last executing test programs:

11.158597122s ago: executing program 2 (id=3981):
io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x3b42, 0x2, 0xfffffffe, 0x2})
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf1981808000000000000000ea"], 0x1c}}, 0x884)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0)
write(r3, &(0x7f0000000240)="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", 0xff)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001080)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x50}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x4, 0x6, 0x4, 0x100000, 0xa, {}, {0x3, 0x0, 0x7, 0x7f, 0x2, 0x5, "2d6217c5"}, 0x40, 0x2, {0x0}, 0x9d96125})
syz_usb_disconnect(r0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x44000)

9.578211508s ago: executing program 0 (id=3990):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000140)=')\x00', 0x80, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0xb]}, {0xf, 0x9, 0x4, 0x382b}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0xef4})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000f65200010000d31785ad5f000000000000000000009f0abdc182f2f840"], 0x20}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
poll(&(0x7f0000000240)=[{r4}], 0x1, 0x423ff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x1000)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000380)=""/182, &(0x7f0000000440)=0xb6)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000008c0)={0x0, 0x200})
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000)

7.813319439s ago: executing program 4 (id=3998):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x4) (async, rerun: 64)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0) (rerun: 64)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r2=>0xffffffffffffffff}}, './file0\x00'})
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x8) (async)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xc0000000) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000040)=0x5f) (async)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

7.303841675s ago: executing program 2 (id=3999):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040))
prctl$PR_SET_SECUREBITS(0x1c, 0xc)
prctl$PR_SET_SECUREBITS(0x1c, 0x34)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x10b)
faccessat2(r3, &(0x7f00000000c0)='./file0\x00', 0x49, 0x0)

6.862947737s ago: executing program 2 (id=4001):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6(0xa, 0x800, 0x1000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = syz_ublk_setup_io_uring(0x369f, &(0x7f00000006c0)={0x0, 0x7816, 0x2, 0x3, 0x2d2}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0))
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7, 0x0, r3})
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.101801116s ago: executing program 3 (id=4003):
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
timer_create(0x3, 0x0, &(0x7f0000000200)=<r1=>0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_gettime(r1, &(0x7f0000000000))
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

5.262566021s ago: executing program 2 (id=4004):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00')
fchdir(r0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000)
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000240)={{@local, 0x6}, 0x1, 0x5})
ioctl$LOOP_CONFIGURE(r1, 0x125d, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eabff1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = socket$inet(0x2, 0xa, 0xc)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000000200)={r0, &(0x7f0000000080)=':\x00', 0x208400, &(0x7f0000000100)={@align=0x6, {0x2, 0x9, 0x7, 0xe1}}, 0x41, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4})
ioctl$sock_ifreq(r7, 0x8922, &(0x7f00000000c0)={'virt_wifi0\x00', @ifru_addrs=@qipcrtr={0x2a, 0x0, 0x7fff}})
r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xa, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000340)={0x20, 0x31, 0x6, "c0d1d4fe412b"}, 0x0, 0x0})
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1198ab8", 0xc3}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

5.099697068s ago: executing program 3 (id=4005):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000200)=0x1e) (async, rerun: 64)
r4 = socket(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}]}, 0x38}}, 0x4000) (async, rerun: 32)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0) (rerun: 32)
write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1500471ad69d914400"/21], 0x15) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})

5.069551793s ago: executing program 3 (id=4006):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x1728, 0x2c, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xe}, {0xa, 0xc}, {0xfff2, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1280, 0x2, [@TCA_CGROUP_POLICE={0x4a4, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x0, 0x7fffffff, 0x5, 0xfffffffe, {0x5, 0x0, 0x10, 0x5, 0xffff, 0x1}, {0x2, 0x1, 0x9, 0x9, 0x6, 0xe}, 0x5, 0x80000001, 0x2e7c}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfffffff7, 0x5, 0x8001, 0xc5, 0x2, 0x3, 0x1dea, 0x4, 0x9, 0x8e, 0x6, 0xe, 0x2, 0x4, 0x7191073a, 0x401, 0x0, 0x81, 0x3, 0x4, 0xfffff800, 0x9, 0x8, 0x0, 0x3b3, 0x6, 0x8, 0x97b, 0x0, 0x8, 0xd7c, 0x2, 0x8, 0x5, 0x73, 0x100, 0x2, 0x0, 0x41f, 0x491, 0x5, 0x101, 0x4, 0x4, 0x2, 0x0, 0x9, 0x81, 0x10, 0xd52a, 0x0, 0x7, 0x1, 0x4, 0x100, 0x6, 0xbe1, 0xaa, 0xd, 0x2, 0x5, 0x3b2ffb8f, 0x2, 0x84f, 0x7fffffff, 0x1, 0x2, 0xf, 0x11e2, 0xfff, 0x1, 0xb, 0x7, 0x2, 0x6, 0xb, 0x6d, 0x0, 0xf, 0x3, 0x2, 0x904, 0x0, 0x1, 0x8, 0x5, 0x0, 0x9, 0x0, 0x3, 0x6, 0x200, 0x1, 0x8, 0xfffffffe, 0x1, 0x7, 0x3, 0x1ff, 0x3, 0x3, 0x2, 0x5, 0x4, 0x6a080000, 0x6, 0x5, 0xd368, 0x7, 0x8, 0x43fd, 0x3, 0x1, 0x0, 0x40, 0xffffffff, 0xcc9d, 0x80000000, 0x2, 0x39a9, 0x6, 0x5, 0x7, 0x4, 0x3, 0x7c, 0x71b9, 0x8000, 0x3ff, 0x9, 0x400, 0x3, 0x5, 0x1, 0x49, 0x12a, 0x3, 0x7f, 0x7, 0x4, 0xe9, 0x87a, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x80000000, 0x4, 0x0, 0x4, 0x83f2, 0xffffc951, 0x7fff, 0xfffffff1, 0xffff, 0x8001, 0xc, 0x1, 0x0, 0x9, 0xfffffffd, 0x4, 0x4, 0x401, 0x9, 0x2, 0x3, 0xff, 0x10001, 0x0, 0x200, 0xbb46, 0x1fc1, 0xc00, 0xa, 0x31089a35, 0x2, 0x3, 0xf, 0xe9a4, 0x26c034d8, 0x0, 0x62b, 0x8, 0x4, 0x6, 0x2, 0x4, 0x8, 0x5, 0x6, 0x10001, 0x1, 0x3, 0x2, 0xe010, 0x3, 0x6, 0x715a, 0x41f, 0x8, 0x6, 0x6, 0xae49, 0x6, 0x0, 0x2, 0x81, 0xdc97, 0x6, 0xf, 0x0, 0x9, 0x5440, 0x7fffffff, 0x7, 0x9, 0x0, 0x1, 0xfffffff8, 0x800, 0x0, 0x5, 0x2, 0x0, 0xd15f, 0x81, 0x50a, 0x5, 0xfffffffa, 0x4b, 0xb9, 0x3, 0x4, 0x2, 0x5, 0x8, 0x1, 0x1, 0x3ff, 0x5, 0x6, 0x89d, 0x80, 0x8, 0x5, 0x1, 0x3, 0x0, 0x2, 0x5, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x7, 0xad, 0x10000, 0x8001, {0x4a, 0x0, 0x5, 0x1c, 0xb, 0x80000001}, {0x3, 0x1, 0x4, 0x2, 0x7, 0x3}, 0x2, 0x5, 0xfffff9f3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_CGROUP_ACT={0x6c8, 0x1, [@m_gact={0x128, 0xd, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xaf3e, 0xbb, 0x5, 0xc8, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x79d, 0x7, 0x90}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xf89, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8a5, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x95, 0x3}}]}, {0xa8, 0x6, "cc29da3584be0440fc76b471f7d1ada00bb28154092db941f32f9770e6def3ece6d6b483ad0ddb185d04ebb9817c8fba5f2f7ef3a76f463ca2a86b8b6ac6b561733cdb70336da132960893e5fe5488defbe0719880305d7aa22d4e2dbffabee588b718e5f1db9450a16dbe34807b90db85ffbfe14a30265f8aeac3483ad05fffa02bea42cfd40d02b334857e0678d29e6fdce6b84387a00cde4c10b4b14492f7781a22d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xf0, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xc0, 0x6, "3564491211cafb62216326a00d059e7af7c4bd429382780315633732548f81214dfa8974dd0e353c14948300c6e0fd0d518e893c9b303322a260c34b4a3f2923098491eb5a6edea7450de2410e7e01f8f4ea00cddec7b3ad4ec698ba8932925a1de097f3720ac79f45a7e47a474dae7d6f02087d09c09d04b0c3f2c06bf4889991fe47fc91f06f819897b6fb12e721339a55273e398d0a500957987bd75eb12902be1b7b1b92d34449e2c44425699b29c1122a7cba50a9a058a2b6d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_gact={0x138, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x6, 0x0, 0x2, 0x2}}]}, {0xf4, 0x6, "39bc82c46283c2a8ecf91ef935603d3244864442939082b13d02fd86fd5395f56eaa9aca28838a0f32c48bc5e3e4b36cb2088cc04b72fa515c2d1c6b52de667390dfcab60c0d1c333d79d4ac76f7fb1af0b897587978a1cd3e4736d256939509ea43b868abf82838837407ef709e997964e7b489eb8678766e79d0a0f695ea007e0e8029e1c815a9a3812d5dd542c0b2a9ff426cc4453209af45ffe4bf0b51007a701ab23f29535dc455c716ccef60573bb40f8f280fbb9bc5f834e824f18af693a546b53664ab555dd78cd19ac70277b216b313c6708aecbbbd6a487878d2ab57a8e9eabcc71cf0dd186c34fd37aaac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0xec, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0xb9, 0x6, "5fcaf7764c7b1115a7bf928c51b848525c906e337246dced27b3b0e952cf9bf0773d8c42ec1a32ad2939dbf3cc7133398f9c69bbacbbb1aaf55cc06884ccdf0772172080ccfd2ef9ee198082587efada35a9970a56e9aed1c2b5989cd9258881446f5cb6c637c30a2328a47a2148d60f9f7a5cac91325cffbb3c419f1dc457fec40b4110605924a39aaa72d23618d56c6a18d8b9bf521bcf26904d91c5e76cee1be70326df4cec60bd3d7f0b2626c1053b04bd66bc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x124, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x10, 0x1, 0x8, 0xc}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xd8, 0x6, "34c9bf87f89845a11824ae28059e80e457fd63a87cf15fe3f0047c67f2a4bc5ce08c2a33bf51a56fdcda9a2357d5292cae667d15e1ab4e3d3e62e7f85a4665d861d4761db2eaa84f873d2bb3a445653d31668d3e355755c8e4ff2defd203efb78bfb11243a12c2d354f7489dfc51f01944f0005711b42609d4293e037313f6b05960e907c3aabb59825c260fb16243d4b24ed151cc62a446cb913d9f60ee885bd26d6c2a682d07a86196033f6bdce168e774ae3a47292a019d689ba64b51a67858956e5f59dd2c5c20ded097218f0e1da77fef1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x64, 0x17, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, {0x20, 0x6, "b22e1a8faafe171b92f640c280268e577ab3872b1ce934dc227b0e3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x100, 0xa, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x3, 0x29f3149e883c7410, 0x2, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd590}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xa0000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x713}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x8a, 0x6, "ee0be7d95c870159a4dd466816fe771ca0b06fb93750ffbb88436a57a8e38a1198c8d3cc2a32f2a9fcd01f11ee645388952151485e970f2e90432d5381d9776628a774207aea216ade0e4a57e32989733438befa80c65cb60536d48f069b63e4deb0fb56e381ebafa6c8d08bfd4980c7e3dd9bd81e7719d2cca566de05ceb306ef708e761bf3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x6f4, 0x1, [@m_mpls={0x98, 0x10, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4e67e}, @TCA_MPLS_BOS={0x5}]}, {0x41, 0x6, "262dc0b1eb3053467d19d92bf09f0cee3b17dba302b9c3fb22bbfaaaa669a878deffc00de330b03f5c17f13c196f5e6124645a2a12b9ad26ca3aa5ae2c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xf8, 0x9, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x3, 0x2, 0x4, 0x3}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0xa1, 0x6, "13537f1aac248725386a9ba4acf33550211a628a8ecf963130ba0f2baae798725a8cb4b706ba0e89116f1deeb61b172d1ac4ca678411b9521ba882a41290f08b9be9953dabc509f90e9c43ec491be7708a9d7143f52214ffdc4675c7125c034a9c7c295bea445d253a6310eaa5d8a09a3898d45de3a13c0624573eabb698a2448da33e07988436f31fb383bdcff93d35e2f1be30e597fa373dc70fd113"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x24c, 0x1b, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x20000000, 0x300, 0x9}, @private=0xa010101, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x57, 0xffffffffffffffff, 0x1, 0x3}, @broadcast, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x6, 0x8, 0x7, 0x1}, @rand_addr=0x64010100, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x8, 0x4, 0x6}, @broadcast, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x8, 0xffffffffffffffff, 0xadd, 0x8}, @private=0xa010102, @remote, 0xffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x800, 0x3, 0x3}, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x841c, 0x7, 0x3, 0x7}, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffa, 0x1, 0xffffffffffffffff, 0xc, 0x2}, @broadcast, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x91, 0x10000000, 0x1000, 0x9}, @loopback, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffb, 0x3, 0x2, 0x6}, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, 0xff000000}}]}, {0x91, 0x6, "621db24ea5f865382a52022be25415e4259659618a671f1309c4b6046bceb3a3dcbd1a2b73a228eda58fbdf9217ac5570da1941f5da87d22251429b90482bf310c4b83ad9b53860d2258e3a0bd16f62d12a1dddcd0bcb956ae8c37b6c1c32852f86554df89f93ed8df1ec0d4424cba825026f8220a62d814edd67c3eec07c3e124868e409eae2f83977b9c1a5f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x160, 0xa, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5337, 0xffff3a95, 0x8, 0x7, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0xa5, 0x6, 0x0, 0x3}}]}, {0xea, 0x6, "4a310f38786b8bce6dea95d13c4821e9358aec464166d97c36547b57d689a4a3fdf113498710b50099f91325242dfd70667e482774068e34c0a2804a06d53a34e3a07779dc54146436673036808e644180f06a75ef6de52eabc7b9a01b260f3969eba51a0f5602a0231d4f60b28dcef0b08191b2d9e999f3f040088c9cf5eb67a6c3a7afc1e7e508b76463569e051a5dd7321a46a1b66056e565645ae22fd764fa8b880cbd593d87a16504af1eca478c1dc545c20439d7e9a16cf52233dc6b386b595cf15dc3192bbab09444c4f709e4ede4bc9a84965e3a160a30ac5c72b66f25299161d073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x2, 'filter\x00', 0x6, 0x1, "92f4b80a16b36fd83987701ceb5431cda8c122c03299accea06d0df279a5bfa829495bfe89980bf583558ab521795b3b99d18885d4cc8ec837260e7b631431d0c7f730bee47f0f354c12d595bb6cdd6b5824fd8c8b3937"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0x55, 0x6, "fc637989a9decbb8396b29153dd9a948e1ffa5f70af18bfcd2292d1fa00a9bc100f1409acac5f38362d18a9abc02d4f90cbc71e237cb5196eea2d0385ba978d575cd6f1a711aaa2d7ad7c855bfa6d0c308"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xa0, 0x3, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x60, 0x6, "e34ac65d1a04ad7406d39218d27d456ae5318d1513de2d3ad2baf42a0d41d1f78753d771ed4de05b5d7132c6293a580273c9316ac00b56e3117d809bca5bfd0ac1fa112bfba4489261746b2c12ed43f8df64e33443660086ce97b042"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x1, 0x1, 0x1}, {0xb, 0x1, 0x0, 0x1}}}}]}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x458, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x43c, 0x2, [@m_sample={0x13c, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0xcf, 0x6, "5b2623cb210952eab7080ce746513b8ea3d34ebbd6e13f3014d83a0466e8b7878d2d8f41f09892c41b05cc7a3f7409fa7a63add6374b75a880cba17c4609ea6faa98f9d33ed24cbeec2cb236ed295216f2082f685f8bc7c3c0aefa78ef0113decefbf24cdb565e5eddb42d29c7ec7d065ecd324b8eaef887667a9d8a8f938dc23dd850f8be45b155b36a4380281f7e7585848ebd151156e906365a551a6e2177f514b3a5934decf0c66e8e1abaa0a4b85d7da49cb0c77088d9e4130aadd1faf007b650950c205a77bec0fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x138, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x3, 0x7, 0x6, 0xe}}]}, {0xea, 0x6, "567f6f4c1a459da10cbd7cc25286ef29479d71c6c7e16c68b08e3295bca76eaa06fa7fbad31cda6ba34fb6504fcd5ab788b040af246442eead77fac1ff32efd39b3d70ce65f7121162f3d2aaee0fa1a2d228d787cd0e2baf30b1326df79d19675d92432e762d8a5233a23548e6cb32559d01f5d3b962a76158e04c8f5f8f1a639a0cebfa60e7a03bb0d6952f57ed9831e47e344676c80ddd5319280e18ad4bba2bc597c917c84e7479c31d34b424b1a22718bcf6b2aad5a5e98f2ba050ae593337ed6450356e0c2f2abd0e3e7dbe8a131f8d0ce551346e1904efc3fa1f0978646e5d4f90bf81"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xb8, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, ':\\+[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x7, 0x20000000, 0x4, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3c, 0x2, 0x4, 0x2, 0xf6}}, @TCA_DEF_DATA={0xc, 0x3, '&\\,%\xf8#-\x00'}]}, {0x42, 0x6, "14dc890effd92ee392878c2cf38e34a1c55aac6ab24cd4954029e1c721957f28e844bb58258b55a19f6d3709cf89688ef52350373b6b372f6462ffa18189"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x10c, 0xd, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x101, 0x1, 0xe482, 0x7}}}]}, {0xb9, 0x6, "cb74cf4b0903484324f61241a2fbfb2f194005ad5a4b8e41f09fa83159babf47b1418195c4ddc8cee2f99f7e2a84108dd9620e0c39fa61a9474f406df395305fd016deeb5e335b0b8dd964c2eeb12267b8fdb85084226fb5635e6e4a788c69d3dcc1c54f618a8095cc3a4ead2d9a184ec4786a4641f3da524d5874f6eb4045855a361a022fd674ee323338c07884c5f15b4ebfbeafe6857a88e9cf5316a7d442a380ef9bbbbd2cf61924f19d12988745ae8e0011a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x8}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x55d}]}, 0x1728}}, 0x20000000)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10)

4.717977s ago: executing program 4 (id=4007):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
shutdown(r2, 0x1)

4.550471707s ago: executing program 4 (id=4008):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000070603000000000000000000070000020900020073797a30001fadce030006400000000905000100070000000900020073797a3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c)

3.839819514s ago: executing program 0 (id=4009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900050073797a30000000000900030073797a320000000054000000060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c0002800800014000000015050003000000000008000240000000150900010073797a3000000000140000001100010000000000000000000300000a"], 0xc8}}, 0x0)

3.761051197s ago: executing program 3 (id=4010):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfe94, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_usb_connect(0x4, 0x34, &(0x7f0000000080)=ANY=[], 0x0)

3.659762993s ago: executing program 4 (id=4012):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
readlink(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x48902)
ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000300)={0x1, 0x0, {0x1, 0x9, 0x9, 0x10000007}}) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100003052abd700000070000000000004aa6f56d3712b4fb83957e768e18a9f8c8fbaa276df38d9f32d6d4ee29e5f868d31818708930b568faf9fc47f4fcc014e97b28cd5845683b1e6504de6006774a6d0fbb9b0271d161a70e6232e3548e21d54b159770ee96", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c000280080004006401010208000a00", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x440b0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7})

3.605725376s ago: executing program 0 (id=4013):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x3a1c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x39e4, 0x2, [@TCA_CGROUP_ACT={0x39e0, 0x1, [@m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1ca0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x1, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x1cec, 0xb, 0x0, 0x0, {{0xa}, {0x1cc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x1, 0x20000000, 0xfffffffa, 0x3}, 0x9, 0x3}, [{0x9, 0x2, 0xc, 0x0, 0x7, 0x5}, {0x5, 0x40, 0x0, 0xda2, 0x8, 0x2db}, {0x10000, 0x3, 0xfff, 0x7, 0x0, 0xffffffff}, {0x1, 0x9, 0x2, 0x4a, 0x8, 0x10001}, {0x1000, 0x3, 0x1, 0x80, 0x7ff, 0xffffffff}, {0x8000, 0x81, 0xe, 0x6cdc, 0x9, 0xb5a7}, {0x2, 0x9, 0x40, 0x9, 0x2, 0xff}, {0x4, 0xfaa, 0x81, 0x400, 0xa395, 0x81}, {0x20000000, 0x0, 0x1, 0x8, 0x100, 0x2}, {0x2, 0x9, 0x5, 0x7, 0x0, 0xf33}, {0xb7a, 0x2, 0x3fe0000, 0x9, 0x2, 0x1}, {0x3, 0xff, 0x9, 0x4, 0xffff, 0x1}, {0x3, 0x4, 0xff, 0x3, 0x101, 0xfff}, {0x9, 0x2, 0x1000, 0x8001, 0x3, 0x3}, {0xc8, 0xffff8001, 0x9, 0x3, 0x1, 0x5}, {0x8, 0x8, 0x8, 0xff, 0x8001, 0x5}, {0x4, 0xffffffff, 0xda, 0x7, 0xfffffffc, 0xfffffff5}, {0x6, 0x8e91, 0xbea8, 0xfd4a, 0x0, 0xb07}, {0x3, 0x3, 0x5325, 0x9, 0x1, 0x8}, {0x2, 0xa97, 0x6, 0x0, 0x2000, 0x9}, {0x101, 0x5, 0x8d60, 0x0, 0x64, 0xb4}, {0x6, 0xda34, 0x3, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x8, 0x1ff, 0x7, 0x4}, {0xeb6, 0x4, 0x8, 0x9, 0xfffffff0, 0xfffffff9}, {0xe2d, 0x2, 0x6, 0x5, 0xa, 0x8}, {0x2, 0xbc15, 0x1, 0x2, 0x6, 0xffffffff}, {0x6, 0x6, 0x5, 0x7, 0x1000, 0x4}, {0xb, 0x9, 0x5, 0x0, 0xfffffffa, 0x8}, {0x0, 0x9, 0x7, 0x6, 0x9850, 0x7ff}, {0xffffffff, 0x7, 0xffff, 0x3}, {0x4, 0x9, 0x6c, 0xaa6, 0x62, 0xff}, {0x7ff, 0x5, 0x4, 0x7, 0x1, 0x2ee}, {0xfff, 0x4, 0x7f, 0xffffffff, 0xa26, 0x628}, {0x3, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x6, 0x3, 0x8, 0xa7c, 0x5795}, {0x2, 0x72a44795, 0x6da, 0x6, 0x2, 0x3}, {0xe48, 0x1, 0x8, 0x10000, 0xe7, 0x6}, {0x7, 0x0, 0xdaac, 0xe, 0xc66, 0xe4b}, {0x8, 0xb, 0x0, 0x8, 0x2, 0x3}, {0x989, 0x4, 0x24b6, 0x6, 0x7, 0x1}, {0x93, 0x0, 0x72a, 0x8, 0x8, 0x9}, {0x6, 0x1, 0x32, 0x8, 0x3, 0x4}, {0xf, 0x3, 0x401, 0x9, 0x1}, {0x2, 0x5, 0x5, 0xf, 0x7, 0x74ee}, {0x80000001, 0x23d, 0x5, 0x10000, 0x60a9, 0x2000000}, {0x9, 0x5, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x2, 0xff, 0x80000001, 0x8, 0x5}, {0x8001, 0xfffffc01, 0x1, 0x22, 0x2, 0x9}, {0x1, 0x0, 0x0, 0xfff, 0x8000, 0x5}, {0x7, 0xc, 0x80000001, 0x6, 0xfffffffc, 0x401}, {0xfffffffb, 0x1, 0x8, 0x7, 0x2437}, {0x8, 0x80, 0x1, 0xc1, 0x3, 0x1}, {0x8000, 0x7, 0x2, 0xffffffc0, 0x5, 0x9}, {0x7fff, 0x6, 0x7, 0x0, 0x100, 0x9}, {0x8001, 0xd, 0x80, 0x0, 0x172, 0x9652}, {0x6, 0x4, 0x1, 0x3, 0x680c, 0xfffffeff}, {0xff, 0x1, 0xa24, 0x9, 0x0, 0xfffff2cb}, {0x980d, 0x4, 0x4, 0x8f, 0x800007, 0x4}, {0x8, 0x100000, 0x4, 0x0, 0x7f, 0x4}, {0x6, 0x3813, 0x6, 0x9, 0xfffffffb, 0x7ff}, {0x7, 0x7, 0xfffffffa, 0x80010000, 0x7ff, 0xffff0000}, {0x8, 0x7de, 0x40, 0xff, 0x3, 0x99}, {0x101, 0x2, 0x9, 0xb4df, 0x7fff}, {0x2, 0x7, 0x5, 0x1, 0xffffffff, 0x5}, {0x6, 0x1, 0x7, 0x4, 0xdb, 0x20f9}, {0x80, 0xfffffffc, 0xc, 0x2, 0x5, 0x8000}, {0x9, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x0, 0x10001, 0x200, 0x8000, 0xffffffff, 0x4}, {0x8, 0xf, 0x9, 0xf, 0xa15e, 0x3}, {0x4, 0x1, 0x8000, 0x1, 0xa715, 0x3}, {0x9, 0x8, 0x80000001, 0x1b, 0xffff, 0x3}, {0x7, 0x6, 0x3, 0x6, 0x9, 0x7}, {0x1ff, 0x8, 0x6, 0x0, 0x0, 0x9}, {0x9, 0xace2, 0x7, 0x2, 0x71e37c09, 0x73ed}, {0x3, 0x8, 0x7, 0x7, 0x2, 0x6}, {0x1, 0x4e7, 0x6, 0xaf86, 0x5, 0x198c}, {0x400, 0x80000000, 0x8, 0x5, 0xac7, 0x40}, {0x7, 0x9, 0x400, 0x2, 0xfffffff2, 0x8000}, {0x10, 0x2, 0x9de, 0xa, 0x0, 0x80000000}, {0x1, 0x5, 0x3, 0xe, 0x200, 0x2}, {0x8, 0x7fff, 0x4, 0x8, 0xb, 0xfe}, {0x7, 0x5, 0x8, 0x7f, 0xfa, 0x8}, {0x7, 0x4, 0x2, 0x0, 0x88e, 0x200}, {0x7f, 0x8, 0xd11, 0x6, 0x1, 0x1}, {0x8, 0x285895c5, 0xc, 0x5e, 0x58, 0x101}, {0x1, 0x400000, 0x10, 0x3, 0x2, 0x40}, {0x7, 0x770, 0x9, 0x8, 0xf5b, 0x401}, {0x0, 0x7c700000, 0xfffffffa, 0x7, 0x401, 0x8}, {0x3, 0x2, 0x3, 0x3, 0x10000, 0x7fff}, {0xf, 0x8, 0x2, 0x27, 0x2, 0x40}, {0x2, 0x80000001, 0x1e, 0xfffffff7, 0x0, 0x9}, {0x2, 0x7, 0xf7, 0xd, 0x8001, 0x81}, {0x100000, 0x2, 0xfff, 0x0, 0xf39, 0x2d4}, {0xc, 0x3, 0x84a, 0x5, 0xb7, 0x5ba}, {0x3a8fee8e, 0x983, 0x8, 0xc44, 0x4, 0x2}, {0x1, 0x2, 0x1ff, 0x4, 0x1, 0x80}, {0xb, 0x7, 0x3ff, 0xc, 0x6, 0x6}, {0x2, 0x200, 0x1800000, 0x7, 0xe9a1, 0x7}, {0xfffffb02, 0x0, 0x4, 0x0, 0x1, 0x1}, {0x5, 0xffff04ed, 0x7, 0x7, 0x13a, 0xc}, {0x0, 0xffffff01, 0x3, 0xb, 0x0, 0x9aa9}, {0x6, 0x4, 0x401, 0xffff8000, 0x5, 0x100}, {0x9, 0x8, 0x0, 0x42, 0x7f, 0x4}, {0x7, 0x7fff00, 0x101, 0x7ff, 0x10000, 0x9}, {0x846, 0x52e, 0x5, 0x900000, 0x0, 0x9}, {0x413e, 0x5, 0x4, 0x1, 0x1, 0x2}, {0xfffff2dd, 0x1, 0x5a, 0x4, 0x8, 0x4b92}, {0x7, 0x3, 0x2, 0x5, 0x447, 0xfffffff8}, {0x7b388a4c, 0xfffffffc, 0x3, 0xd31, 0x6, 0xc81}, {0x4, 0x77d4, 0xd14, 0x200, 0x7fffffff, 0x1}, {0x8, 0x6, 0x9, 0x1, 0x4, 0xfff}, {0xffffffff, 0x6, 0xf143928, 0x5, 0x6, 0x8}, {0x81, 0xb07, 0xa, 0x6, 0x0, 0xd}, {0x7168, 0x6, 0x5, 0x1, 0x0, 0x8001}, {0x4, 0x4, 0x8, 0x23, 0x77, 0x5}, {0x308, 0xeeb1, 0xf, 0x9, 0x1}, {0x8, 0x5, 0x4, 0x3, 0x3}, {0xfffffffb, 0x4e7d, 0x80000000, 0x9, 0x8, 0xa97e}, {0x2, 0x0, 0x7fffffff, 0x1, 0x81, 0xb80}, {0x3, 0x3, 0x1, 0xffffffff, 0x0, 0x9}, {0xb, 0xfffffff8, 0x4, 0x2, 0xa, 0x4}, {0xfffffffc, 0x7, 0x9, 0x10000, 0x2, 0x1000000}, {0x0, 0x6, 0x8, 0xab, 0x3, 0xffff}, {0x3, 0x3, 0x4, 0x0, 0x6, 0x9}, {0xf, 0x80, 0x7, 0x9, 0x40, 0x9}, {0xffff, 0x8, 0x6, 0xe, 0xffffffff, 0xfff}, {0x2, 0x1ff, 0x2, 0x10000, 0x1, 0x1}, {0x7fffffff, 0xf5, 0xffffffff, 0x7f, 0x800, 0xfd000000}], [{0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x7}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x8b4eeeead0db8b2f, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x9ebe581e91105dc7, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x3a1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) (rerun: 32)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ppoll(&(0x7f0000000100)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 64)

3.440888289s ago: executing program 1 (id=4014):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=<r3=>0xffffffffffffffff)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r3, 0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000053ba29a173c00a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000030800034000000007440000000c0a01020000000000000000010000000900020073797a3200000000180003801400008004000180080003400000000104000b800900010073797a3000000000140000001000010000000000000000000000000a"], 0xd0}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1254, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)={0x0, 0x3, [0x2dc, 0x6b6, 0x771, 0xfd]})
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r12, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000340)={'wg2\x00', <r13=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81004282}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r12, @ANYBLOB="000129bd7000fedbdf250c0000004c00018014000200776c616e300000000000000000000000080003000000000014000200766c616e3000000000000000000000000800030001000000080003000100000008000100", @ANYRES32=r13, @ANYBLOB="2c0001801400020076010168315f6d6163767461700000001400020069703665727370616e300000000000002800018008000100", @ANYRES32=r14, @ANYBLOB="140002006272696467655f736c6176655f3000000800030002000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24008844)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x9, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0x10000, 0x1f, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x7, 0xff, 0x0, 0x31}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x6, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x0, 0x3}, {0xdddd0000, 0xffff1000, 0xe, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x3, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x0, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x3, 0xa1, 0x20, 0x0, 0x5}, {0x0, 0xdddd0000, 0xc, 0x0, 0x4, 0x7, 0x8, 0x40, 0x26, 0x9, 0x0, 0x5}, {0xeeef0000, 0x3}, {0xdddd1000, 0x400}, 0x0, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]})

3.363937521s ago: executing program 0 (id=4015):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x3, 0xa, 0x41, 0x7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43c}, 0x94)

3.238160117s ago: executing program 0 (id=4016):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
pipe2$watch_queue(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$revoke(0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000"])
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4)
close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) (async)
close_range(r3, 0xffffffffffffffff, 0x3f00000000000000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x50, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0xa0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x6c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x40, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x8, 0x2, 0x8, 0x4}, 0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f46000520100ab4250000130f00090000000000f03f0000d700003fff000000000003108b03100b0710020439090014100aec020001ef8f07ff7f0f000000000000008a3546cd0e31c90b5630024d7e11064cbd5c18839293ec257ca67476", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES8=r2, @ANYRESOCT=r6], 0x5, [{0x79, &(0x7f0000000140)=@string={0x79, 0x3, "8ac7b54f0d6e2426794e5af806eb39d1504ceb5626b374fc14d25e7d3a683c4f781eeac3a1f128fdbdd37a4842e4c6d79f6cd36d596cb036f51784babebc54d97ac546ee502c0ceb0366f68fad29abb37f2a11c9c73ec3fb2b22dfc321eb8f55d4f5a219502626e0de7b0cb89a1d15f2ae09c952aeda96"}}, {0xdb, &(0x7f0000000480)=@string={0xdb, 0x3, "88fbe32a887c57e3e5f1808ba82babc505d93e8f90a1355b5f29506e06485d952e416e4d20a0856093da952d1de313fdb03e4f82b050c94e1cb4a44c3b5a65a79e35352a47c4d19d811db60ff2ce0e3a8fd668b6d2a081e7ca4022a526db9d6aada4e5fe5559446abf643425071e1046e07d06e086358794fa952460818f4f78095cc3325e76d86c82d862abb69dd2f18f69b5c45df094e8c20ecce2ec01746f79a558ba74a47f3d967cf70dc3b46889da1c6c68e69d7c98c0c351f175cf5b2d742b1cd46a3b167b9afc6231205edc1466b08532e239574de8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x50, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0xa0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x6c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x40, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x8, 0x2, 0x8, 0x4}, 0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f46000520100ab4250000130f00090000000000f03f0000d700003fff000000000003108b03100b0710020439090014100aec020001ef8f07ff7f0f000000000000008a3546cd0e31c90b5630024d7e11064cbd5c18839293ec257ca67476", @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES8=r2, @ANYRESOCT=r6], 0x5, [{0x79, &(0x7f0000000140)=@string={0x79, 0x3, "8ac7b54f0d6e2426794e5af806eb39d1504ceb5626b374fc14d25e7d3a683c4f781eeac3a1f128fdbdd37a4842e4c6d79f6cd36d596cb036f51784babebc54d97ac546ee502c0ceb0366f68fad29abb37f2a11c9c73ec3fb2b22dfc321eb8f55d4f5a219502626e0de7b0cb89a1d15f2ae09c952aeda96"}}, {0xdb, &(0x7f0000000480)=@string={0xdb, 0x3, "88fbe32a887c57e3e5f1808ba82babc505d93e8f90a1355b5f29506e06485d952e416e4d20a0856093da952d1de313fdb03e4f82b050c94e1cb4a44c3b5a65a79e35352a47c4d19d811db60ff2ce0e3a8fd668b6d2a081e7ca4022a526db9d6aada4e5fe5559446abf643425071e1046e07d06e086358794fa952460818f4f78095cc3325e76d86c82d862abb69dd2f18f69b5c45df094e8c20ecce2ec01746f79a558ba74a47f3d967cf70dc3b46889da1c6c68e69d7c98c0c351f175cf5b2d742b1cd46a3b167b9afc6231205edc1466b08532e239574de8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}]})
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

3.203422464s ago: executing program 1 (id=4017):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722", 0x21}], 0x2)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0xedd1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224a21cb20b101177d1c458dd4992861ac00000000000000ebffffffffffffff00000000000000000000000000fffffffd00", "9001001c551265406c7f306003d8a0f4bd000000030000000000007800"}})

3.106342364s ago: executing program 3 (id=4018):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000000000000000000000010400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x10000000, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5)

3.10589616s ago: executing program 2 (id=4019):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000140)=')\x00', 0x80, &(0x7f0000000200)={@_ha_fsid={[0xffffffff, 0xb]}, {0xf, 0x9, 0x4, 0x382b}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0xef4})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000f65200010000d31785ad5f000000000000000000009f0abdc182f2f840"], 0x20}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0)
poll(&(0x7f0000000240)=[{r4}], 0x1, 0x423ff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x1000)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000380)=""/182, &(0x7f0000000440)=0xb6)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000008c0)={0x0, 0x200})
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000)

2.995286633s ago: executing program 1 (id=4020):
r0 = socket$kcm(0x2, 0xa, 0x2)
sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x8)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, 0x0) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @broadcast})

2.938129767s ago: executing program 1 (id=4021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f046})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094)

2.87781205s ago: executing program 3 (id=4022):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) (async)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
syz_usb_connect(0x3, 0x348, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, 0x0) (async)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x19de, &(0x7f0000000040)={0x0, 0x7fb0, 0xc000, 0x1, 0x348}) (async)
r1 = io_uring_setup(0x19de, &(0x7f0000000040)={0x0, 0x7fb0, 0xc000, 0x1, 0x348})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r1, 0x221d, 0x287e, 0x37, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
io_setup(0x443, &(0x7f0000001100)) (async)
io_setup(0x443, &(0x7f0000001100))
set_robust_list(0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0xfffffd77)

2.850214791s ago: executing program 1 (id=4023):
syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x0)

2.593902334s ago: executing program 4 (id=4024):
mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000180)={0x10001e, 0x100074, 0x40000}, 0x20)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x1, 0x0)
ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x2, 0x80000000, 0x2, 0x8d8, 0xa974, 0x9}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x267)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x10102, 0x0)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f00000001c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4a5, 0x7f, 0xd2, 0x7}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0xfdc}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x199}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xa9, 0x6, 0x10, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x3f6, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0xa011}}, @wr_drn={0x68, 0x20, {0x1}}, @in_dx={0x69, 0x20, {0x7e91, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xfc, 0x2, 0x5}}, @in_dx={0x69, 0x20, {0x5a12}}, @wr_crn={0x67, 0x20, {0x8, 0x800}}, @in_dx={0x69, 0x20, {0x6ce7, 0x4}}, @nested_amd_stgi={0x17e, 0x10}], 0x290})
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f00000005c0))
ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f00000004c0))
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, [0x5, 0x2, 0x1, 0x4, 0xfbcb, 0x8000000000000000, 0x8, 0xc, 0x5, 0x776, 0x48000000000000, 0x9, 0xfffffffffffff800, 0x0, 0xff00000000000000]}, &(0x7f0000000540)=0x100)

2.367793071s ago: executing program 4 (id=4025):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = dup3(r3, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="0300660b587c00187624eaf64ea022cfa102cb5bd621ecf231cd29075a4db8982a404f9e291cb1f3dff822e4b3e3654d5d46cf9b322733053e3425e6bdde84f0b7eccab05005a48aca299bed5d1c9c12258ba1314a78430c7a", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085}, 0x94)
readv(r1, &(0x7f0000000600)=[{&(0x7f0000000040)=""/168, 0xa8}], 0x1)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x5)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

2.314090768s ago: executing program 1 (id=4026):
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0xff, 0x0, 0x31384142}, 0x0, 0x0, 0x0, 0x0, 0x0}})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x6f, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000440)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x1, 0x2, 0x0, 0x8, 0x7f}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x0, 0x5}]}, 0x2, [{0x45, &(0x7f0000000380)=@string={0x45, 0x3, "0941c6ee2fbd4dabb856a3201b08236487024850588b21275f734083108e21ea37a9d949d0d89c9cfa5bbfe847ee0f7f743ca979f4242e5d1f9d12e7680a6b9c1c0e9d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}]})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b00100122290009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002229000000835d2e6def0bf745506883672f3d98a0a3675ca97899660b22391c804a441bc338ad"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x40, 0x9, 0x99, {0x99, 0x23, "b49da9338492d5bd71c12c1bb0e604df84ec27fa9fb5946558268511e3c80f33ed39aed91fb73b5484cedcdd133ad1c734322183f2abbbb2ab0fb40c2a8473e96737347dd68b9025553183b0da792a6118740fdad286f6da66e308abfd455a91c1b3eb204ec43a0ee9fbeba2b100593d9c9dd9f1ddfb0c84b4243be0f38f759f99822be36cbb99f69485caf25d7ccd4dcc8727e7d2089e"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f00000005c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x5, 0x5, 0xa1e}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0xfe, 0x6, 0x8, "c2cb0d33", "e11cfdc2"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x70, 0x8a, 0xfe, 0x1, 0x8, 0x1}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x20, 0xe, 0x42, "66fe4a5fc49c426e388b1ff1ac14850e3107b65685001c3483f0df49955eaea7835e37c9d06b61b82aba503fdb1a438f9d042593cd95da84b2a6ff010cf8e09a6a54"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xdd}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0xc0, 0x2, [0x0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x36}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "e2db"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "0441"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a40)={0x40, 0x1c, 0x1}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0xf7}})
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = memfd_create(&(0x7f0000000400)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Kp\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec2D\xf7\xb4\xa4\xb9\x06\xfc\xa7\x86\xb4Bxf\xd8\'\x17N\x1ar\xf9+%vm\t\x9f#yN\xb8k\xf6\xc0\xcbW8o\x92\xc7\xffo\xd3\xdc+\x84\x91\x13Ss\xb2h\x12C\xba\x02B\x92\xfeZ\b\xac\xb6[\x86\xbb\xdf\x8b\x7f\xfa\xc2\x8a\x13BW\'3\xa3m{\xd2\xc1p\xf9\xbf\xc5\xcb\xee', 0x6)
write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x5b)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8)

203.478206ms ago: executing program 0 (id=4027):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x3, 0x4})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0006280000002831f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc2c5b54b4436"], 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 2 (id=4028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4)
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

5/0)
[  807.419170][ T5717] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  807.429565][ T5717] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  807.526763][   T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  807.690755][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  807.711082][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  807.728736][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.746595][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  807.769189][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  807.771150][ T5717] usb 3-1: USB disconnect, device number 4
[  807.778298][    C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  807.781797][   T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  807.813296][   T24] usb 5-1: Manufacturer: syz
[  807.837682][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.846266][   T24] usb 5-1: config 0 descriptor??
[  807.855185][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.865371][ T5717] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  807.871482][ T5026] loop5: detected capacity change from 0 to 7
[  807.882088][ T5026] Dev loop5: unable to read RDB block 7
[  807.888925][ T5026]  loop5: unable to read partition table
[  807.895065][ T5026] loop5: partition table beyond EOD, truncated
[  807.903732][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.912768][ T5026] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  808.245462][ T5717] usb 4-1: USB disconnect, device number 85
[  808.347258][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3731'.
[  808.539732][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  808.546130][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  808.575657][ T5063] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3732'.
[  808.657315][ T5008] netlink: 'syz.4.3729': attribute type 33 has an invalid length.
[  808.666232][ T5008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3729'.
[  808.835473][   T24] appleir 0003:05AC:8243.0064: unknown main item tag 0x0
[  808.852954][   T24] appleir 0003:05AC:8243.0064: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  808.854662][ T5082] loop3: detected capacity change from 0 to 7
[  808.871269][ T5076] bridge0: port 1(geneve0) entered blocking state
[  808.878368][ T5076] bridge0: port 1(geneve0) entered disabled state
[  808.885893][ T5076] geneve0: entered allmulticast mode
[  808.903466][ T5082] Dev loop3: unable to read RDB block 7
[  808.914519][ T5082]  loop3: unable to read partition table
[  808.918612][ T5076] geneve0: entered promiscuous mode
[  808.926445][ T5082] loop3: partition table beyond EOD, truncated
[  808.938213][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.952384][ T5082] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  808.964473][ T5076] bridge0: port 1(geneve0) entered blocking state
[  808.971045][ T5076] bridge0: port 1(geneve0) entered forwarding state
[  809.078430][    C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  809.346770][ T5717] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  809.361963][  T809] usb 5-1: USB disconnect, device number 106
[  809.419585][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.447043][    C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  809.511151][ T5717] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  809.520411][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.528450][ T5717] usb 3-1: Product: syz
[  809.532875][ T5717] usb 3-1: Manufacturer: syz
[  809.537593][ T5717] usb 3-1: SerialNumber: syz
[  809.654134][ T5697] usb 2-1: USB disconnect, device number 28
[  809.697587][ T5697] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  809.749848][ T5099] binder: 5098:5099 ioctl c0306201 0 returned -14
[  809.757355][ T5099] binder: 5098:5099 ioctl c0046209 200000000000000 returned -22
[  809.799271][ T5137] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  809.849262][ T5143] fuse: Unknown parameter 'otmode'
[  809.967426][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  809.979998][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  809.991694][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  810.003703][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  810.013527][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  810.023701][ T5717] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  810.038939][ T5717] usb 3-1: USB disconnect, device number 5
[  810.177269][  T809] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  810.326659][  T809] usb 5-1: Using ep0 maxpacket: 16
[  810.333139][  T809] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  810.341426][  T809] usb 5-1: config 0 has no interface number 0
[  810.349450][  T809] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  810.358717][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.366730][  T809] usb 5-1: Product: syz
[  810.370885][  T809] usb 5-1: Manufacturer: syz
[  810.375633][  T809] usb 5-1: SerialNumber: syz
[  810.383739][  T809] usb 5-1: config 0 descriptor??
[  810.391902][  T809] hub 5-1:0.132: bad descriptor, ignoring hub
[  810.398113][  T809] hub 5-1:0.132: probe with driver hub failed with error -5
[  810.408479][  T809] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input139
[  810.778110][ T5186] tipc: Failed to remove unknown binding: 66,0,0/941774505:3869681264/3869681266
[  810.800326][ T5186] tipc: Failed to remove unknown binding: 66,0,0/941774505:3869681264/3869681265
[  810.828729][ T5186] tipc: Failed to remove unknown binding: 66,0,0/941774505:3869681264/3869681266
[  810.840084][ T5186] tipc: Failed to remove unknown binding: 66,0,0/941774505:3869681264/3869681265
[  811.017277][ T5710] net_ratelimit: 1 callbacks suppressed
[  811.017293][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.195869][ T5208] xt_TCPMSS: Only works on TCP SYN packets
[  811.202442][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  811.359055][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.373752][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  811.397997][   T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  811.414180][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.452141][   T24] usb 3-1: config 0 descriptor??
[  811.462760][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'.
[  811.479443][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  811.552596][ T5215] bond1: option ad_actor_sys_prio: invalid value (0)
[  811.567113][ T5215] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  811.589130][ T5215] bond1 (unregistering): Released all slaves
[  811.696940][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.710832][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.723688][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.745023][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.969568][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.988665][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.999624][ T5728] usb 3-1: USB disconnect, device number 6
[  812.057772][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.457460][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.546799][ T5728] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  812.698700][ T5728] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[  812.707203][ T5728] usb 2-1: config 160 has no interface number 0
[  812.713503][ T5728] usb 2-1: config 160 interface 200 has no altsetting 0
[  812.722538][ T5728] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  812.732329][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.740546][ T5728] usb 2-1: Product: syz
[  812.744721][ T5728] usb 2-1: Manufacturer: syz
[  812.749360][ T5728] usb 2-1: SerialNumber: syz
[  812.856676][  T809] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  812.968724][ T5728] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  812.975747][ T5728] usb 2-1: MIDIStreaming interface descriptor not found
[  813.009940][  T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  813.031040][T27167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.056600][  T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.067655][ T5717] usb 5-1: USB disconnect, device number 107
[  813.105175][  T809] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  813.114591][ T5728] usb 2-1: USB disconnect, device number 29
[  813.138164][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.146454][  T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.188254][  T809] usb 3-1: config 0 descriptor??
[  813.204340][T11601] udevd[11601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  813.630849][  T809] elan 0003:04F3:0755.0065: unknown main item tag 0x0
[  813.652601][  T809] elan 0003:04F3:0755.0065: unknown main item tag 0x0
[  813.674309][  T809] elan 0003:04F3:0755.0065: unknown main item tag 0x0
[  813.681924][  T809] elan 0003:04F3:0755.0065: unknown main item tag 0x0
[  813.689005][  T809] elan 0003:04F3:0755.0065: unknown main item tag 0x0
[  813.696682][  T809] elan 0003:04F3:0755.0065: failed to start in urb: -90
[  813.715089][  T809] elan 0003:04F3:0755.0065: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  813.806916][ T5728] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  813.966818][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  813.973806][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short
[  813.983969][ T5728] usb 2-1: config 8 has an invalid interface number: 139 but max is 1
[  813.992232][ T5728] usb 2-1: config 8 has an invalid interface number: 2 but max is 1
[  814.000356][ T5728] usb 2-1: config 8 has no interface number 0
[  814.008408][ T5728] usb 2-1: config 8 has no interface number 1
[  814.009323][   T24] usb 3-1: USB disconnect, device number 7
[  814.014538][ T5728] usb 2-1: config 8 interface 139 altsetting 249 has an invalid descriptor for endpoint zero, skipping
[  814.031862][ T5728] usb 2-1: config 8 interface 2 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  814.043308][  T809] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  814.051323][ T5728] usb 2-1: config 8 interface 139 has no altsetting 0
[  814.064816][ T5728] usb 2-1: config 8 interface 2 has no altsetting 0
[  814.074586][ T5728] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0105, bcdDevice= 2.91
[  814.084011][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.092028][ T5728] usb 2-1: Product: syz
[  814.096183][ T5728] usb 2-1: Manufacturer: ﳿ
[  814.101043][ T5728] usb 2-1: SerialNumber: syz
[  814.108327][ T5389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  814.217011][  T809] usb 5-1: Using ep0 maxpacket: 16
[  814.217159][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.226129][  T809] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  814.238653][  T809] usb 5-1: config 3 has no interface number 0
[  814.244754][  T809] usb 5-1: config 3 interface 20 has no altsetting 0
[  814.253564][  T809] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  814.262655][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.270889][  T809] usb 5-1: Product: syz
[  814.275065][  T809] usb 5-1: Manufacturer: syz
[  814.279749][  T809] usb 5-1: SerialNumber: syz
[  814.321154][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.330075][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.345952][ T5728] dvb-usb: found a 'Terratec Cinergy S2 USB BOX' in warm state.
[  814.353710][ T5728] dw2102: su3000_power_ctrl: 1, initialized 0
[  814.360054][ T5728] dvb-usb: bulk message failed: -22 (2/0)
[  814.369122][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  814.379633][ T5728] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB BOX)
[  814.387814][ T5728] usb 2-1: media controller created
[  814.393121][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.399231][ T5728] dw2102: i2c transfer failed.
[  814.404279][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.411338][ T5728] dw2102: i2c transfer failed.
[  814.416201][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.422051][ T5728] dw2102: i2c transfer failed.
[  814.429216][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.434954][ T5728] dw2102: i2c transfer failed.
[  814.439792][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.445543][ T5728] dw2102: i2c transfer failed.
[  814.450407][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  814.456149][ T5728] dw2102: i2c transfer failed.
[  814.461010][ T5728] dvb-usb: MAC address: 02:02:02:02:02:02
[  814.477577][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  814.491476][ T5401] loop5: detected capacity change from 0 to 7
[  814.500486][ T5401] Dev loop5: unable to read RDB block 7
[  814.500515][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  814.506460][ T5401]  loop5: unable to read partition table
[  814.512533][ T5728] dw2102: command 0x0e transfer failed.
[  814.512613][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  814.529832][ T5728] dw2102: command 0x0e transfer failed.
[  814.529864][ T5401] loop5: partition table beyond EOD, truncated
[  814.544111][ T5401] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  814.578978][  T809] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input140
[  814.591754][ T4986] bcm5974 5-1:3.20: could not read from device
[  814.613762][ T4986] bcm5974 5-1:3.20: could not read from device
[  814.631050][ T4986] bcm5974 5-1:3.20: could not read from device
[  814.645005][  T809] usb 5-1: USB disconnect, device number 108
[  814.654593][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3762'.
[  814.742979][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.753593][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.843494][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  814.873149][ T5728] dw2102: command 0x0e transfer failed.
[  814.891650][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  814.911006][ T5728] dw2102: command 0x0e transfer failed.
[  814.932029][ T5728] dvb-usb: bulk message failed: -22 (1/0)
[  814.966152][ T5728] dw2102: command 0x51 transfer failed.
[  815.000859][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.031432][ T5728] dw2102: i2c probe for address 0x68 failed.
[  815.033905][ T5494] netlink: 'syz.2.3765': attribute type 12 has an invalid length.
[  815.048452][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.053851][ T5494] netlink: 'syz.2.3765': attribute type 29 has an invalid length.
[  815.060585][ T5728] dw2102: i2c probe for address 0x69 failed.
[  815.062597][ T5494] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3765'.
[  815.077105][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.077121][ T5728] dw2102: i2c probe for address 0x6a failed.
[  815.077132][ T5728] dw2102: probing for demodulator failed. Is the external power switched on?
[  815.077216][ T5728] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB BOX'
[  815.084821][ T5497] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  815.118095][ T5494] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3765'.
[  815.166895][ T5728] rc_core: IR keymap rc-tt-1500 not found
[  815.180816][ T5728] Registered IR keymap rc-empty
[  815.192823][ T5728] rc rc0: Terratec Cinergy S2 USB BOX as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  815.201992][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.213126][ T5728] input: Terratec Cinergy S2 USB BOX as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input141
[  815.229591][ T5728] dvb-usb: schedule remote query interval to 250 msecs.
[  815.237327][ T5728] dw2102: su3000_power_ctrl: 0, initialized 1
[  815.244404][ T5510] syz_tun: entered allmulticast mode
[  815.257427][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.259715][ T5728] dvb-usb: Terratec Cinergy S2 USB BOX successfully initialized and connected.
[  815.270862][ T5507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.282120][ T5728] dvb-usb: found a 'Terratec Cinergy S2 USB BOX' in warm state.
[  815.290789][ T5728] dw2102: su3000_power_ctrl: 1, initialized 0
[  815.292223][ T5508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.297126][ T5728] dvb-usb: bulk message failed: -22 (2/0)
[  815.315261][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  815.339393][ T5728] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB BOX)
[  815.347988][ T5728] usb 2-1: media controller created
[  815.353370][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.362262][ T5728] dw2102: i2c transfer failed.
[  815.368355][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.375181][ T5728] dw2102: i2c transfer failed.
[  815.398538][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.404434][ T5728] dw2102: i2c transfer failed.
[  815.410504][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.417911][ T5728] dw2102: i2c transfer failed.
[  815.423519][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.432853][ T5728] dw2102: i2c transfer failed.
[  815.437928][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  815.460324][ T5728] dw2102: i2c transfer failed.
[  815.478460][ T5728] dvb-usb: MAC address: 02:02:02:02:02:02
[  815.497659][ T5717] dvb-usb: bulk message failed: -22 (1/0)
[  815.510172][ T5717] dw2102: i2c transfer failed.
[  815.531450][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  815.562173][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  815.578133][ T5728] dw2102: command 0x0e transfer failed.
[  815.592296][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  815.600890][ T5728] dw2102: command 0x0e transfer failed.
[  815.724798][ T5561] program syz.2.3774 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  815.732429][ T5562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3774'.
[  815.744673][ T5562] netlink: 'syz.2.3774': attribute type 5 has an invalid length.
[  815.796657][ T5717] dvb-usb: bulk message failed: -22 (1/0)
[  815.803029][ T5717] dw2102: i2c transfer failed.
[  815.916694][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  815.922537][ T5728] dw2102: command 0x0e transfer failed.
[  815.930337][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  815.936152][ T5728] dw2102: command 0x0e transfer failed.
[  815.942155][ T5728] dvb-usb: bulk message failed: -22 (1/0)
[  815.948137][ T5728] dw2102: command 0x51 transfer failed.
[  815.953696][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.957293][   T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  815.959529][ T5728] dw2102: i2c probe for address 0x68 failed.
[  815.973111][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.978957][ T5728] dw2102: i2c probe for address 0x69 failed.
[  815.984936][ T5728] dvb-usb: bulk message failed: -22 (5/0)
[  815.990672][ T5728] dw2102: i2c probe for address 0x6a failed.
[  815.996682][ T5728] dw2102: probing for demodulator failed. Is the external power switched on?
[  816.005596][ T5728] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB BOX'
[  816.056739][ T5728] rc_core: IR keymap rc-tt-1500 not found
[  816.062497][ T5728] Registered IR keymap rc-empty
[  816.070153][ T5635] dvb-usb: bulk message failed: -22 (1/0)
[  816.077734][ T5635] dw2102: i2c transfer failed.
[  816.083334][ T5728] rc rc1: Terratec Cinergy S2 USB BOX as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1
[  816.086635][ T5697] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  816.095381][ T5728] input: Terratec Cinergy S2 USB BOX as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input142
[  816.112686][ T5728] dvb-usb: schedule remote query interval to 250 msecs.
[  816.119883][ T5728] dw2102: su3000_power_ctrl: 0, initialized 1
[  816.125970][ T5728] dvb-usb: Terratec Cinergy S2 USB BOX successfully initialized and connected.
[  816.140830][   T24] usb 5-1: Using ep0 maxpacket: 32
[  816.144021][ T5728] usb 2-1: USB disconnect, device number 30
[  816.161274][   T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  816.174309][   T24] usb 5-1: config 0 has no interface number 0
[  816.192005][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  816.219862][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.230271][   T24] usb 5-1: Product: syz
[  816.234974][   T24] usb 5-1: Manufacturer: syz
[  816.240929][   T24] usb 5-1: SerialNumber: syz
[  816.249984][ T5697] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  816.263379][   T24] usb 5-1: config 0 descriptor??
[  816.271372][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  816.275914][ T5728] dvb-usb: Terratec Cinergy S2 USB BOX successfully deinitialized and disconnected.
[  816.284255][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  816.303195][ T5710] net_ratelimit: 7 callbacks suppressed
[  816.303209][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.321309][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  816.336509][ T5697] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  816.348538][ T5697] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  816.350706][ T5728] dvb-usb: Terratec Cinergy S2 USB BOX successfully deinitialized and disconnected.
[  816.357657][ T5697] usb 3-1: Manufacturer: syz
[  816.395456][ T5697] usb 3-1: config 0 descriptor??
[  816.656675][ T5728] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  816.806630][ T5728] usb 2-1: Using ep0 maxpacket: 8
[  816.813340][ T5728] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  816.825064][ T5728] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  816.840156][ T5728] usb 2-1: config 0 interface 0 has no altsetting 0
[  816.847878][ T5728] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  816.858306][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.876179][ T5728] usb 2-1: config 0 descriptor??
[  817.000851][ T5569] netlink: 'syz.2.3776': attribute type 33 has an invalid length.
[  817.008899][ T5569] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3776'.
[  817.018076][ T5569] `: renamed from team0 (while UP)
[  817.081433][ T5697] appleir 0003:05AC:8243.0066: unknown main item tag 0x0
[  817.102716][ T5697] appleir 0003:05AC:8243.0066: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  817.145956][ T5728] usbhid 2-1:0.0: can't add hid device: -71
[  817.159851][   T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  817.167547][ T5728] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  817.189951][   T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  817.210006][ T5728] usb 2-1: USB disconnect, device number 31
[  817.211190][   T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  817.242012][   T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  817.259292][   T24] usb 5-1: USB disconnect, device number 109
[  817.337011][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.601108][ T5710] usb 3-1: USB disconnect, device number 9
[  817.725707][ T5663] netlink: 'syz.4.3779': attribute type 12 has an invalid length.
[  817.735500][ T5663] netlink: 'syz.4.3779': attribute type 29 has an invalid length.
[  817.744083][ T5663] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3779'.
[  817.753786][   T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  817.754574][ T5663] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3779'.
[  817.779157][ T5666] tun0: tun_chr_ioctl cmd 2147767521
[  817.903027][ T5674] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  817.912713][   T24] usb 4-1: Using ep0 maxpacket: 16
[  817.917018][ T5674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  817.919347][   T24] usb 4-1: config 3 has an invalid interface number: 20 but max is 0
[  817.941521][   T24] usb 4-1: config 3 has no interface number 0
[  817.947753][   T24] usb 4-1: config 3 interface 20 has no altsetting 0
[  817.958732][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  817.967861][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.975839][   T24] usb 4-1: Product: syz
[  817.980048][   T24] usb 4-1: Manufacturer: syz
[  817.984634][   T24] usb 4-1: SerialNumber: syz
[  818.185244][ T5686] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  818.195038][ T5686] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  818.195551][ T5640] loop5: detected capacity change from 0 to 7
[  818.221378][ T5640] Dev loop5: unable to read RDB block 7
[  818.227528][ T5640]  loop5: unable to read partition table
[  818.243423][ T5640] loop5: partition table beyond EOD, truncated
[  818.250365][ T5640] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  818.309940][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input143
[  818.324589][ T4986] bcm5974 4-1:3.20: could not read from device
[  818.336334][ T4986] bcm5974 4-1:3.20: could not read from device
[  818.341133][   T24] usb 4-1: USB disconnect, device number 86
[  818.351056][ T4986] bcm5974 4-1:3.20: could not read from device
[  818.378074][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.382187][ T6311] udevd[6311]: Error opening device "/dev/input/event4": No such file or directory
[  818.413953][ T6311] udevd[6311]: Unable to EVIOCGABS device "/dev/input/event4"
[  818.422066][ T6311] udevd[6311]: Unable to EVIOCGABS device "/dev/input/event4"
[  818.429931][ T6311] udevd[6311]: Unable to EVIOCGABS device "/dev/input/event4"
[  818.437959][ T6311] udevd[6311]: Unable to EVIOCGABS device "/dev/input/event4"
[  818.445968][ T6311] udevd[6311]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  818.466196][ T5001] udevd[5001]: worker [6311] terminated by signal 6 (Aborted)
[  818.474064][ T5001] udevd[5001]: worker [6311] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input143/event4'
[  818.537889][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.882218][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'.
[  818.916263][ T5746] 8021q: adding VLAN 0 to HW filter on device bond2
[  818.935618][ T5746] 8021q: adding VLAN 0 to HW filter on device bond2
[  818.943135][ T5746] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[  818.954015][ T5746] bond2: (slave ipip0): Error -95 calling set_mac_address
[  818.986091][ T5784] macvlan2: entered promiscuous mode
[  818.991681][ T5784] macvlan2: entered allmulticast mode
[  818.997518][ T5784] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  819.066819][   T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  819.226894][   T24] usb 5-1: Using ep0 maxpacket: 16
[  819.236672][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.255353][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.277593][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  819.296897][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  819.306105][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.308095][ T5802] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  819.329910][   T24] usb 5-1: config 0 descriptor??
[  819.418382][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.557082][ T5697] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  819.708126][ T5697] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  819.720374][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.731545][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.741706][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  819.744380][ T5740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.758551][ T5697] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  819.768176][ T5740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.775114][ T5697] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  819.789545][ T5697] usb 4-1: Manufacturer: syz
[  819.798126][ T5697] usb 4-1: config 0 descriptor??
[  819.806880][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.820359][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.828364][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.835599][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.842870][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.850121][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.857423][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.864650][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.872701][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  819.879960][   T24] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0
[  820.004142][   T24] microsoft 0003:045E:07DA.0067: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  820.025039][   T24] microsoft 0003:045E:07DA.0067: no inputs found
[  820.031714][   T24] microsoft 0003:045E:07DA.0067: could not initialize ff, continuing anyway
[  820.057676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  820.204681][   T24] usb 5-1: USB disconnect, device number 110
[  820.285650][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.293234][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.457251][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.472690][ T5805] netlink: 'syz.3.3792': attribute type 33 has an invalid length.
[  820.480860][ T5805] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3792'.
[  820.534671][ T5697] appleir 0003:05AC:8243.0068: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  820.716714][ T5635] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  820.878653][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  820.891683][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  820.902295][ T5635] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  820.911591][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.923040][ T5877] input: syz1 as /devices/virtual/input/input144
[  820.935671][ T5635] usb 3-1: config 0 descriptor??
[  821.040584][ T5885] usb usb7: usbfs: process 5885 (syz.4.3797) did not claim interface 0 before use
[  821.058500][  T809] usb 4-1: USB disconnect, device number 87
[  821.138807][ T5900] netlink: 'syz.4.3797': attribute type 62 has an invalid length.
[  821.150560][ T5642] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  821.337954][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  821.499995][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.555371][ T5635] usb 3-1: string descriptor 0 read error: -22
[  821.578541][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.771682][ T5635] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0069/input/input145
[  821.859533][ T5979] loop8: detected capacity change from 0 to 8
[  821.879982][ T5979] Dev loop8: unable to read RDB block 8
[  821.889789][ T5979]  loop8: unable to read partition table
[  821.898916][ T5979] loop8: partition table beyond EOD, truncated
[  821.905167][ T5979] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  821.933713][ T5635] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0069/input/input146
[  822.041590][ T5635] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0069/input/input147
[  822.155964][ T5635] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0069/input/input148
[  822.271921][ T5635] uclogic 0003:256C:006D.0069: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  822.321891][ T5635] usb 3-1: USB disconnect, device number 10
[  822.404678][ T6012] fido_id[6012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  822.530449][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.544217][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.605103][ T6030] netlink: 'syz.3.3807': attribute type 8 has an invalid length.
[  822.617188][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'.
[  822.628423][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.635753][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.643095][ T6030] veth1_to_team: entered promiscuous mode
[  822.659884][ T6030] gretap0: entered promiscuous mode
[  822.680835][ T6030] veth1_to_team: left promiscuous mode
[  822.711710][ T6030] gretap0: left promiscuous mode
[  823.126642][ T5367] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  823.166773][ T5690] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  823.278496][ T5367] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  823.289599][ T5367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.300801][ T5367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.318349][ T5367] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  823.341934][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.352551][ T5690] usb 3-1: config 0 has no interfaces?
[  823.358472][ T5367] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  823.369993][ T5367] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  823.378874][ T5367] usb 4-1: Manufacturer: syz
[  823.384492][ T5690] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  823.394275][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  823.403393][ T5367] usb 4-1: config 0 descriptor??
[  823.408666][ T5690] usb 3-1: Product: syz
[  823.412849][ T5690] usb 3-1: Manufacturer: syz
[  823.424002][ T5690] usb 3-1: config 0 descriptor??
[  823.576915][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.644273][   T29] audit: type=1400 audit(1781122757.478:7736): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=6073 comm="syz.2.3812"
[  823.650643][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  823.681483][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.694407][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.707108][ T5635] usb 3-1: USB disconnect, device number 11
[  824.191188][ T6108] syz_tun: entered allmulticast mode
[  824.222023][ T6068] netlink: 'syz.3.3811': attribute type 33 has an invalid length.
[  824.230157][ T6068] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3811'.
[  824.337069][   T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  824.361817][ T5367] appleir 0003:05AC:8243.006A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  824.441407][ T5690] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  824.509118][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  824.518444][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.528638][   T24] usb 5-1: config 0 descriptor??
[  824.539178][   T24] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  824.566862][ T5697] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  824.606586][ T5690] usb 2-1: Using ep0 maxpacket: 16
[  824.613268][ T5690] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  824.622201][ T5690] usb 2-1: config 0 has no interface number 0
[  824.628942][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.637092][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.639904][ T5690] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  824.654477][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.662704][ T5690] usb 2-1: Product: syz
[  824.667066][ T5690] usb 2-1: Manufacturer: syz
[  824.671693][ T5690] usb 2-1: SerialNumber: syz
[  824.679139][ T5690] usb 2-1: config 0 descriptor??
[  824.686300][ T5690] hub 2-1:0.132: bad descriptor, ignoring hub
[  824.692468][ T5690] hub 2-1:0.132: probe with driver hub failed with error -5
[  824.702962][ T5690] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input149
[  824.716620][ T5697] usb 3-1: Using ep0 maxpacket: 8
[  824.728551][ T5697] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  824.738456][ T5697] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  824.750429][ T5697] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  824.760768][ T5697] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  824.784217][ T5697] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  824.797753][ T5697] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  824.806863][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.879789][ T5690] usb 4-1: USB disconnect, device number 88
[  825.023613][ T5697] usb 3-1: usb_control_msg returned -32
[  825.029274][ T5697] usbtmc 3-1:16.0: can't read capabilities
[  825.378496][ T6153] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  825.386978][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.396000][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.617063][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.627915][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.658119][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.679937][ T5635] usb 3-1: USB disconnect, device number 12
[  825.954676][   T24] usb 5-1: USB disconnect, device number 111
[  826.697081][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.946694][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  826.977048][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'.
[  827.086609][   T24] usb 3-1: device descriptor read/64, error -71
[  827.306757][ T5697] usb 2-1: USB disconnect, device number 32
[  827.326652][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  827.396874][ T5728] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  827.456683][   T24] usb 3-1: device descriptor read/64, error -71
[  827.548351][ T5728] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  827.559390][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  827.567020][   T24] usb usb3-port1: attempt power cycle
[  827.570800][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  827.586638][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  827.600837][ T5728] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  827.610133][ T5728] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  827.618288][ T5728] usb 5-1: Manufacturer: syz
[  827.625772][ T5728] usb 5-1: config 0 descriptor??
[  827.660409][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.737374][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.916618][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  827.937208][   T24] usb 3-1: device descriptor read/8, error -71
[  828.145973][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'.
[  828.176827][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  828.217338][   T24] usb 3-1: device descriptor read/8, error -71
[  828.272492][ T6262] netlink: 'syz.4.3830': attribute type 33 has an invalid length.
[  828.280662][ T6262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3830'.
[  828.337077][   T24] usb usb3-port1: unable to enumerate USB device
[  828.368702][ T5728] hid_parser_main: 7 callbacks suppressed
[  828.368715][ T5728] appleir 0003:05AC:8243.006B: unknown main item tag 0x0
[  828.387768][ T5728] appleir 0003:05AC:8243.006B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  828.777114][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.949412][ T5728] usb 5-1: USB disconnect, device number 112
[  829.176857][  T809] usb 4-1: new full-speed USB device number 89 using dummy_hcd
[  829.338991][  T809] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[  829.357053][  T809] usb 4-1: config 218 has an invalid descriptor of length 0, skipping remainder of the config
[  829.376660][  T809] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244
[  829.399120][  T809] usb 4-1: config 218 has no interface number 0
[  829.414655][  T809] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  829.440994][  T809] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  829.466142][  T809] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x8F has invalid wMaxPacketSize 0
[  829.498931][  T809] usb 4-1: config 218 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  829.543354][  T809] usb 4-1: config 218 interface 95 has no altsetting 0
[  829.571053][  T809] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  829.598275][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.633334][  T809] usb 4-1: Product: syz
[  829.651424][  T809] usb 4-1: Manufacturer: syz
[  829.669863][  T809] usb 4-1: SerialNumber: syz
[  829.816902][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.938559][  T809] usb 4-1: USB disconnect, device number 89
[  830.336643][ T5690] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  830.496686][ T5690] usb 3-1: Using ep0 maxpacket: 16
[  830.510707][ T5690] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  830.519617][ T6403] loop8: detected capacity change from 0 to 8
[  830.522509][ T5690] usb 3-1: config 0 has no interface number 0
[  830.538925][ T5690] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  830.550877][ T6403] Dev loop8: unable to read RDB block 8
[  830.557433][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.565637][ T6403]  loop8: unable to read partition table
[  830.572486][ T6403] loop8: partition table beyond EOD, truncated
[  830.575318][ T5690] usb 3-1: Product: syz
[  830.583276][ T5690] usb 3-1: Manufacturer: syz
[  830.588029][ T5690] usb 3-1: SerialNumber: syz
[  830.603806][ T5690] usb 3-1: config 0 descriptor??
[  830.612500][ T6403] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  830.630873][ T5690] hub 3-1:0.132: bad descriptor, ignoring hub
[  830.638073][ T5690] hub 3-1:0.132: probe with driver hub failed with error -5
[  830.674889][ T5690] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input151
[  830.707965][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.732840][ T6422] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  830.794505][ T6422] binder_alloc: 6421: binder_alloc_buf, no vma
[  830.857081][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.907317][  T809] usb 5-1: new full-speed USB device number 113 using dummy_hcd
[  831.006789][   T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  831.079998][  T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  831.091937][  T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 21293, setting to 64
[  831.110096][  T809] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  831.120605][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.131080][  T809] usb 5-1: Product: syz
[  831.135312][  T809] usb 5-1: Manufacturer: syz
[  831.140051][  T809] usb 5-1: SerialNumber: syz
[  831.147645][  T809] usb 5-1: config 0 descriptor??
[  831.153180][ T6409] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  831.162817][   T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  831.163115][  T809] hub 5-1:0.0: bad descriptor, ignoring hub
[  831.174550][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  831.180672][  T809] hub 5-1:0.0: probe with driver hub failed with error -5
[  831.198645][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  831.203212][  T809] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input152
[  831.220310][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  831.243176][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  831.254431][   T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  831.280909][   T24] usb 2-1: Manufacturer: syz
[  831.302829][   T24] usb 2-1: config 0 descriptor??
[  831.471833][ T5635] usb 5-1: USB disconnect, device number 113
[  831.477977][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  831.686614][  T809] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  831.856653][  T809] usb 4-1: Using ep0 maxpacket: 16
[  831.868531][  T809] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  831.889036][  T809] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  831.905071][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.916299][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.918063][  T809] usb 4-1: Product: syz
[  831.930583][ T6427] netlink: 'syz.1.3848': attribute type 33 has an invalid length.
[  831.938617][  T809] usb 4-1: Manufacturer: syz
[  831.943253][ T6427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3848'.
[  831.952326][  T809] usb 4-1: SerialNumber: syz
[  831.960322][ T6427] `: renamed from team0 (while UP)
[  832.025997][   T24] appleir 0003:05AC:8243.006C: unknown main item tag 0x0
[  832.041621][   T24] appleir 0003:05AC:8243.006C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  832.227031][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.552891][ T5728] usb 2-1: USB disconnect, device number 33
[  832.938399][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.135241][ T6490] loop3: detected capacity change from 0 to 7
[  833.144927][ T6490] Dev loop3: unable to read RDB block 7
[  833.152482][ T6490]  loop3: unable to read partition table
[  833.159006][ T5728] usb 3-1: USB disconnect, device number 17
[  833.165313][ T6490] loop3: partition table beyond EOD, truncated
[  833.184608][ T6490] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  833.596878][   T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  833.737002][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.758440][   T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  833.769436][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.780593][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.790418][   T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  833.804445][   T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  833.813623][   T46] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  833.821930][   T46] usb 3-1: Manufacturer: syz
[  833.829891][   T46] usb 3-1: config 0 descriptor??
[  833.935012][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'.
[  833.977754][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.249525][   T46] appleir 0003:05AC:8243.006D: item fetching failed at offset 0/1
[  834.258644][   T46] appleir 0003:05AC:8243.006D: parse failed
[  834.271027][   T46] appleir 0003:05AC:8243.006D: probe with driver appleir failed with error -22
[  834.443807][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.454685][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.466592][ T5635] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  834.483142][ T5728] usb 3-1: USB disconnect, device number 18
[  834.498003][ T5717] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  834.514571][  T809] r8152-cfgselector 4-1: Unknown version 0x0000
[  834.532894][  T809] r8152-cfgselector 4-1: config 0 descriptor??
[  834.544987][  T809] r8152-cfgselector 4-1: can't set config #0, error -71
[  834.577281][  T809] r8152-cfgselector 4-1: USB disconnect, device number 90
[  834.636639][ T5635] usb 2-1: Using ep0 maxpacket: 16
[  834.649805][ T5635] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  834.663246][ T5635] usb 2-1: config 0 has no interface number 0
[  834.671597][ T5717] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  834.689789][ T5635] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  834.700039][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.714251][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.725827][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.735687][ T5635] usb 2-1: Product: syz
[  834.741985][ T5635] usb 2-1: Manufacturer: syz
[  834.747071][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  834.760080][ T5635] usb 2-1: SerialNumber: syz
[  834.766969][ T5635] usb 2-1: config 0 descriptor??
[  834.775710][ T5635] hub 2-1:0.132: bad descriptor, ignoring hub
[  834.786260][ T5635] hub 2-1:0.132: probe with driver hub failed with error -5
[  834.794649][ T5717] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  834.804773][ T5717] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  834.817198][ T5635] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input153
[  834.833153][ T5717] usb 5-1: Manufacturer: syz
[  834.847092][ T5717] usb 5-1: config 0 descriptor??
[  834.916609][  T809] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  835.017703][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.075367][  T809] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  835.127790][  T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  835.149361][  T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  835.171302][  T809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  835.197232][  T809] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  835.214245][  T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.229489][  T809] usb 4-1: config 0 descriptor??
[  835.454306][ T6545] netlink: 'syz.4.3862': attribute type 33 has an invalid length.
[  835.463042][ T6545] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3862'.
[  835.522669][ T5717] appleir 0003:05AC:8243.006E: unknown main item tag 0x0
[  835.535968][ T5717] appleir 0003:05AC:8243.006E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  835.717307][  T809] plantronics 0003:047F:FFFF.006F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  835.989535][   T29] audit: type=1326 audit(1781122769.828:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.3865" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0e39ce59 code=0x0
[  836.041034][  T809] usb 5-1: USB disconnect, device number 114
[  836.056869][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.777037][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.097160][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.267626][  T809] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  837.347719][   T24] usb 2-1: USB disconnect, device number 34
[  837.426773][  T809] usb 3-1: Using ep0 maxpacket: 32
[  837.443256][  T809] usb 3-1: unable to get BOS descriptor or descriptor too short
[  837.465108][  T809] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  837.485479][  T809] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  837.506128][  T809] usb 3-1: config 14 has no interface number 0
[  837.519188][  T809] usb 3-1: config 14 has no interface number 1
[  837.534223][  T809] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  837.556364][  T809] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  837.580803][  T809] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  837.613547][  T809] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  837.632186][ T5717] usb 4-1: USB disconnect, device number 91
[  837.660542][  T809] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  837.698707][  T809] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  837.753878][  T809] usb 3-1: config 14 interface 57 has no altsetting 0
[  837.779926][  T809] usb 3-1: config 14 interface 228 has no altsetting 0
[  837.796823][  T809] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  837.796849][  T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.796867][  T809] usb 3-1: Product: syz
[  837.796880][  T809] usb 3-1: Manufacturer: syz
[  837.796894][  T809] usb 3-1: SerialNumber: syz
[  838.139380][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.216137][ T6695] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns
[  838.246402][  T809] legousbtower 3-1:14.57: interrupt endpoints not found
[  838.259020][ T6695] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[  838.281982][  T809] legousbtower 3-1:14.228: get version request failed: -71
[  838.303563][  T809] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  838.334605][  T809] usb 3-1: USB disconnect, device number 19
[  838.626679][    T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  838.778227][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  838.789262][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.800220][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.810034][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  838.824479][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  838.833909][    T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  838.842265][    T9] usb 5-1: Manufacturer: syz
[  838.850517][    T9] usb 5-1: config 0 descriptor??
[  839.177288][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.286724][  T809] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  839.426634][  T809] usb 3-1: device descriptor read/64, error -71
[  839.440885][ T6711] netlink: 'syz.4.3876': attribute type 33 has an invalid length.
[  839.448838][ T5697] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  839.457209][ T6711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3876'.
[  839.502643][ T5690] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  839.612364][    T9] appleir 0003:05AC:8243.0070: unknown main item tag 0x0
[  839.623759][    T9] appleir 0003:05AC:8243.0070: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  839.627403][ T5697] usb 4-1: Using ep0 maxpacket: 16
[  839.646257][ T5697] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  839.656269][ T5697] usb 4-1: config 0 has no interface number 0
[  839.665312][ T5690] usb 2-1: config 246 has an invalid interface number: 166 but max is 0
[  839.675816][ T5690] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  839.677965][  T809] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  839.687302][ T5690] usb 2-1: config 246 has no interface number 0
[  839.702232][ T5690] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0
[  839.713245][ T5697] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  839.724801][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.733329][ T5697] usb 4-1: Product: syz
[  839.738052][ T5690] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  839.752708][ T5697] usb 4-1: Manufacturer: syz
[  839.758346][ T5697] usb 4-1: SerialNumber: syz
[  839.769648][ T5690] usb 2-1: config 246 interface 166 has no altsetting 0
[  839.781154][ T5690] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  839.791256][ T5697] usb 4-1: config 0 descriptor??
[  839.796210][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.805121][ T5690] usb 2-1: Product: syz
[  839.810972][ T5697] hub 4-1:0.132: bad descriptor, ignoring hub
[  839.817435][ T5697] hub 4-1:0.132: probe with driver hub failed with error -5
[  839.819096][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.824801][ T5690] usb 2-1: Manufacturer: syz
[  839.845018][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input155
[  839.847310][  T809] usb 3-1: device descriptor read/64, error -71
[  839.854863][ T5690] usb 2-1: SerialNumber: syz
[  839.932455][  T133] bond1 (unregistering): Released all slaves
[  839.963452][  T133] bond0 (unregistering): Released all slaves
[  839.977379][  T809] usb usb3-port1: attempt power cycle
[  839.991758][  T133] bond2 (unregistering): Released all slaves
[  840.109844][  T133] ý��™: left promiscuous mode
[  840.164714][ T5717] usb 5-1: USB disconnect, device number 115
[  840.172099][  T133] : left promiscuous mode
[  840.221443][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.283931][  T133] tipc: Left network mode
[  840.306797][  T133] IPVS: stopping master sync thread 17506 ...
[  840.319788][  T809] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  840.357226][  T809] usb 3-1: device descriptor read/8, error -71
[  840.521366][ T5690] usb 2-1: Limiting number of CPorts to U8_MAX
[  840.531135][ T5690] usb 2-1: Not enough endpoints found in device, aborting!
[  840.646856][  T809] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  840.677356][  T809] usb 3-1: device descriptor read/8, error -71
[  840.687755][  T133] hsr_slave_0: left promiscuous mode
[  840.694045][  T133] hsr_slave_1: left promiscuous mode
[  840.748877][  T133] veth1_macvtap: left promiscuous mode
[  840.759880][  T133] veth0_macvtap: left promiscuous mode
[  840.772146][  T133] veth1_vlan: left promiscuous mode
[  840.784830][  T133] veth0_vlan: left promiscuous mode
[  840.795040][  T809] usb usb3-port1: unable to enumerate USB device
[  841.209994][ T6814] FAULT_INJECTION: forcing a failure.
[  841.209994][ T6814] name failslab, interval 1, probability 0, space 0, times 0
[  841.223626][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.0.3886 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  841.223650][ T6814] Tainted: [L]=SOFTLOCKUP
[  841.223656][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  841.223667][ T6814] Call Trace:
[  841.223674][ T6814]  <TASK>
[  841.223683][ T6814]  dump_stack_lvl+0xe8/0x150
[  841.223710][ T6814]  should_fail_ex+0x412/0x560
[  841.223736][ T6814]  should_failslab+0xa8/0x100
[  841.223757][ T6814]  __kmalloc_cache_noprof+0x88/0x660
[  841.223779][ T6814]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  841.223800][ T6814]  ? sctp_add_bind_addr+0x8c/0x370
[  841.223822][ T6814]  sctp_add_bind_addr+0x8c/0x370
[  841.223843][ T6814]  sctp_copy_local_addr_list+0x314/0x4f0
[  841.223864][ T6814]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  841.223881][ T6814]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  841.223902][ T6814]  ? sctp_v4_is_any+0x35/0x60
[  841.223918][ T6814]  ? sctp_copy_one_addr+0x93/0x360
[  841.223938][ T6814]  sctp_bind_addr_copy+0xb3/0x3c0
[  841.223957][ T6814]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  841.223983][ T6814]  sctp_connect_new_asoc+0x2ff/0x6b0
[  841.224006][ T6814]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  841.224028][ T6814]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  841.224047][ T6814]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  841.224065][ T6814]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  841.224085][ T6814]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  841.224108][ T6814]  ? security_sctp_bind_connect+0x7e/0x2c0
[  841.224204][ T6814]  sctp_sendmsg+0x1576/0x2c50
[  841.224238][ T6814]  ? __pfx_sctp_sendmsg+0x10/0x10
[  841.224262][ T6814]  ? aa_sk_perm+0x6d5/0x900
[  841.224312][ T6814]  ? __might_fault+0xaf/0x130
[  841.224337][ T6814]  ? __pfx_aa_sk_perm+0x10/0x10
[  841.224361][ T6814]  ? sock_rps_record_flow+0x19/0x350
[  841.224383][ T6814]  ? inet_sendmsg+0x2f4/0x370
[  841.224407][ T6814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  841.224432][ T6814]  ____sys_sendmsg+0x80a/0x9f0
[  841.224460][ T6814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  841.224485][ T6814]  ? import_iovec+0x73/0xa0
[  841.224512][ T6814]  ___sys_sendmsg+0x2a5/0x360
[  841.224528][ T6814]  ? __lock_acquire+0x6b5/0x2cf0
[  841.224551][ T6814]  ? __pfx____sys_sendmsg+0x10/0x10
[  841.224573][ T6814]  ? kstrtouint+0x6e/0xe0
[  841.224622][ T6814]  ? __fget_files+0x2a/0x420
[  841.224642][ T6814]  ? __fget_files+0x3a0/0x420
[  841.224671][ T6814]  __sys_sendmmsg+0x27c/0x4e0
[  841.224692][ T6814]  ? __pfx___sys_sendmmsg+0x10/0x10
[  841.224707][ T6814]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  841.224751][ T6814]  ? ksys_write+0x242/0x270
[  841.224775][ T6814]  ? __pfx_ksys_write+0x10/0x10
[  841.224804][ T6814]  __x64_sys_sendmmsg+0xa0/0xc0
[  841.224820][ T6814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.224839][ T6814]  do_syscall_64+0x174/0x580
[  841.224855][ T6814]  ? trace_irq_disable+0x3b/0x140
[  841.224878][ T6814]  ? clear_bhb_loop+0x40/0x90
[  841.224898][ T6814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.224914][ T6814] RIP: 0033:0x7fe96739ce59
[  841.224930][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.224944][ T6814] RSP: 002b:00007fe9682c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  841.224962][ T6814] RAX: ffffffffffffffda RBX: 00007fe967615fa0 RCX: 00007fe96739ce59
[  841.224974][ T6814] RDX: 0000000000000002 RSI: 0000200000005f40 RDI: 0000000000000003
[  841.224985][ T6814] RBP: 00007fe9682c1090 R08: 0000000000000000 R09: 0000000000000000
[  841.224995][ T6814] R10: 0000000020060041 R11: 0000000000000246 R12: 0000000000000002
[  841.225005][ T6814] R13: 00007fe967616038 R14: 00007fe967615fa0 R15: 00007fe96773fa48
[  841.225034][ T6814]  </TASK>
[  841.585648][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.820953][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.085570][T25525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.187893][ T5717] usb 2-1: USB disconnect, device number 35
[  842.372313][ T5690] usb 4-1: USB disconnect, device number 92
[  842.469453][  T133] IPVS: stop unused estimator thread 0...
[  842.488675][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3892'.
[  842.506812][   T46] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  842.586725][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.597593][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.605714][ T6890] netlink: 'syz.3.3894': attribute type 322 has an invalid length.
[  842.605990][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.623932][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.632049][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.640155][ T6888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.650831][ T6888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.696983][   T46] usb 3-1: Using ep0 maxpacket: 32
[  842.709176][   T46] usb 3-1: unable to get BOS descriptor or descriptor too short
[  842.720547][   T46] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  842.728957][   T46] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  842.738557][   T46] usb 3-1: config 14 has no interface number 0
[  842.745188][   T46] usb 3-1: config 14 has no interface number 1
[  842.751644][   T46] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  842.763269][   T46] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  842.775586][   T46] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  842.789226][   T46] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  842.803643][   T46] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  842.823009][   T46] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  842.843872][   T46] usb 3-1: config 14 interface 57 has no altsetting 0
[  842.850912][   T46] usb 3-1: config 14 interface 228 has no altsetting 0
[  842.856850][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.860108][   T46] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  842.875193][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.883324][   T46] usb 3-1: Product: syz
[  842.889638][   T46] usb 3-1: Manufacturer: syz
[  842.894311][   T46] usb 3-1: SerialNumber: syz
[  843.341146][   T46] legousbtower 3-1:14.57: interrupt endpoints not found
[  843.657516][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.742519][   T46] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  843.746684][  T809] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  843.764830][   T46] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  843.839149][ T5717] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  843.936661][  T809] usb 2-1: Using ep0 maxpacket: 16
[  843.943822][  T809] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  843.952544][  T809] usb 2-1: config 0 has no interface number 0
[  843.965291][  T809] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  843.978683][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.987051][  T809] usb 2-1: Product: syz
[  843.991312][  T809] usb 2-1: Manufacturer: syz
[  843.995982][  T809] usb 2-1: SerialNumber: syz
[  844.002694][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11
[  844.018339][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.031155][  T809] usb 2-1: config 0 descriptor??
[  844.040172][ T5717] usb 5-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00
[  844.051312][  T809] hub 2-1:0.132: bad descriptor, ignoring hub
[  844.058813][  T809] hub 2-1:0.132: probe with driver hub failed with error -5
[  844.068698][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.095243][  T809] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input156
[  844.105513][ T5717] usb 5-1: config 0 descriptor??
[  844.333018][   T46] usb 3-1: USB disconnect, device number 24
[  844.339058][    C1] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  844.392287][   T46] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  844.530694][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.538711][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.559547][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.569309][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.580753][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.589176][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.599274][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.607614][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.615283][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.625086][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.633260][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.643935][ T5717] nzxt-smart2 0003:1E71:200F.0071: unknown main item tag 0x0
[  844.665395][ T5717] nzxt-smart2 0003:1E71:200F.0071: hidraw0: USB HID v7f.fd Device [HID 1e71:200f] on usb-dummy_hcd.4-1/input0
[  844.698100][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.754790][ T5717] usb 5-1: USB disconnect, device number 116
[  845.089558][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3905'.
[  845.100698][ T6990] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  845.320999][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'.
[  845.368474][ T5717] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  845.516625][ T5717] usb 3-1: device descriptor read/64, error -71
[  845.766745][ T5717] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  845.825106][ T7025] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3911'.
[  845.897749][ T5717] usb 3-1: device descriptor read/64, error -71
[  846.006832][ T5717] usb usb3-port1: attempt power cycle
[  846.076594][ T5690] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  846.226659][ T5690] usb 5-1: Using ep0 maxpacket: 8
[  846.233057][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9
[  846.244302][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33540, setting to 1024
[  846.259534][ T5690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  846.285612][ T5690] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  846.295040][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.311423][ T5690] usb 5-1: config 0 descriptor??
[  846.388716][ T5717] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  846.429816][ T5717] usb 3-1: device descriptor read/8, error -71
[  846.483787][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3913'.
[  846.486861][ T7040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3913'.
[  846.639605][  T809] usb 2-1: USB disconnect, device number 36
[  846.686870][ T5717] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  846.717238][ T5717] usb 3-1: device descriptor read/8, error -71
[  846.725782][ T5690] elecom 0003:056E:00FE.0072: invalid report_size 58537
[  846.729630][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  846.733383][ T5690] elecom 0003:056E:00FE.0072: item 0 2 1 7 parsing failed
[  846.745724][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  846.750283][ T5690] elecom 0003:056E:00FE.0072: probe with driver elecom failed with error -22
[  846.821198][ T7071] netlink: 'syz.1.3917': attribute type 41 has an invalid length.
[  846.829931][ T5717] usb usb3-port1: unable to enumerate USB device
[  846.836359][ T7071] netlink: 'syz.1.3917': attribute type 27 has an invalid length.
[  846.844634][ T5635] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  846.923155][ T5717] usb 5-1: USB disconnect, device number 117
[  846.996587][ T5635] usb 4-1: Using ep0 maxpacket: 32
[  847.007390][ T5635] usb 4-1: unable to get BOS descriptor or descriptor too short
[  847.016228][ T5635] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  847.024897][ T5635] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  847.036218][ T5635] usb 4-1: config 14 has no interface number 0
[  847.045283][ T5635] usb 4-1: config 14 has no interface number 1
[  847.055378][ T5635] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  847.071859][ T5635] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  847.090948][ T5635] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  847.110281][ T5635] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  847.127371][ T5635] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  847.145994][ T5635] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  847.168199][ T5635] usb 4-1: config 14 interface 57 has no altsetting 0
[  847.179570][ T5635] usb 4-1: config 14 interface 228 has no altsetting 0
[  847.193883][ T5635] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  847.204147][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.220600][ T5635] usb 4-1: Product: syz
[  847.227810][ T5635] usb 4-1: Manufacturer: syz
[  847.236257][ T5635] usb 4-1: SerialNumber: syz
[  847.651819][ T5635] legousbtower 4-1:14.57: interrupt endpoints not found
[  847.817246][   T24] net_ratelimit: 10 callbacks suppressed
[  847.817263][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.052193][ T5635] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  848.068538][ T5635] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  848.506603][ T5690] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  848.624283][ T5635] usb 4-1: USB disconnect, device number 93
[  848.630301][    C0] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  848.649980][ T5635] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected
[  848.668858][ T5690] usb 3-1: Using ep0 maxpacket: 32
[  848.685307][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.700533][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  848.711220][ T5690] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  848.722174][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.730933][ T7169] loop3: detected capacity change from 0 to 7
[  848.739809][ T7169] Dev loop3: unable to read RDB block 7
[  848.747106][ T5690] usb 3-1: config 0 descriptor??
[  848.757466][ T7169]  loop3: unable to read partition table
[  848.764799][ T5690] hub 3-1:0.0: USB hub found
[  848.775137][ T7169] loop3: partition table beyond EOD, truncated
[  848.785318][ T7169] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  848.868957][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.938076][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.958672][ T5690] hub 3-1:0.0: 1 port detected
[  849.466724][   T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  849.564245][   T46] hub 3-1:0.0: activate --> -90
[  849.636584][   T24] usb 5-1: Using ep0 maxpacket: 16
[  849.643075][   T24] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  849.651413][   T24] usb 5-1: config 3 has no interface number 0
[  849.657697][   T24] usb 5-1: config 3 interface 20 has no altsetting 0
[  849.670176][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  849.679673][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.695076][   T24] usb 5-1: Product: syz
[  849.708435][   T24] usb 5-1: Manufacturer: syz
[  849.721364][   T24] usb 5-1: SerialNumber: syz
[  849.743523][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'.
[  849.774377][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.792067][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.809181][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.821679][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.898479][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.949642][ T7186] loop5: detected capacity change from 0 to 7
[  849.969716][ T7186] Dev loop5: unable to read RDB block 7
[  849.980509][ T7186]  loop5: unable to read partition table
[  849.989986][ T7186] loop5: partition table beyond EOD, truncated
[  849.996645][ T7186] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  850.026110][   T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input157
[  850.048456][ T4986] bcm5974 5-1:3.20: could not read from device
[  850.066383][ T4986] bcm5974 5-1:3.20: could not read from device
[  850.078444][ T4986] bcm5974 5-1:3.20: could not read from device
[  850.088451][   T24] usb 5-1: USB disconnect, device number 118
[  850.096108][ T4986] bcm5974 5-1:3.20: could not read from device
[  850.286766][ T5635] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  850.426694][ T5635] usb 2-1: device descriptor read/64, error -71
[  850.565911][   T29] audit: type=1326 audit(1781122784.398:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.590739][   T29] audit: type=1326 audit(1781122784.398:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.620823][   T29] audit: type=1326 audit(1781122784.428:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.645858][   T29] audit: type=1326 audit(1781122784.428:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.655140][ T7234] vivid-003: =================  START STATUS  =================
[  850.670597][   T29] audit: type=1326 audit(1781122784.428:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.702401][ T7234] vivid-003: Radio HW Seek Mode: Bounded
[  850.708112][ T5635] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  850.716340][ T7234] vivid-003: Radio Programmable HW Seek: false
[  850.723726][ T7234] vivid-003: RDS Rx I/O Mode: Block I/O
[  850.729830][ T7234] vivid-003: Generate RBDS Instead of RDS: false
[  850.736260][ T7234] vivid-003: RDS Reception: true
[  850.745121][ T7234] vivid-003: RDS Program Type: 0 inactive
[  850.751164][   T29] audit: type=1326 audit(1781122784.458:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.775540][ T7234] vivid-003: RDS PS Name:  inactive
[  850.781484][ T7234] vivid-003: RDS Radio Text:  inactive
[  850.787984][ T7234] vivid-003: RDS Traffic Announcement: false inactive
[  850.794879][   T29] audit: type=1326 audit(1781122784.458:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.819665][ T7234] vivid-003: RDS Traffic Program: false inactive
[  850.836802][ T7234] vivid-003: RDS Music: false inactive
[  850.846794][ T5635] usb 2-1: device descriptor read/64, error -71
[  850.855185][ T7234] vivid-003: ==================  END STATUS  ==================
[  850.867466][   T29] audit: type=1326 audit(1781122784.458:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.916928][   T46] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  850.938338][   T29] audit: type=1326 audit(1781122784.478:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  850.941399][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.964127][ T5635] usb usb2-port1: attempt power cycle
[  850.972902][   T46] usb 3-1-port1: cannot disable (err = -32)
[  850.981673][   T29] audit: type=1326 audit(1781122784.478:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.4.3928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f6d9ce59 code=0x7ffc0000
[  851.040177][ T7240] loop2: detected capacity change from 0 to 7
[  851.051065][ T7240] Dev loop2: unable to read RDB block 7
[  851.057953][ T7240]  loop2: unable to read partition table
[  851.063756][ T7240] loop2: partition table beyond EOD, truncated
[  851.100297][ T7240] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  851.115504][ T5001] Dev loop2: unable to read RDB block 7
[  851.123896][ T5001]  loop2: unable to read partition table
[  851.130554][ T5001] loop2: partition table beyond EOD, truncated
[  851.311292][ T7262] loop3: detected capacity change from 0 to 7
[  851.316595][ T5635] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  851.321441][ T7262] Dev loop3: unable to read RDB block 7
[  851.337611][ T7262]  loop3: unable to read partition table
[  851.353626][ T7262] loop3: partition table beyond EOD, truncated
[  851.357042][ T5635] usb 2-1: device descriptor read/8, error -71
[  851.376880][ T5690] usb 3-1: USB disconnect, device number 29
[  851.383940][ T7262] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  851.401135][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'.
[  851.417393][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.478403][    T9] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[  851.616721][ T5635] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  851.624350][    T9] usb 5-1: device descriptor read/64, error -71
[  851.647054][ T5635] usb 2-1: device descriptor read/8, error -71
[  851.757182][ T5635] usb usb2-port1: unable to enumerate USB device
[  851.866613][    T9] usb 5-1: new full-speed USB device number 120 using dummy_hcd
[  851.977458][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.991039][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.016603][    T9] usb 5-1: device descriptor read/64, error -71
[  852.138688][    T9] usb usb5-port1: attempt power cycle
[  852.496623][    T9] usb 5-1: new full-speed USB device number 121 using dummy_hcd
[  852.517975][    T9] usb 5-1: device descriptor read/8, error -71
[  852.687739][ T7308] loop2: detected capacity change from 0 to 7
[  852.695067][ T7308] Dev loop2: unable to read RDB block 7
[  852.701639][ T7308]  loop2: unable to read partition table
[  852.707889][ T7308] loop2: partition table beyond EOD, truncated
[  852.715973][ T7308] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  852.726742][   T46] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  852.768312][    T9] usb 5-1: new full-speed USB device number 122 using dummy_hcd
[  852.806719][ T5690] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  852.814661][    T9] usb 5-1: device descriptor read/8, error -71
[  852.886756][   T46] usb 4-1: Using ep0 maxpacket: 32
[  852.894080][   T46] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[  852.903247][   T46] usb 4-1: config 0 has no interface number 0
[  852.909543][   T46] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  852.928327][    T9] usb usb5-port1: unable to enumerate USB device
[  852.936460][   T46] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  852.945989][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.954218][   T46] usb 4-1: Product: syz
[  852.958687][   T46] usb 4-1: Manufacturer: syz
[  852.963312][   T46] usb 4-1: SerialNumber: syz
[  852.968067][ T5690] usb 3-1: Using ep0 maxpacket: 16
[  852.975806][   T46] usb 4-1: config 0 descriptor??
[  852.990557][ T5690] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  853.003198][ T5690] usb 3-1: config 0 has no interface number 0
[  853.017935][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.036670][ T5690] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  853.052853][ T5690] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  853.076374][ T5690] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  853.086368][ T5690] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  853.103452][ T5690] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  853.123559][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  853.127584][ T7334] random: crng reseeded on system resumption
[  853.144522][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.153917][ T5690] usb 3-1: Product: syz
[  853.163765][ T5690] usb 3-1: Manufacturer: syz
[  853.175351][ T5690] usb 3-1: SerialNumber: syz
[  853.183386][ T5690] usb 3-1: config 0 descriptor??
[  853.203841][ T7303] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  853.336668][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  853.417358][ T5690] qcserial 3-1:0.49: Qualcomm USB modem converter detected
[  853.439348][ T5690] usb 3-1: USB disconnect, device number 30
[  853.451272][ T5690] qcserial 3-1:0.49: device disconnected
[  853.919458][ T7349] loop3: detected capacity change from 0 to 7
[  853.928355][ T7349] Dev loop3: unable to read RDB block 7
[  853.934212][ T7349]  loop3: unable to read partition table
[  853.942028][ T7349] loop3: partition table beyond EOD, truncated
[  853.960234][ T7349] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  854.058572][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.247188][ T5690] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  854.307686][ T5635] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  854.366413][ T7369] netlink: 'syz.4.3948': attribute type 8 has an invalid length.
[  854.386828][ T5690] usb 3-1: device descriptor read/64, error -71
[  854.476583][ T5635] usb 2-1: Using ep0 maxpacket: 16
[  854.483026][ T5635] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  854.491673][ T5635] usb 2-1: config 0 has no interface number 0
[  854.504518][ T5635] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  854.523230][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.532834][ T5635] usb 2-1: Product: syz
[  854.540021][ T5635] usb 2-1: Manufacturer: syz
[  854.545044][ T5635] usb 2-1: SerialNumber: syz
[  854.559089][ T5635] usb 2-1: config 0 descriptor??
[  854.570595][ T5635] hub 2-1:0.132: bad descriptor, ignoring hub
[  854.577821][ T5635] hub 2-1:0.132: probe with driver hub failed with error -5
[  854.591746][ T5635] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input158
[  854.637160][ T5690] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  854.725092][ T7387] syzkaller0: entered promiscuous mode
[  854.730637][ T7387] syzkaller0: entered allmulticast mode
[  854.768681][ T5690] usb 3-1: device descriptor read/64, error -71
[  854.892237][ T5690] usb usb3-port1: attempt power cycle
[  855.031488][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.100283][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.248448][ T5690] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  855.256932][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.293255][ T5690] usb 3-1: device descriptor read/8, error -71
[  855.403323][   T46] usb 4-1: USB disconnect, device number 94
[  855.488423][ T7400] fuse: Bad value for 'fd'
[  855.547473][ T5690] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[  855.567275][ T5690] usb 3-1: device descriptor read/8, error -71
[  855.680366][ T5690] usb usb3-port1: unable to enumerate USB device
[  855.994353][ T7407] loop2: detected capacity change from 0 to 7
[  856.024909][ T7407] Dev loop2: unable to read RDB block 7
[  856.030674][ T7407]  loop2: unable to read partition table
[  856.036998][ T7407] loop2: partition table beyond EOD, truncated
[  856.049461][ T7407] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  856.139334][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.185507][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.203071][ T5635] usb 2-1: USB disconnect, device number 41
[  857.456782][ T5690] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  857.580551][ T7445] loop3: detected capacity change from 0 to 7
[  857.598498][ T7445] Dev loop3: unable to read RDB block 7
[  857.606610][ T5690] usb 3-1: Using ep0 maxpacket: 16
[  857.613746][ T7445]  loop3: unable to read partition table
[  857.622335][ T5690] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  857.629346][ T7445] loop3: partition table beyond EOD, truncated
[  857.644507][ T5690] usb 3-1: config 1 has no interface number 0
[  857.649814][ T7445] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  857.659476][ T5690] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  857.679369][ T5690] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  857.699341][ T5690] usb 3-1: config 1 interface 105 has no altsetting 0
[  857.714927][ T5690] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  857.727664][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  857.729505][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.745933][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.745981][ T5690] usb 3-1: Product: syz
[  857.745999][ T5690] usb 3-1: Manufacturer: syz
[  857.746013][ T5690] usb 3-1: SerialNumber: syz
[  857.788038][ T7430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  857.795478][ T7430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  857.853161][ T7456] syzkaller0: entered promiscuous mode
[  857.859331][ T7456] syzkaller0: entered allmulticast mode
[  857.929706][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3962'.
[  857.939317][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3962'.
[  858.028078][ T7430] Failed to get privilege flags for destination (handle=0x0:0x0)
[  858.049153][ T7430] QAT: Device 198 not found
[  858.067683][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.225151][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.251468][ T7514] "syz.4.3966" (7514) uses obsolete ecb(arc4) skcipher
[  858.299708][ T7430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  858.308235][ T7430] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  858.356597][ T5635] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  858.506607][ T5635] usb 2-1: Using ep0 maxpacket: 32
[  858.513407][ T5635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  858.524899][ T5635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  858.534914][ T5635] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  858.545408][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.556926][ T5635] usb 2-1: config 0 descriptor??
[  858.577699][ T5635] hub 2-1:0.0: USB hub found
[  858.606602][    T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  858.758776][    T9] usb 5-1: Using ep0 maxpacket: 16
[  858.768042][    T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  858.781039][    T9] usb 5-1: config 0 has no interface number 0
[  858.787461][ T5635] hub 2-1:0.0: 1 port detected
[  858.795055][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  858.804671][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.813136][    T9] usb 5-1: Product: syz
[  858.817377][    T9] usb 5-1: Manufacturer: syz
[  858.821993][    T9] usb 5-1: SerialNumber: syz
[  858.829907][    T9] usb 5-1: config 0 descriptor??
[  858.837042][    T9] hub 5-1:0.132: bad descriptor, ignoring hub
[  858.843166][    T9] hub 5-1:0.132: probe with driver hub failed with error -5
[  858.854130][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input159
[  858.930569][ T5690] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  858.945928][ T5690] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  858.972134][ T5690] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:6b:a5:fe:84:23
[  858.994479][ T5690] usb 3-1: USB disconnect, device number 35
[  859.013735][ T5635] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  859.014287][ T5690] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  859.021414][ T5635] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  859.059188][ T5635] usbhid 2-1:0.0: can't add hid device: -71
[  859.079766][ T5635] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  859.120950][ T5635] usb 2-1: USB disconnect, device number 42
[  859.137155][ T5690] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  859.151990][ T5690] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  859.161696][ T5690] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  859.256878][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.491355][ T7573] loop3: detected capacity change from 0 to 7
[  859.500309][ T7573] Dev loop3: unable to read RDB block 7
[  859.506200][ T7573]  loop3: unable to read partition table
[  859.513462][ T7573] loop3: partition table beyond EOD, truncated
[  859.519723][ T7573] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  859.709099][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3972'.
[  859.788555][   T29] kauditd_printk_skb: 27 callbacks suppressed
[  859.788567][   T29] audit: type=1326 audit(1781122793.618:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  859.876434][   T29] audit: type=1326 audit(1781122793.658:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  859.938248][   T29] audit: type=1326 audit(1781122793.658:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  859.998628][   T29] audit: type=1326 audit(1781122793.658:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.060938][   T29] audit: type=1326 audit(1781122793.758:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.130536][   T29] audit: type=1326 audit(1781122793.758:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.203234][   T29] audit: type=1326 audit(1781122793.758:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.237133][ T5697] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  860.237887][   T29] audit: type=1326 audit(1781122793.818:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.271525][   T29] audit: type=1326 audit(1781122793.858:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.297500][   T29] audit: type=1326 audit(1781122793.868:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.3971" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e39ce59 code=0x7ffc0000
[  860.298549][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.365915][ T7605] syzkaller0: entered promiscuous mode
[  860.371660][ T7605] syzkaller0: entered allmulticast mode
[  860.409772][ T5697] usb 2-1: device descriptor read/64, error -71
[  860.646930][ T5697] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  860.766705][   T46] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  860.776597][ T5697] usb 2-1: device descriptor read/64, error -71
[  860.855544][ T7630] xt_hashlimit: size too large, truncated to 1048576
[  860.897992][ T5697] usb usb2-port1: attempt power cycle
[  861.017314][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.106951][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.128336][    T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  861.246871][ T5697] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  861.267002][ T5697] usb 2-1: device descriptor read/8, error -71
[  861.298392][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  861.306624][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  861.315246][    T9] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  861.323532][    T9] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  861.332837][    T9] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  861.343359][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.343490][    T9] usb 3-1: config 14 has no interface number 0
[  861.357864][    T9] usb 3-1: config 14 has no interface number 1
[  861.364097][    T9] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  861.383957][    T9] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  861.395857][    T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  861.407152][    T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  861.422979][    T9] usb 3-1: config 14 interface 57 has no altsetting 0
[  861.432529][    T9] usb 3-1: config 14 interface 228 has no altsetting 0
[  861.442591][    T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  861.454300][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.463744][    T9] usb 3-1: Product: syz
[  861.467619][ T7654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3980'.
[  861.470666][    T9] usb 3-1: Manufacturer: syz
[  861.478783][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'.
[  861.491622][ T7654] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  861.498817][    T9] usb 3-1: SerialNumber: syz
[  861.507940][ T5697] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  861.516856][ T5690] usb 5-1: USB disconnect, device number 123
[  861.528682][ T5697] usb 2-1: device descriptor read/8, error -71
[  861.647194][ T5697] usb usb2-port1: unable to enumerate USB device
[  861.836595][ T5690] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  861.914269][    T9] legousbtower 3-1:14.57: interrupt endpoints not found
[  861.938298][    T9] legousbtower 3-1:14.228: get version request failed: -71
[  861.947605][    T9] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71
[  861.972296][    T9] usb 3-1: USB disconnect, device number 36
[  861.993082][ T5690] usb 5-1: config index 0 descriptor too short (expected 3133, got 61)
[  862.007478][ T5690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  862.019361][ T5690] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  862.028810][ T5690] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  862.038773][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.064370][ T5690] usb 5-1: config 0 descriptor??
[  862.073325][ T5690] gspca_main: spca561-2.14.0 probing abcd:cdee
[  862.355328][ T5690] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[  862.366787][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  862.369136][ T5690] usb 5-1: USB disconnect, device number 124
[  862.374428][  T809] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  862.382778][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.533177][ T7714] vivid-000: disconnect
[  862.546654][    T9] usb 3-1: Using ep0 maxpacket: 32
[  862.552522][  T809] usb 4-1: Using ep0 maxpacket: 32
[  862.561312][  T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.578049][  T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.589960][  T809] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  862.599443][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  862.608488][  T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.622283][    T9] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  862.635345][  T809] usb 4-1: config 0 descriptor??
[  862.644713][    T9] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  862.659766][  T809] hub 4-1:0.0: USB hub found
[  862.662452][ T7718] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  862.665457][    T9] usb 3-1: config 14 has no interface number 0
[  862.686426][    T9] usb 3-1: config 14 has no interface number 1
[  862.703674][    T9] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  862.718805][    T9] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  862.731158][    T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  862.750273][    T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  862.762757][    T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  862.774595][    T9] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  862.801187][    T9] usb 3-1: config 14 interface 57 has no altsetting 0
[  862.818914][    T9] usb 3-1: config 14 interface 228 has no altsetting 0
[  862.840129][    T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  862.849414][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.860939][    T9] usb 3-1: Product: syz
[  862.870269][  T809] hub 4-1:0.0: 1 port detected
[  862.875054][    T9] usb 3-1: Manufacturer: syz
[  862.887666][    T9] usb 3-1: SerialNumber: syz
[  862.982721][ T7740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  863.100063][  T809] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  863.113601][  T809] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  863.129862][  T809] usbhid 4-1:0.0: can't add hid device: -71
[  863.136739][  T809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  863.171580][  T809] usb 4-1: USB disconnect, device number 96
[  863.185557][ T7759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.197314][ T7759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.208146][ T7759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.217076][ T7759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.225678][ T7759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.261436][ T7712] vivid-000: reconnect
[  863.324311][    T9] legousbtower 3-1:14.57: interrupt endpoints not found
[  863.334809][ T7757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.376676][ T5717] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  863.420624][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.492104][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'.
[  863.546623][ T5717] usb 2-1: Using ep0 maxpacket: 32
[  863.567011][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short
[  863.585623][ T5717] usb 2-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config
[  863.598254][ T5717] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  863.628107][ T5717] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  863.642654][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.667056][   T24] usb 5-1: new low-speed USB device number 125 using dummy_hcd
[  863.673620][ T5717] usb 2-1: Product: syz
[  863.686756][ T5717] usb 2-1: Manufacturer: syz
[  863.696715][ T5717] usb 2-1: SerialNumber: syz
[  863.733410][ T5717] usb 2-1: 0:1 : does not exist
[  863.740980][    T9] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  863.756908][ T5717] usb 2-1: 0:2 : does not exist
[  863.763078][ T5717] usb 2-1: unit 3 not found!
[  863.771490][    T9] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  863.850229][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.889972][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt
[  863.924524][   T24] usb 5-1: string descriptor 0 read error: -22
[  863.938556][ T5717] usb 2-1: USB disconnect, device number 47
[  863.943373][   T24] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40
[  863.973086][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.022089][ T7769] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  864.035980][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  864.089410][   T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  864.142139][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.249615][ T5717] usb 5-1: USB disconnect, device number 125
[  864.457228][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.497623][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.555595][   T46] usb 3-1: USB disconnect, device number 37
[  865.586776][ T5635] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  865.646622][ T5717] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  865.657612][   T46] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  865.822321][ T5635] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  865.849937][ T5717] usb 5-1: device descriptor read/64, error -71
[  865.888229][ T5635] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  865.961699][ T5635] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  866.006575][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.043245][ T5635] usb 4-1: Product: syz
[  866.058995][ T5635] usb 4-1: Manufacturer: syz
[  866.094158][ T5635] usb 4-1: SerialNumber: syz
[  866.116639][ T5717] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  866.276814][ T5717] usb 5-1: device descriptor read/64, error -71
[  866.379175][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3997'.
[  866.398631][ T5717] usb usb5-port1: attempt power cycle
[  866.453385][ T5635] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  866.463958][ T5635] usb 4-1: unit 6 not found!
[  866.464753][ T7890] syzkaller0: entered promiscuous mode
[  866.475220][ T7890] syzkaller0: entered allmulticast mode
[  866.518241][ T5635] usb 4-1: USB disconnect, device number 97
[  866.564131][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  866.588068][    T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  866.766618][ T5717] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  866.774184][    T9] usb 3-1: Using ep0 maxpacket: 32
[  866.782502][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.793461][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.803230][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  866.813116][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.821782][ T5717] usb 5-1: device descriptor read/8, error -71
[  866.830646][    T9] usb 3-1: config 0 descriptor??
[  866.847960][    T9] hub 3-1:0.0: USB hub found
[  867.050792][    T9] hub 3-1:0.0: 1 port detected
[  867.076391][ T5717] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  867.110470][ T5717] usb 5-1: device descriptor read/8, error -71
[  867.117756][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  867.117769][   T29] audit: type=1326 audit(1781122800.948:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.3.4003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3ea59ce59 code=0x0
[  867.232747][ T5717] usb usb5-port1: unable to enumerate USB device
[  867.287589][    T9] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  867.302224][    T9] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  867.313828][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  867.320026][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  867.362046][    T9] usb 3-1: USB disconnect, device number 38
[  868.256594][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  868.410373][   T24] usb 3-1: Using ep0 maxpacket: 32
[  868.422339][ T7959] net_ratelimit: 3 callbacks suppressed
[  868.422355][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.427537][   T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  868.428992][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.436169][   T24] usb 3-1: config 0 has no interface number 0
[  868.436217][   T24] usb 3-1: config 0 interface 184 has no altsetting 0
[  868.439033][   T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  868.447919][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.464908][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.467031][T25525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.475070][   T24] usb 3-1: Product: syz
[  868.475088][   T24] usb 3-1: Manufacturer: syz
[  868.475118][   T24] usb 3-1: SerialNumber: syz
[  868.485455][   T24] usb 3-1: config 0 descriptor??
[  868.492927][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.619618][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.264302][ T7941] virt_wifi0: mtu less than device minimum
[  869.324837][ T7972] netlink: 'syz.0.4009': attribute type 5 has an invalid length.
[  869.371098][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  869.403130][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  869.424172][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  869.440017][ T7980] netlink: 'syz.1.4011': attribute type 1 has an invalid length.
[  869.447911][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  869.459198][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  869.479642][   T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  869.497384][   T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  869.514275][   T24] usb 3-1: USB disconnect, device number 39
[  869.563600][ T8021] bond1: (slave geneve2): making interface the new active one
[  869.564432][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'.
[  869.581548][ T8021] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  869.590396][T25525] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  869.602105][T25525] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  869.614343][ T7980] 8021q: adding VLAN 0 to HW filter on device bond1
[  869.621910][T25525] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  869.630932][T25525] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  869.656941][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.726777][ T5728] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  869.908129][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.928136][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.934752][ T8053] loop8: detected capacity change from 0 to 8
[  869.947563][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  869.960738][ T5728] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  869.971703][ T8053] Dev loop8: unable to read RDB block 8
[  869.978838][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.988988][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  869.989070][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  869.995441][ T8053]  loop8: unable to read partition table
[  869.999801][    C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  870.028851][ T5728] usb 5-1: config 0 descriptor??
[  870.038297][ T8053] loop8: partition table beyond EOD, truncated
[  870.055294][ T8053] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  870.218419][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.265610][ T5728] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  870.357136][ T5697] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  870.438048][ T8082] netlink: 'syz.4.4012': attribute type 1 has an invalid length.
[  870.466840][ T8082] bond4: entered promiscuous mode
[  870.472136][ T8082] 8021q: adding VLAN 0 to HW filter on device bond4
[  870.481171][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4012'.
[  870.504207][    T9] usb 5-1: USB disconnect, device number 4
[  870.506586][ T5697] usb 3-1: Using ep0 maxpacket: 16
[  870.529661][ T5697] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  870.540696][ T5697] usb 3-1: config 0 has no interface number 0
[  870.550098][ T5697] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  870.562773][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.571453][ T5697] usb 3-1: Product: syz
[  870.575671][ T5697] usb 3-1: Manufacturer: syz
[  870.580716][ T5697] usb 3-1: SerialNumber: syz
[  870.587324][ T5697] usb 3-1: config 0 descriptor??
[  870.595339][ T5697] hub 3-1:0.132: bad descriptor, ignoring hub
[  870.601818][ T5697] hub 3-1:0.132: probe with driver hub failed with error -5
[  870.611621][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input160
[  870.946908][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  871.046649][ T5697] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  871.098235][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  871.109283][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  871.119602][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  871.132802][    T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  871.141913][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.150053][    T9] usb 5-1: Product: syz
[  871.154245][    T9] usb 5-1: Manufacturer: syz
[  871.159002][    T9] usb 5-1: SerialNumber: syz
[  871.165523][    T9] usb 5-1: config 0 descriptor??
[  871.196657][ T5697] usb 2-1: Using ep0 maxpacket: 32
[  871.203713][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  871.215891][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  871.225922][ T5697] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  871.235277][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.246029][ T5697] usb 2-1: config 0 descriptor??
[  871.255539][ T5697] hub 2-1:0.0: USB hub found
[  871.380134][    T9] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  871.454061][ T5697] hub 2-1:0.0: 1 port detected
[  872.057561][ T5697] hub 2-1:0.0: activate --> -90
[  872.260265][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.270405][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.280450][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.290406][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.138301][ T8190] 
[  873.140658][ T8190] =====================================================
[  873.147585][ T8190] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  873.155163][ T8190] syzkaller #0 Tainted: G             L     
[  873.161124][ T8190] -----------------------------------------------------
[  873.168065][ T8190] syz.2.4028/8190 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  873.175709][ T8190] ffff88802793a360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  873.184396][ T8190] 
[  873.184396][ T8190] and this task is already holding:
[  873.191738][ T8190] ffff88807b93c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  873.201509][ T8190] which would create a new lock dependency:
[  873.207373][ T8190]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  873.215481][ T8190] 
[  873.215481][ T8190] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  873.224904][ T8190]  (&dev->event_lock#2){..-.}-{3:3}
[  873.224924][ T8190] 
[  873.224924][ T8190] ... which became SOFTIRQ-irq-safe at:
[  873.226960][    T9] usb 3-1: USB disconnect, device number 40
[  873.230092][ T8190]   lock_acquire+0x106/0x350
[  873.230120][ T8190]   _raw_spin_lock_irqsave+0x40/0x60
[  873.253492][ T8190]   input_event+0x71/0xc0
[  873.257851][ T8190]   atp_complete_geyser_3_4+0x114e/0x1d90
[  873.263586][ T8190]   __usb_hcd_giveback_urb+0x376/0x540
[  873.269080][ T8190]   dummy_timer+0xbc0/0x4650
[  873.273738][ T8190]   __hrtimer_run_queues+0x3c0/0xa20
[  873.279005][ T8190]   hrtimer_run_softirq+0x17a/0x240
[  873.284185][ T8190]   handle_softirqs+0x22a/0x840
[  873.289016][ T8190]   __irq_exit_rcu+0xca/0x220
[  873.293668][ T8190]   irq_exit_rcu+0x9/0x30
[  873.297976][ T8190]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  873.303675][ T8190]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  873.309721][ T8190]   _raw_spin_unlock_irqrestore+0x47/0x80
[  873.315438][ T8190]   dummy_urb_enqueue+0x58a/0x780
[  873.320444][ T8190]   usb_hcd_submit_urb+0x328/0x1b70
[  873.325621][ T8190]   atp_open+0x60/0x90
[  873.329670][ T8190]   input_open_device+0x1f8/0x3b0
[  873.334678][ T8190]   mousedev_open_device+0xcc/0x150
[  873.339850][ T8190]   mousedev_open+0x2ef/0x4a0
[  873.344505][ T8190]   chrdev_open+0x4cd/0x5e0
[  873.348984][ T8190]   do_dentry_open+0x822/0x13a0
[  873.353810][ T8190]   vfs_open+0x3b/0x340
[  873.357942][ T8190]   path_openat+0x2e08/0x3860
[  873.362605][ T8190]   do_file_open+0x23e/0x4a0
[  873.367186][ T8190]   do_sys_openat2+0x113/0x200
[  873.371932][ T8190]   __x64_sys_openat+0x138/0x170
[  873.376865][ T8190]   do_syscall_64+0x174/0x580
[  873.381533][ T8190]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.387495][ T8190] 
[  873.387495][ T8190] to a SOFTIRQ-irq-unsafe lock:
[  873.394531][ T8190]  (tasklist_lock){.+.+}-{3:3}
[  873.394548][ T8190] 
[  873.394548][ T8190] ... which became SOFTIRQ-irq-unsafe at:
[  873.407165][ T8190] ...
[  873.407171][ T8190]   lock_acquire+0x106/0x350
[  873.414293][ T8190]   _raw_read_lock+0x36/0x50
[  873.418866][ T8190]   __do_wait+0xde/0x740
[  873.423097][ T8190]   do_wait+0x1e7/0x510
[  873.427231][ T8190]   kernel_wait+0xd6/0x1c0
[  873.431631][ T8190]   call_usermodehelper_exec_work+0xbe/0x230
[  873.437607][ T8190]   process_scheduled_works+0xb5d/0x1860
[  873.443215][ T8190]   worker_thread+0xa53/0xfc0
[  873.447880][ T8190]   kthread+0x389/0x470
[  873.452020][ T8190]   ret_from_fork+0x514/0xb70
[  873.456683][ T8190]   ret_from_fork_asm+0x1a/0x30
[  873.461517][ T8190] 
[  873.461517][ T8190] other info that might help us debug this:
[  873.461517][ T8190] 
[  873.471729][ T8190] Chain exists of:
[  873.471729][ T8190]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  873.471729][ T8190] 
[  873.485264][ T8190]  Possible interrupt unsafe locking scenario:
[  873.485264][ T8190] 
[  873.493615][ T8190]        CPU0                    CPU1
[  873.498959][ T8190]        ----                    ----
[  873.504361][ T8190]   lock(tasklist_lock);
[  873.508584][ T8190]                                local_irq_disable();
[  873.515317][ T8190]                                lock(&dev->event_lock#2);
[  873.522556][ T8190]                                lock(&client->buffer_lock);
[  873.529904][ T8190]   <Interrupt>
[  873.533379][ T8190]     lock(&dev->event_lock#2);
[  873.538221][ T8190] 
[  873.538221][ T8190]  *** DEADLOCK ***
[  873.538221][ T8190] 
[  873.546341][ T8190] 7 locks held by syz.2.4028/8190:
[  873.551425][ T8190]  #0: ffff88802b8cc110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[  873.560547][ T8190]  #1: ffff88801fbce230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330
[  873.570639][ T8190]  #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330
[  873.580268][ T8190]  #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  873.589807][ T8190]  #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  873.598912][ T8190]  #5: ffff88807b93c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  873.609059][ T8190]  #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  873.618082][ T8190] 
[  873.618082][ T8190] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  873.628468][ T8190]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  873.634093][ T8190]     IN-SOFTIRQ-W at:
[  873.638213][ T8190]                       lock_acquire+0x106/0x350
[  873.644537][ T8190]                       _raw_spin_lock_irqsave+0x40/0x60
[  873.651559][ T8190]                       input_event+0x71/0xc0
[  873.657627][ T8190]                       atp_complete_geyser_3_4+0x114e/0x1d90
[  873.665067][ T8190]                       __usb_hcd_giveback_urb+0x376/0x540
[  873.672241][ T8190]                       dummy_timer+0xbc0/0x4650
[  873.678553][ T8190]                       __hrtimer_run_queues+0x3c0/0xa20
[  873.685559][ T8190]                       hrtimer_run_softirq+0x17a/0x240
[  873.692474][ T8190]                       handle_softirqs+0x22a/0x840
[  873.699047][ T8190]                       __irq_exit_rcu+0xca/0x220
[  873.705437][ T8190]                       irq_exit_rcu+0x9/0x30
[  873.711479][ T8190]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[  873.718922][ T8190]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  873.726727][ T8190]                       _raw_spin_unlock_irqrestore+0x47/0x80
[  873.734173][ T8190]                       dummy_urb_enqueue+0x58a/0x780
[  873.740926][ T8190]                       usb_hcd_submit_urb+0x328/0x1b70
[  873.747848][ T8190]                       atp_open+0x60/0x90
[  873.753635][ T8190]                       input_open_device+0x1f8/0x3b0
[  873.760378][ T8190]                       mousedev_open_device+0xcc/0x150
[  873.767295][ T8190]                       mousedev_open+0x2ef/0x4a0
[  873.773695][ T8190]                       chrdev_open+0x4cd/0x5e0
[  873.779913][ T8190]                       do_dentry_open+0x822/0x13a0
[  873.786484][ T8190]                       vfs_open+0x3b/0x340
[  873.792360][ T8190]                       path_openat+0x2e08/0x3860
[  873.798755][ T8190]                       do_file_open+0x23e/0x4a0
[  873.805065][ T8190]                       do_sys_openat2+0x113/0x200
[  873.811546][ T8190]                       __x64_sys_openat+0x138/0x170
[  873.818203][ T8190]                       do_syscall_64+0x174/0x580
[  873.824597][ T8190]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.832293][ T8190]     INITIAL USE at:
[  873.836258][ T8190]                      lock_acquire+0x106/0x350
[  873.842478][ T8190]                      _raw_spin_lock_irqsave+0x40/0x60
[  873.849397][ T8190]                      input_inject_event+0xa4/0x330
[  873.856053][ T8190]                      kbd_led_trigger_activate+0xbc/0x100
[  873.863229][ T8190]                      led_trigger_set+0x535/0x960
[  873.869788][ T8190]                      led_trigger_set_default+0x260/0x2a0
[  873.876966][ T8190]                      led_classdev_register_ext+0x787/0x9c0
[  873.884319][ T8190]                      input_leds_connect+0x517/0x790
[  873.891064][ T8190]                      input_register_device+0xce0/0x1140
[  873.898157][ T8190]                      atkbd_connect+0x71e/0xa10
[  873.904464][ T8190]                      serio_driver_probe+0x82/0xb0
[  873.911030][ T8190]                      really_probe+0x267/0xaf0
[  873.917302][ T8190]                      __driver_probe_device+0x1ef/0x380
[  873.924305][ T8190]                      driver_probe_device+0x4f/0x240
[  873.931046][ T8190]                      __driver_attach+0x34c/0x640
[  873.937527][ T8190]                      bus_for_each_dev+0x23b/0x2c0
[  873.944131][ T8190]                      serio_handle_event+0x1af/0xf80
[  873.950870][ T8190]                      process_scheduled_works+0xb5d/0x1860
[  873.958130][ T8190]                      worker_thread+0xa53/0xfc0
[  873.964438][ T8190]                      kthread+0x389/0x470
[  873.970224][ T8190]                      ret_from_fork+0x514/0xb70
[  873.976531][ T8190]                      ret_from_fork_asm+0x1a/0x30
[  873.983020][ T8190]   }
[  873.985588][ T8190]   ... key      at: [<ffffffff9a7ca5a0>] input_allocate_device.__key.7+0x0/0x20
[  873.994852][ T8190] -> (&client->buffer_lock){....}-{3:3} {
[  874.000569][ T8190]    INITIAL USE at:
[  874.004441][ T8190]                    lock_acquire+0x106/0x350
[  874.010506][ T8190]                    _raw_spin_lock_irqsave+0x40/0x60
[  874.017252][ T8190]                    evdev_ioctl_handler+0x10fb/0x1fe0
[  874.024080][ T8190]                    __se_sys_ioctl+0xfc/0x170
[  874.030221][ T8190]                    do_syscall_64+0x174/0x580
[  874.036361][ T8190]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.043807][ T8190]  }
[  874.046287][ T8190]  ... key      at: [<ffffffff9a7ca840>] evdev_open.__key.27+0x0/0x20
[  874.054433][ T8190]  ... acquired at:
[  874.058220][ T8190]    _raw_spin_lock+0x2e/0x40
[  874.062882][ T8190]    evdev_pass_values+0xb9/0xbd0
[  874.067889][ T8190]    evdev_events+0x1e6/0x340
[  874.072549][ T8190]    input_pass_values+0x288/0x890
[  874.077644][ T8190]    input_event_dispose+0x330/0x6b0
[  874.082916][ T8190]    input_inject_event+0x1dc/0x330
[  874.088097][ T8190]    evdev_write+0x325/0x4c0
[  874.092668][ T8190]    vfs_write+0x29a/0xb90
[  874.097070][ T8190]    ksys_write+0x150/0x270
[  874.101561][ T8190]    do_syscall_64+0x174/0x580
[  874.106303][ T8190]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.112350][ T8190] 
[  874.114655][ T8190] 
[  874.114655][ T8190] the dependencies between the lock to be acquired
[  874.114663][ T8190]  and SOFTIRQ-irq-unsafe lock:
[  874.128145][ T8190]   -> (tasklist_lock){.+.+}-{3:3} {
[  874.133429][ T8190]      HARDIRQ-ON-R at:
[  874.137567][ T8190]                         lock_acquire+0x106/0x350
[  874.144052][ T8190]                         _raw_read_lock+0x36/0x50
[  874.150538][ T8190]                         __do_wait+0xde/0x740
[  874.156678][ T8190]                         do_wait+0x1e7/0x510
[  874.162735][ T8190]                         kernel_wait+0xd6/0x1c0
[  874.169058][ T8190]                         call_usermodehelper_exec_work+0xbe/0x230
[  874.176944][ T8190]                         process_scheduled_works+0xb5d/0x1860
[  874.184466][ T8190]                         worker_thread+0xa53/0xfc0
[  874.191033][ T8190]                         kthread+0x389/0x470
[  874.197080][ T8190]                         ret_from_fork+0x514/0xb70
[  874.203647][ T8190]                         ret_from_fork_asm+0x1a/0x30
[  874.210389][ T8190]      SOFTIRQ-ON-R at:
[  874.214524][ T8190]                         lock_acquire+0x106/0x350
[  874.221002][ T8190]                         _raw_read_lock+0x36/0x50
[  874.227489][ T8190]                         __do_wait+0xde/0x740
[  874.233625][ T8190]                         do_wait+0x1e7/0x510
[  874.239670][ T8190]                         kernel_wait+0xd6/0x1c0
[  874.245981][ T8190]                         call_usermodehelper_exec_work+0xbe/0x230
[  874.253854][ T8190]                         process_scheduled_works+0xb5d/0x1860
[  874.261375][ T8190]                         worker_thread+0xa53/0xfc0
[  874.267949][ T8190]                         kthread+0x389/0x470
[  874.273998][ T8190]                         ret_from_fork+0x514/0xb70
[  874.280563][ T8190]                         ret_from_fork_asm+0x1a/0x30
[  874.287306][ T8190]      INITIAL USE at:
[  874.291354][ T8190]                        lock_acquire+0x106/0x350
[  874.297746][ T8190]                        _raw_write_lock_irq+0x3d/0x50
[  874.304572][ T8190]                        copy_process+0x2b4c/0x4440
[  874.311140][ T8190]                        kernel_clone+0x2d7/0x940
[  874.317537][ T8190]                        user_mode_thread+0x110/0x180
[  874.324275][ T8190]                        rest_init+0x23/0x300
[  874.330322][ T8190]                        start_kernel+0x38a/0x3e0
[  874.336804][ T8190]                        x86_64_start_reservations+0x24/0x30
[  874.344178][ T8190]                        x86_64_start_kernel+0x143/0x1c0
[  874.351183][ T8190]                        common_startup_64+0x13e/0x147
[  874.358014][ T8190]      INITIAL READ USE at:
[  874.362494][ T8190]                             lock_acquire+0x106/0x350
[  874.369324][ T8190]                             _raw_read_lock+0x36/0x50
[  874.376156][ T8190]                             __do_wait+0xde/0x740
[  874.382637][ T8190]                             do_wait+0x1e7/0x510
[  874.389030][ T8190]                             kernel_wait+0xd6/0x1c0
[  874.395685][ T8190]                             call_usermodehelper_exec_work+0xbe/0x230
[  874.403904][ T8190]                             process_scheduled_works+0xb5d/0x1860
[  874.411779][ T8190]                             worker_thread+0xa53/0xfc0
[  874.418694][ T8190]                             kthread+0x389/0x470
[  874.425089][ T8190]                             ret_from_fork+0x514/0xb70
[  874.432001][ T8190]                             ret_from_fork_asm+0x1a/0x30
[  874.439093][ T8190]    }
[  874.441749][ T8190]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[  874.449655][ T8190]    ... acquired at:
[  874.453613][ T8190]    _raw_read_lock+0x36/0x50
[  874.458273][ T8190]    send_sigurg+0x12b/0x420
[  874.462846][ T8190]    sk_send_sigurg+0x6c/0x2e0
[  874.467591][ T8190]    queue_oob+0x42c/0x4f0
[  874.471987][ T8190]    unix_stream_sendmsg+0xcb1/0xe80
[  874.477255][ T8190]    ____sys_sendmsg+0x972/0x9f0
[  874.482175][ T8190]    ___sys_sendmsg+0x2a5/0x360
[  874.487002][ T8190]    __x64_sys_sendmsg+0x1bd/0x2a0
[  874.492094][ T8190]    do_syscall_64+0x174/0x580
[  874.496838][ T8190]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.502888][ T8190] 
[  874.505192][ T8190]  -> (&f_owner->lock){....}-{3:3} {
[  874.510469][ T8190]     INITIAL USE at:
[  874.514428][ T8190]                      lock_acquire+0x106/0x350
[  874.520645][ T8190]                      _raw_write_lock_irq+0x3d/0x50
[  874.527297][ T8190]                      __f_setown+0x67/0x370
[  874.533258][ T8190]                      generic_setlease+0xacf/0xfd0
[  874.539844][ T8190]                      do_fcntl_add_lease+0x35e/0x470
[  874.546589][ T8190]                      fcntl_setdeleg+0x14c/0x1e0
[  874.552991][ T8190]                      do_fcntl+0xe6d/0x1a20
[  874.558966][ T8190]                      __se_sys_fcntl+0xc8/0x150
[  874.565282][ T8190]                      do_syscall_64+0x174/0x580
[  874.571589][ T8190]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.579202][ T8190]     INITIAL READ USE at:
[  874.583599][ T8190]                           lock_acquire+0x106/0x350
[  874.590253][ T8190]                           _raw_read_lock_irqsave+0x48/0x60
[  874.597610][ T8190]                           send_sigio+0x38/0x370
[  874.604006][ T8190]                           kill_fasync+0x24d/0x4d0
[  874.610580][ T8190]                           lease_break_callback+0x26/0x30
[  874.617761][ T8190]                           __break_lease+0x81f/0x1ea0
[  874.624592][ T8190]                           try_break_deleg+0xfc/0x180
[  874.631419][ T8190]                           notify_change+0xb5a/0xf40
[  874.638162][ T8190]                           vfs_utimes+0x45a/0x660
[  874.644668][ T8190]                           do_utimes+0x186/0x2c0
[  874.651070][ T8190]                           __x64_sys_utimensat+0x15e/0x240
[  874.658340][ T8190]                           do_syscall_64+0x174/0x580
[  874.665085][ T8190]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.673131][ T8190]   }
[  874.675707][ T8190]   ... key      at: [<ffffffff9a4ac880>] file_f_owner_allocate.__key+0x0/0x20
[  874.684718][ T8190]   ... acquired at:
[  874.688591][ T8190]    _raw_read_lock_irqsave+0x48/0x60
[  874.693951][ T8190]    send_sigio+0x38/0x370
[  874.698350][ T8190]    kill_fasync+0x24d/0x4d0
[  874.702924][ T8190]    lease_break_callback+0x26/0x30
[  874.708104][ T8190]    __break_lease+0x81f/0x1ea0
[  874.712937][ T8190]    try_break_deleg+0xfc/0x180
[  874.717767][ T8190]    notify_change+0xb5a/0xf40
[  874.722509][ T8190]    vfs_utimes+0x45a/0x660
[  874.726994][ T8190]    do_utimes+0x186/0x2c0
[  874.731394][ T8190]    __x64_sys_utimensat+0x15e/0x240
[  874.736664][ T8190]    do_syscall_64+0x174/0x580
[  874.741414][ T8190]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.747472][ T8190] 
[  874.749778][ T8190] -> (&new->fa_lock){....}-{3:3} {
[  874.754882][ T8190]    INITIAL USE at:
[  874.758763][ T8190]                    lock_acquire+0x106/0x350
[  874.764810][ T8190]                    _raw_write_lock_irq+0x3d/0x50
[  874.771291][ T8190]                    fasync_remove_entry+0xf1/0x1c0
[  874.777863][ T8190]                    lease_modify+0x4f7/0x6c0
[  874.783914][ T8190]                    locks_remove_file+0x5f0/0xf70
[  874.790397][ T8190]                    __fput+0x3ae/0xa60
[  874.795925][ T8190]                    task_work_run+0x1d9/0x270
[  874.802062][ T8190]                    get_signal+0x11eb/0x1330
[  874.808107][ T8190]                    arch_do_signal_or_restart+0xbc/0x840
[  874.815199][ T8190]                    exit_to_user_mode_loop+0xa9/0x680
[  874.822026][ T8190]                    do_syscall_64+0x353/0x580
[  874.828160][ T8190]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.835597][ T8190]    INITIAL READ USE at:
[  874.839915][ T8190]                         lock_acquire+0x106/0x350
[  874.846395][ T8190]                         _raw_read_lock_irqsave+0x48/0x60
[  874.853573][ T8190]                         kill_fasync+0x199/0x4d0
[  874.859967][ T8190]                         lease_break_callback+0x26/0x30
[  874.866972][ T8190]                         __break_lease+0x81f/0x1ea0
[  874.873625][ T8190]                         try_break_deleg+0xfc/0x180
[  874.880275][ T8190]                         notify_change+0xb5a/0xf40
[  874.886845][ T8190]                         vfs_utimes+0x45a/0x660
[  874.893157][ T8190]                         do_utimes+0x186/0x2c0
[  874.899380][ T8190]                         __x64_sys_utimensat+0x15e/0x240
[  874.906476][ T8190]                         do_syscall_64+0x174/0x580
[  874.913044][ T8190]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.920917][ T8190]  }
[  874.923392][ T8190]  ... key      at: [<ffffffff9a4ac8a0>] fasync_insert_entry.__key+0x0/0x20
[  874.932054][ T8190]  ... acquired at:
[  874.935833][ T8190]    _raw_read_lock_irqsave+0x48/0x60
[  874.941188][ T8190]    kill_fasync+0x199/0x4d0
[  874.945762][ T8190]    evdev_pass_values+0x627/0xbd0
[  874.950850][ T8190]    evdev_events+0x1e6/0x340
[  874.955504][ T8190]    input_pass_values+0x288/0x890
[  874.960591][ T8190]    input_event_dispose+0x330/0x6b0
[  874.965858][ T8190]    input_inject_event+0x1dc/0x330
[  874.971044][ T8190]    evdev_write+0x325/0x4c0
[  874.975615][ T8190]    vfs_write+0x29a/0xb90
[  874.980013][ T8190]    ksys_write+0x150/0x270
[  874.984498][ T8190]    do_syscall_64+0x174/0x580
[  874.989239][ T8190]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  874.995285][ T8190] 
[  874.997588][ T8190] 
[  874.997588][ T8190] stack backtrace:
[  875.003457][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.2.4028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  875.003475][ T8190] Tainted: [L]=SOFTLOCKUP
[  875.003480][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  875.003487][ T8190] Call Trace:
[  875.003494][ T8190]  <TASK>
[  875.003499][ T8190]  dump_stack_lvl+0xe8/0x150
[  875.003515][ T8190]  __lock_acquire+0x2a94/0x2cf0
[  875.003533][ T8190]  ? kill_fasync+0x199/0x4d0
[  875.003549][ T8190]  lock_acquire+0x106/0x350
[  875.003560][ T8190]  ? kill_fasync+0x199/0x4d0
[  875.003576][ T8190]  ? do_raw_spin_lock+0x12b/0x2f0
[  875.003593][ T8190]  _raw_read_lock_irqsave+0x48/0x60
[  875.003610][ T8190]  ? kill_fasync+0x199/0x4d0
[  875.003625][ T8190]  kill_fasync+0x199/0x4d0
[  875.003640][ T8190]  ? kill_fasync+0x53/0x4d0
[  875.003656][ T8190]  evdev_pass_values+0x627/0xbd0
[  875.003670][ T8190]  ? evdev_pass_values+0x631/0xbd0
[  875.003684][ T8190]  evdev_events+0x1e6/0x340
[  875.003695][ T8190]  ? evdev_events+0x79/0x340
[  875.003706][ T8190]  ? input_pass_values+0x8d/0x890
[  875.003717][ T8190]  input_pass_values+0x288/0x890
[  875.003730][ T8190]  ? input_handle_event+0x70c/0xf30
[  875.003746][ T8190]  input_event_dispose+0x330/0x6b0
[  875.003762][ T8190]  input_inject_event+0x1dc/0x330
[  875.003777][ T8190]  ? input_inject_event+0xb5/0x330
[  875.003793][ T8190]  evdev_write+0x325/0x4c0
[  875.003804][ T8190]  ? __lock_acquire+0x6b5/0x2cf0
[  875.003817][ T8190]  ? __pfx_evdev_write+0x10/0x10
[  875.003829][ T8190]  ? bpf_lsm_file_permission+0x9/0x20
[  875.003846][ T8190]  ? security_file_permission+0x75/0x260
[  875.003862][ T8190]  ? rw_verify_area+0x255/0x4d0
[  875.003877][ T8190]  ? __pfx_evdev_write+0x10/0x10
[  875.003889][ T8190]  vfs_write+0x29a/0xb90
[  875.003913][ T8190]  ? __pfx_vfs_write+0x10/0x10
[  875.003928][ T8190]  ? __fget_files+0x2a/0x420
[  875.003942][ T8190]  ? __fget_files+0x2a/0x420
[  875.003956][ T8190]  ? __fget_files+0x3a0/0x420
[  875.003968][ T8190]  ? __fget_files+0x2a/0x420
[  875.003983][ T8190]  ksys_write+0x150/0x270
[  875.004000][ T8190]  ? __pfx_ksys_write+0x10/0x10
[  875.004017][ T8190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.004030][ T8190]  do_syscall_64+0x174/0x580
[  875.004041][ T8190]  ? trace_irq_disable+0x3b/0x140
[  875.004058][ T8190]  ? clear_bhb_loop+0x40/0x90
[  875.004071][ T8190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.004083][ T8190] RIP: 0033:0x7f8a0e39ce59
[  875.004096][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  875.004107][ T8190] RSP: 002b:00007f8a0f1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  875.004120][ T8190] RAX: ffffffffffffffda RBX: 00007f8a0e615fa0 RCX: 00007f8a0e39ce59
[  875.004130][ T8190] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000004
[  875.004138][ T8190] RBP: 00007f8a0e432d6f R08: 0000000000000000 R09: 0000000000000000
[  875.004146][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  875.004154][ T8190] R13: 00007f8a0e616038 R14: 00007f8a0e615fa0 R15: 00007f8a0e73fa48
[  875.004168][ T8190]  </TASK>
[  875.304577][ T5728] net_ratelimit: 5 callbacks suppressed
[  875.304591][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.318214][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.349536][   T46] usb 5-1: USB disconnect, device number 5
[  875.360032][ T5697] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  875.368872][ T5697] usb 2-1-port1: cannot disable (err = -32)
[  875.526662][    T9] usb 2-1: USB disconnect, device number 48
[  876.376952][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.416907][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.376711][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.466985][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.498041][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.230338][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.546972][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.416710][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.586914][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.617165][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog