][T10999]     lock(&dev->event_lock#2);
[  552.822547][T10999] 
[  552.822547][T10999]  *** DEADLOCK ***
[  552.822547][T10999] 
[  552.830825][T10999] 2 locks held by syz.0.1263/10999:
[  552.836138][T10999]  #0: ffff8880312c3148 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0
[  552.844714][T10999]  #1: ffff8880293dd920 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  552.853891][T10999] 
[  552.853891][T10999] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  552.864449][T10999]    -> (&dev->event_lock#2){..-.}-{3:3} {
[  552.870439][T10999]       IN-SOFTIRQ-W at:
[  552.874718][T10999]                           lock_acquire+0x120/0x360
[  552.881429][T10999]                           _raw_spin_lock_irqsave+0xa7/0xf0
[  552.888908][T10999]                           input_inject_event+0xa5/0x340
[  552.896210][T10999]                           led_trigger_event+0x138/0x210
[  552.903338][T10999]                           kbd_bh+0x1c6/0x2e0
[  552.909597][T10999]                           tasklet_action_common+0x36c/0x580
[  552.917080][T10999]                           handle_softirqs+0x283/0x870
[  552.924029][T10999]                           run_ksoftirqd+0x9b/0x100
[  552.930703][T10999]                           smpboot_thread_fn+0x53f/0xa60
[  552.937810][T10999]                           kthread+0x70e/0x8a0
[  552.944053][T10999]                           ret_from_fork+0x3fc/0x770
[  552.950824][T10999]                           ret_from_fork_asm+0x1a/0x30
[  552.957805][T10999]       INITIAL USE at:
[  552.962014][T10999]                          lock_acquire+0x120/0x360
[  552.968637][T10999]                          _raw_spin_lock_irqsave+0xa7/0xf0
[  552.975937][T10999]                          input_inject_event+0xa5/0x340
[  552.982967][T10999]                          kbd_led_trigger_activate+0xbc/0x100
[  552.990617][T10999]                          led_trigger_set+0x52a/0x950
[  552.997970][T10999]                          led_trigger_set_default+0x260/0x2a0
[  553.005632][T10999]                          led_classdev_register_ext+0x73d/0x930
[  553.013353][T10999]                          input_leds_connect+0x517/0x790
[  553.020471][T10999]                          input_register_device+0xcfd/0x1140
[  553.028070][T10999]                          atkbd_connect+0x72e/0xa00
[  553.034790][T10999]                          serio_driver_probe+0x82/0xd0
[  553.041785][T10999]                          really_probe+0x26d/0x9e0
[  553.048489][T10999]                          __driver_probe_device+0x18c/0x2f0
[  553.055916][T10999]                          driver_probe_device+0x4f/0x430
[  553.063138][T10999]                          __driver_attach+0x452/0x700
[  553.070035][T10999]                          bus_for_each_dev+0x233/0x2b0
[  553.076994][T10999]                          serio_handle_event+0x1f9/0x8d0
[  553.084140][T10999]                          process_scheduled_works+0xae1/0x17b0
[  553.091789][T10999]                          worker_thread+0x8a0/0xda0
[  553.098490][T10999]                          kthread+0x70e/0x8a0
[  553.104785][T10999]                          ret_from_fork+0x3fc/0x770
[  553.111569][T10999]                          ret_from_fork_asm+0x1a/0x30
[  553.118459][T10999]     }
[  553.121243][T10999]     ... key      at: [<ffffffff99e30fa0>] input_allocate_device.__key.5+0x0/0x20
[  553.130719][T10999]   -> (&client->buffer_lock){....}-{3:3} {
[  553.136654][T10999]      INITIAL USE at:
[  553.140720][T10999]                        lock_acquire+0x120/0x360
[  553.147144][T10999]                        _raw_spin_lock+0x2e/0x40
[  553.153695][T10999]                        evdev_pass_values+0xb9/0xbd0
[  553.160659][T10999]                        evdev_events+0x1e6/0x340
[  553.167183][T10999]                        input_pass_values+0x288/0x890
[  553.174060][T10999]                        input_event_dispose+0x330/0x6b0
[  553.181174][T10999]                        input_inject_event+0x1dd/0x340
[  553.188133][T10999]                        evdev_write+0x2fc/0x480
[  553.194484][T10999]                        vfs_write+0x27b/0xb30
[  553.200791][T10999]                        ksys_write+0x145/0x250
[  553.207113][T10999]                        __do_fast_syscall_32+0xb6/0x2b0
[  553.214259][T10999]                        do_fast_syscall_32+0x34/0x80
[  553.221069][T10999]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.229378][T10999]    }
[  553.232152][T10999]    ... key      at: [<ffffffff99e31240>] evdev_open.__key.25+0x0/0x20
[  553.240583][T10999]    ... acquired at:
[  553.244572][T10999]    lock_acquire+0x120/0x360
[  553.249265][T10999]    _raw_spin_lock+0x2e/0x40
[  553.253944][T10999]    evdev_pass_values+0xb9/0xbd0
[  553.258987][T10999]    evdev_events+0x1e6/0x340
[  553.263664][T10999]    input_pass_values+0x288/0x890
[  553.268773][T10999]    input_event_dispose+0x330/0x6b0
[  553.274061][T10999]    input_inject_event+0x1dd/0x340
[  553.279259][T10999]    evdev_write+0x2fc/0x480
[  553.283849][T10999]    vfs_write+0x27b/0xb30
[  553.288363][T10999]    ksys_write+0x145/0x250
[  553.292895][T10999]    __do_fast_syscall_32+0xb6/0x2b0
[  553.298296][T10999]    do_fast_syscall_32+0x34/0x80
[  553.303427][T10999]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.310005][T10999] 
[  553.312366][T10999]  -> (&new->fa_lock){...-}-{3:3} {
[  553.317614][T10999]     IN-SOFTIRQ-R at:
[  553.321770][T10999]                       lock_acquire+0x120/0x360
[  553.328208][T10999]                       _raw_read_lock_irqsave+0xaf/0x100
[  553.335390][T10999]                       kill_fasync+0x199/0x4d0
[  553.341690][T10999]                       sock_wake_async+0x137/0x160
[  553.348309][T10999]                       sock_def_readable+0x3bb/0x550
[  553.355279][T10999]                       __sock_queue_rcv_skb+0x6a5/0x9c0
[  553.362329][T10999]                       sock_queue_rcv_skb_reason+0xc0/0x190
[  553.369787][T10999]                       raw_rcv+0x74b/0x9d0
[  553.375779][T10999]                       raw_local_deliver+0x9ee/0xe90
[  553.382553][T10999]                       ip_protocol_deliver_rcu+0x46/0x440
[  553.389757][T10999]                       ip_local_deliver_finish+0x3bb/0x6f0
[  553.397075][T10999]                       NF_HOOK+0x309/0x3a0
[  553.403001][T10999]                       NF_HOOK+0x309/0x3a0
[  553.408914][T10999]                       __netif_receive_skb+0x143/0x380
[  553.415877][T10999]                       process_backlog+0x60e/0x14f0
[  553.422594][T10999]                       __napi_poll+0xc4/0x360
[  553.428840][T10999]                       net_rx_action+0x707/0xe30
[  553.435257][T10999]                       handle_softirqs+0x283/0x870
[  553.441843][T10999]                       do_softirq+0xec/0x180
[  553.447937][T10999]                       __local_bh_enable_ip+0x17d/0x1c0
[  553.455014][T10999]                       __dev_queue_xmit+0x1d79/0x3b50
[  553.462044][T10999]                       ip_finish_output2+0xd03/0x1160
[  553.468922][T10999]                       ip_output+0x2a1/0x3c0
[  553.475084][T10999]                       ip_push_pending_frames+0xbe/0x150
[  553.482197][T10999]                       raw_sendmsg+0x1440/0x18b0
[  553.488703][T10999]                       __sock_sendmsg+0x19c/0x270
[  553.495207][T10999]                       __sys_sendto+0x3bd/0x520
[  553.501549][T10999]                       __ia32_sys_sendto+0xdd/0x100
[  553.508225][T10999]                       __do_fast_syscall_32+0xb6/0x2b0
[  553.515196][T10999]                       do_fast_syscall_32+0x34/0x80
[  553.521965][T10999]                       entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.530139][T10999]     INITIAL USE at:
[  553.534209][T10999]                      lock_acquire+0x120/0x360
[  553.540495][T10999]                      _raw_write_lock_irq+0xa2/0xf0
[  553.547218][T10999]                      fasync_remove_entry+0xf1/0x1c0
[  553.554028][T10999]                      tty_fasync+0x13c/0x350
[  553.560136][T10999]                      __fput+0x8a2/0xa70
[  553.566150][T10999]                      task_work_run+0x1d1/0x260
[  553.572496][T10999]                      exit_to_user_mode_loop+0xec/0x110
[  553.579702][T10999]                      __do_fast_syscall_32+0x1f4/0x2b0
[  553.586723][T10999]                      do_fast_syscall_32+0x34/0x80
[  553.593334][T10999]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.601433][T10999]     INITIAL READ USE at:
[  553.605872][T10999]                           lock_acquire+0x120/0x360
[  553.612562][T10999]                           _raw_read_lock_irqsave+0xaf/0x100
[  553.620033][T10999]                           kill_fasync+0x199/0x4d0
[  553.626638][T10999]                           lease_break_callback+0x26/0x30
[  553.633959][T10999]                           __break_lease+0x6a2/0x1620
[  553.640827][T10999]                           do_dentry_open+0x8b7/0x13f0
[  553.647763][T10999]                           vfs_open+0x3b/0x340
[  553.654056][T10999]                           dentry_open+0x61/0xa0
[  553.660628][T10999]                           do_mq_open+0x59e/0x780
[  553.667276][T10999]                           __ia32_compat_sys_mq_open+0x1f9/0x250
[  553.675369][T10999]                           __do_fast_syscall_32+0xb6/0x2b0
[  553.683072][T10999]                           do_fast_syscall_32+0x34/0x80
[  553.690181][T10999]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.698803][T10999]   }
[  553.701495][T10999]   ... key      at: [<ffffffff99b31fc0>] fasync_insert_entry.__key+0x0/0x20
[  553.710269][T10999]   ... acquired at:
[  553.714177][T10999]    lock_acquire+0x120/0x360
[  553.718861][T10999]    _raw_read_lock_irqsave+0xaf/0x100
[  553.724412][T10999]    kill_fasync+0x199/0x4d0
[  553.729035][T10999]    evdev_pass_values+0x627/0xbd0
[  553.734148][T10999]    evdev_events+0x1e6/0x340
[  553.738830][T10999]    input_pass_values+0x288/0x890
[  553.743983][T10999]    input_event_dispose+0x330/0x6b0
[  553.749294][T10999]    input_inject_event+0x1dd/0x340
[  553.754520][T10999]    evdev_write+0x2fc/0x480
[  553.759143][T10999]    vfs_write+0x27b/0xb30
[  553.763593][T10999]    ksys_write+0x145/0x250
[  553.768116][T10999]    __do_fast_syscall_32+0xb6/0x2b0
[  553.773459][T10999]    do_fast_syscall_32+0x34/0x80
[  553.778500][T10999]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.785006][T10999] 
[  553.787329][T10999] -> (&f_owner->lock){....}-{3:3} {
[  553.792566][T10999]    INITIAL USE at:
[  553.796464][T10999]                    lock_acquire+0x120/0x360
[  553.802580][T10999]                    _raw_write_lock_irq+0xa2/0xf0
[  553.809110][T10999]                    __f_setown+0x67/0x370
[  553.815030][T10999]                    tty_fasync+0x2dc/0x350
[  553.821141][T10999]                    do_fcntl+0x1096/0x1910
[  553.827152][T10999]                    do_compat_fcntl64+0x477/0x720
[  553.833925][T10999]                    __do_fast_syscall_32+0xb6/0x2b0
[  553.840707][T10999]                    do_fast_syscall_32+0x34/0x80
[  553.847230][T10999]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.855159][T10999]    INITIAL READ USE at:
[  553.859524][T10999]                         lock_acquire+0x120/0x360
[  553.866142][T10999]                         _raw_read_lock_irqsave+0xaf/0x100
[  553.873530][T10999]                         send_sigio+0x38/0x370
[  553.879860][T10999]                         kill_fasync+0x24d/0x4d0
[  553.886272][T10999]                         lease_break_callback+0x26/0x30
[  553.893469][T10999]                         __break_lease+0x6a2/0x1620
[  553.900179][T10999]                         do_dentry_open+0x8b7/0x13f0
[  553.906950][T10999]                         vfs_open+0x3b/0x340
[  553.913220][T10999]                         dentry_open+0x61/0xa0
[  553.919769][T10999]                         do_mq_open+0x59e/0x780
[  553.926381][T10999]                         __ia32_compat_sys_mq_open+0x1f9/0x250
[  553.934035][T10999]                         __do_fast_syscall_32+0xb6/0x2b0
[  553.941270][T10999]                         do_fast_syscall_32+0x34/0x80
[  553.948190][T10999]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  553.956558][T10999]  }
[  553.959072][T10999]  ... key      at: [<ffffffff99b31fa0>] file_f_owner_allocate.__key+0x0/0x20
[  553.967934][T10999]  ... acquired at:
[  553.971736][T10999]    lock_acquire+0x120/0x360
[  553.976417][T10999]    _raw_read_lock_irqsave+0xaf/0x100
[  553.981882][T10999]    send_sigio+0x38/0x370
[  553.986295][T10999]    kill_fasync+0x24d/0x4d0
[  553.990893][T10999]    lease_break_callback+0x26/0x30
[  553.996099][T10999]    __break_lease+0x6a2/0x1620
[  554.000984][T10999]    do_dentry_open+0x8b7/0x13f0
[  554.005942][T10999]    vfs_open+0x3b/0x340
[  554.010178][T10999]    dentry_open+0x61/0xa0
[  554.014594][T10999]    do_mq_open+0x59e/0x780
[  554.019105][T10999]    __ia32_compat_sys_mq_open+0x1f9/0x250
[  554.024912][T10999]    __do_fast_syscall_32+0xb6/0x2b0
[  554.030203][T10999]    do_fast_syscall_32+0x34/0x80
[  554.035237][T10999]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  554.041737][T10999] 
[  554.044059][T10999] 
[  554.044059][T10999] the dependencies between the lock to be acquired
[  554.044067][T10999]  and SOFTIRQ-irq-unsafe lock:
[  554.057637][T10999] -> (tasklist_lock){.+.+}-{3:3} {
[  554.062969][T10999]    HARDIRQ-ON-R at:
[  554.066979][T10999]                     lock_acquire+0x120/0x360
[  554.073163][T10999]                     _raw_read_lock+0x36/0x50
[  554.079331][T10999]                     __do_wait+0xde/0x740
[  554.085155][T10999]                     do_wait+0x1f8/0x520
[  554.090887][T10999]                     kernel_wait+0xab/0x170
[  554.096866][T10999]                     call_usermodehelper_exec_work+0xbe/0x230
[  554.104413][T10999]                     process_scheduled_works+0xae1/0x17b0
[  554.111615][T10999]                     worker_thread+0x8a0/0xda0
[  554.117877][T10999]                     kthread+0x70e/0x8a0
[  554.123635][T10999]                     ret_from_fork+0x3fc/0x770
[  554.129902][T10999]                     ret_from_fork_asm+0x1a/0x30
[  554.136338][T10999]    SOFTIRQ-ON-R at:
[  554.140332][T10999]                     lock_acquire+0x120/0x360
[  554.146507][T10999]                     _raw_read_lock+0x36/0x50
[  554.152702][T10999]                     __do_wait+0xde/0x740
[  554.158534][T10999]                     do_wait+0x1f8/0x520
[  554.164260][T10999]                     kernel_wait+0xab/0x170
[  554.170247][T10999]                     call_usermodehelper_exec_work+0xbe/0x230
[  554.177799][T10999]                     process_scheduled_works+0xae1/0x17b0
[  554.185166][T10999]                     worker_thread+0x8a0/0xda0
[  554.191408][T10999]                     kthread+0x70e/0x8a0
[  554.197139][T10999]                     ret_from_fork+0x3fc/0x770
[  554.203730][T10999]                     ret_from_fork_asm+0x1a/0x30
[  554.210147][T10999]    INITIAL USE at:
[  554.214044][T10999]                    lock_acquire+0x120/0x360
[  554.220288][T10999]                    _raw_write_lock_irq+0xa2/0xf0
[  554.226809][T10999]                    copy_process+0x224f/0x3c00
[  554.233152][T10999]                    kernel_clone+0x21e/0x840
[  554.239649][T10999]                    user_mode_thread+0xdd/0x140
[  554.245999][T10999]                    rest_init+0x23/0x300
[  554.251720][T10999]                    start_kernel+0x3a9/0x410
[  554.257791][T10999]                    x86_64_start_reservations+0x24/0x30
[  554.264823][T10999]                    x86_64_start_kernel+0x143/0x1c0
[  554.271525][T10999]                    common_startup_64+0x13e/0x147
[  554.278058][T10999]    INITIAL READ USE at:
[  554.282402][T10999]                         lock_acquire+0x120/0x360
[  554.289012][T10999]                         _raw_read_lock+0x36/0x50
[  554.295541][T10999]                         __do_wait+0xde/0x740
[  554.301782][T10999]                         do_wait+0x1f8/0x520
[  554.307849][T10999]                         kernel_wait+0xab/0x170
[  554.314177][T10999]                         call_usermodehelper_exec_work+0xbe/0x230
[  554.322078][T10999]                         process_scheduled_works+0xae1/0x17b0
[  554.329633][T10999]                         worker_thread+0x8a0/0xda0
[  554.336246][T10999]                         kthread+0x70e/0x8a0
[  554.342332][T10999]                         ret_from_fork+0x3fc/0x770
[  554.348941][T10999]                         ret_from_fork_asm+0x1a/0x30
[  554.355816][T10999]  }
[  554.358330][T10999]  ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  554.366073][T10999]  ... acquired at:
[  554.369879][T10999]    lock_acquire+0x120/0x360
[  554.374562][T10999]    _raw_read_lock+0x36/0x50
[  554.379251][T10999]    send_sigurg+0x12b/0x420
[  554.383838][T10999]    sk_send_sigurg+0x6c/0x2e0
[  554.388628][T10999]    queue_oob+0x420/0x4f0
[  554.393080][T10999]    unix_stream_sendmsg+0xc3f/0xdf0
[  554.398385][T10999]    __sock_sendmsg+0x21c/0x270
[  554.403317][T10999]    ____sys_sendmsg+0x52d/0x830
[  554.408265][T10999]    ___sys_sendmsg+0x21f/0x2a0
[  554.413119][T10999]    __sys_sendmmsg+0x28e/0x430
[  554.417977][T10999]    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  554.423705][T10999]    __do_fast_syscall_32+0xb6/0x2b0
[  554.428988][T10999]    do_fast_syscall_32+0x34/0x80
[  554.434028][T10999]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  554.440554][T10999] 
[  554.442888][T10999] 
[  554.442888][T10999] stack backtrace:
[  554.448845][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.0.1263 Not tainted syzkaller #0 PREEMPT(full) 
[  554.448864][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  554.448873][T10999] Call Trace:
[  554.448882][T10999]  <TASK>
[  554.448889][T10999]  dump_stack_lvl+0x189/0x250
[  554.448911][T10999]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.448927][T10999]  ? __pfx__printk+0x10/0x10
[  554.448949][T10999]  validate_chain+0x1f05/0x2140
[  554.448971][T10999]  __lock_acquire+0xab9/0xd20
[  554.448993][T10999]  ? send_sigurg+0x12b/0x420
[  554.449007][T10999]  lock_acquire+0x120/0x360
[  554.449026][T10999]  ? send_sigurg+0x12b/0x420
[  554.449040][T10999]  ? _raw_read_lock_irqsave+0xbb/0x100
[  554.449065][T10999]  _raw_read_lock+0x36/0x50
[  554.449084][T10999]  ? send_sigurg+0x12b/0x420
[  554.449097][T10999]  send_sigurg+0x12b/0x420
[  554.449113][T10999]  sk_send_sigurg+0x6c/0x2e0
[  554.449134][T10999]  queue_oob+0x420/0x4f0
[  554.449155][T10999]  ? __pfx_queue_oob+0x10/0x10
[  554.449175][T10999]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  554.449200][T10999]  unix_stream_sendmsg+0xc3f/0xdf0
[  554.449221][T10999]  ? __lock_acquire+0xab9/0xd20
[  554.449242][T10999]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  554.449261][T10999]  ? __asan_memset+0x22/0x50
[  554.449276][T10999]  ? __import_iovec+0x5d4/0x7f0
[  554.449293][T10999]  ? aa_sock_msg_perm+0xda/0x1d0
[  554.449307][T10999]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  554.449321][T10999]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  554.449340][T10999]  __sock_sendmsg+0x21c/0x270
[  554.449361][T10999]  ____sys_sendmsg+0x52d/0x830
[  554.449379][T10999]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.449397][T10999]  ? futex_unqueue+0x22/0x240
[  554.449411][T10999]  ? futex_unqueue+0x22/0x240
[  554.449427][T10999]  ___sys_sendmsg+0x21f/0x2a0
[  554.449445][T10999]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.449472][T10999]  ? __fget_files+0x2a/0x420
[  554.449483][T10999]  ? __fget_files+0x3a0/0x420
[  554.449497][T10999]  __sys_sendmmsg+0x28e/0x430
[  554.449515][T10999]  ? __pfx___sys_sendmmsg+0x10/0x10
[  554.449534][T10999]  ? __pfx_do_futex+0x10/0x10
[  554.449558][T10999]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  554.449576][T10999]  __do_fast_syscall_32+0xb6/0x2b0
[  554.449591][T10999]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.449606][T10999]  do_fast_syscall_32+0x34/0x80
[  554.449620][T10999]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  554.449637][T10999] RIP: 0023:0xf707e539
[  554.449650][T10999] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  554.449662][T10999] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  554.449679][T10999] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080006c40
[  554.449689][T10999] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000
[  554.449698][T10999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  554.449706][T10999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  554.449714][T10999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  554.449728][T10999]  </TASK>
[  554.937431][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'.
[  554.948370][T10999] IPv6: NLM_F_CREATE should be specified when creating new route