last executing test programs:

7.160370573s ago: executing program 0 (id=2961):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x70, 0x6, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xff7f, 0xa, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x62}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700000000000000000000008000000000000000", @ANYRES32=0x1], 0x50)
unshare(0x28040680)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0182101, &(0x7f00000004c0))
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000d04ff00000600000000"], 0x1c}}, 0x0)

6.925087336s ago: executing program 4 (id=2964):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x82002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2)
readv(r6, &(0x7f0000000480)=[{&(0x7f0000000400)=""/105, 0x69}], 0x1)
mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xe000)
ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000100)={{r6}, 0x3, &(0x7f0000000080)=[0x243eb455, 0x6, 0x6], 0x7, 0xa, 0x1})
write$USERIO_CMD_REGISTER(r5, &(0x7f0000000040)={0x0, 0x9}, 0x2)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0x25, {0x25, 0x2, "83755023b58510f24e90ad09014f0bebfa73c0cb7e39713bf6870babb816e59440f3fa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6.237883198s ago: executing program 1 (id=2966):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001180)={'xfrm0\x00', <r4=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x400d5)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0xc0}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20040000)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000008010300000000000000000300000709000100000500030084000000058d3596ff5c875e3600024090000000050003002f0000000900010073797a300000000005000300880000000900002673597a3100"/96], 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x8080)
fchdir(r7)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000, {r7}}, 0x20)
unshare(0x8040480)
r8 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000001c0), 0x4)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/484], 0x10}}, 0x0)
recvmmsg(r8, &(0x7f0000000f00), 0x0, 0x10003, &(0x7f0000001000)={0x77359400})
readv(r8, &(0x7f0000003240)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x5)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000240))
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000008c0)={[0xa, 0x6, 0xb, 0x1, 0x7, 0x8000040000000002, 0x8000000000000000, 0x5, 0x4b1d, 0x4000000000080008, 0x1000, 0x207d, 0x3, 0x1fb, 0xe6, 0x8], 0x58000, 0x238440})

5.226982206s ago: executing program 1 (id=2967):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"})
write$tun(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="00000000871006001c001a80"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.185807764s ago: executing program 1 (id=2968):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000ce9000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r3, @ANYBLOB="649f374b87fd2e0426fb450620c9b5a22acbeab4ebe6b3476c25", @ANYRES32=r3], 0x70}}, 0x0)

4.821614142s ago: executing program 3 (id=2969):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {r2, r3/1000+10000}, {0x0, 0xb846941ed94b4582, 0x80, 0x8e, 0x0, 0xa, "eaffffff"}, 0x2000000, 0x2, {}, 0x20800})
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000001000", "f4bd000000801900", [0x0, 0x31]}})

4.780231679s ago: executing program 3 (id=2970):
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
open_tree(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x100)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'group_id'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'rootmode'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}]}, 0xe4}}, 0x44044001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000000b0000000e0000000f0002006e657464657673696d3000"/46], 0x34}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b)
landlock_restrict_self(r2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

4.709879737s ago: executing program 3 (id=2971):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x4, 0x10000}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008401050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe800000000000000000000000000000010000000000000000080000000800000000000000000000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000073500000000010002000000bf0a00000000000000000000000000000000000000000001000004d433"], 0x23c}}, 0x0)

4.626157739s ago: executing program 3 (id=2972):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0)
r0 = socket(0x2, 0x80805, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x3e}}, 0xc, 0x2a}, 0x90)
syz_usb_connect$uac1(0x6, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x7, 0x0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x3e}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x1, "fbc2a2"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x1, "c40fd776"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x401, 0x4, 0x0, 0x4, 0xfa, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x4, 0x2, 0x1}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x7, "b0db7494"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe, 0x400, 0x7f, "5cb297716fd87a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x6, "735e76c884f6f50907"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x400, 0x2, 0x1c}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x38, "", "2315"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x6, 0x4, 0xd, 0xed}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x8, 0x5, {0x7, 0x25, 0x1, 0xc, 0xba, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9f, 0x5, 0x9, 0x9, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x3, 0xff, 0x4, 0xff}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x8d, 0x6, 0xe6, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1b, 0x4, 0x1, {0x7, 0x25, 0x1, 0xc, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xa, 0x7, 0x46, 0x8, 0xf}, 0x3c, &(0x7f0000000180)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x101, 0xf000, 0x4, [0xf0, 0xc180, 0xff00, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x0, 0xdf, 0x8, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x1, 0xf000, 0x50a, [0xfe80ff]}]}, 0x7, [{0x50, &(0x7f00000001c0)=@string={0x50, 0x3, "e57a960c3f91c6ce859c0a2c68cc25930f73d6d7fdd6311931a1ee2d9421048327dab0d0cd2ae3a79c0d474169a3f95a66148653e0ab4ce9cd46c716df600c59c7e54ed99c9cecad5fbe69d6eca5"}}, {0x88, &(0x7f0000000240)=@string={0x88, 0x3, "dbc6a00c8b4410aaf289808b3e79bfe801239d7542771d851255b97d5ab9758f412500f44fc4b73b0c99054f584d3addebfafa010936effb7f1a28c3a596da7e66ee54dfeb318d438b4d80c223643a4f1ede8bd453b71787f873c2f1d22fab3fac68f838bbfab8b097f8eac45187e62fa56117cbede44c5eea8e002f930d480771d2a0eb35ca"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}, {0xff, &(0x7f0000000340)=@string={0xff, 0x3, "8b496eb950f857f2740196acf5cfa0818408be905e29876fff873baa6f9d8872d7fc75399d76415395ec648f9e462af2757fdf37848dc225ecf2a2e55d8715b276df0d1e50f2611a22e37cd76fec9386a8b7f9f3caac0ccc449fb88579e7d8a2da912c3c1491aabbf4b7bc519cb8b596456a9f0ffc01ea2f5f3e2d0dd07f2345e99d2f0ec9973037ab539e0bcb25b43c0a2e295d6abf9a42a2dcf1dd209a67ecddd68b1b4fd9adcfabecc63c3dddc2d3807301494dd4eec9952e23195f003147f809c7ce42f3eef2869ae6989bc66e36794ee896c13d1bcc1757b2e36c7ac73843ef960f8cff6f7ebc593637aa5f7340435a85ff522d64480a0ed4ddec"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_connect$uac3(0x5, 0x80, 0x0, 0x0)

4.514296722s ago: executing program 1 (id=2973):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x8, &(0x7f0000000000)=[{0x7f, 0x4, 0x95, 0x2}, {0x80, 0x3, 0x0, 0x40}, {0x0, 0xd8, 0x2, 0x6}, {0x7, 0x2a, 0xd}, {0x4, 0xfb, 0x3, 0x8}, {0x0, 0x9, 0x7, 0x728}, {0x80, 0x5, 0x6, 0x4}, {0x6, 0xb, 0x0, 0x9}]})
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0040030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160048010a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0)
read(r1, &(0x7f0000000300)=""/104, 0x68)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x3, 0x3, 0x5, 0x1, '\x00', '\x00', '\x00', 0x7, 0xb, 0xb, 0xfffffffe, "2aa1b824a90b4f8e2e2998e9a065fd99"})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f0000000400))

4.474058658s ago: executing program 1 (id=2974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = fsopen(&(0x7f0000000200)='binder\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1090}, 0x40080)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$unix(r4, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4)
close_range(r3, r4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
wait4(0x0, 0x0, 0x1000000, 0x0)
rename(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00')
r6 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x48, 0xfffffffffffffff8)
keyctl$get_security(0x11, r6, &(0x7f00000002c0)=""/225, 0xe1)

4.365712353s ago: executing program 1 (id=2975):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x60100, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettaction={0x48, 0x32, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000a045}, 0x8008044)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r9, 0x9)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

4.078362779s ago: executing program 0 (id=2976):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
setresuid(r6, r6, r6) (async)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
file_getattr(r7, 0x0, &(0x7f0000000040), 0x18, 0x1000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}, {0x0}, {&(0x7f0000000400)}], 0x3}, 0x40000c4)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
syz_emit_ethernet(0x4a, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@deltaction={0x15c, 0x31, 0xc80f3b4e0da9ece0, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x25}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$sock(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="df616b87858e29f92ddbcc2b8b77ebc041b5bf8ff12f13d40d603116d4cf269e1cf416fa842632d636705e71249db6984ba6c1d3c162609e55703485df40fef7badac1db2366fe16480a23e8da37ac990008170aaec338eb9d50fccb6487f0df656d862fdf25b76ec15c9b9ab145c5f421e72e45111cac01d157d9ca49d8bdbf3266c86cfb268c7bfa24a37333c3d512ca4291ba99bd9b35", 0x98}, {&(0x7f0000000300)="8e56284686e21bb99b0ee9b37f8e76219613b8abdea2a63205035a2186f6297865fde9404e231a", 0x27}], 0x2, &(0x7f0000000500)}}], 0x1, 0x20000010)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

3.848277911s ago: executing program 0 (id=2977):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="42733ad6f7b63f622feeab3196b7e21057f4302c3b202872f2529051f374039238336a690ff135fd77946013c62efdf8975fd8518a7d9109ffd688291fc55ff15b43c263fa2e4deb24b0ba827fc3a2589165138354b566d82783d4304c3003eaea7dc13fb5b7dafee2114df8e088dc6087f49cf2fd31f6ff0090d9ac76cf31efa71cfc426ca7259a4bc592ae186a42", 0x8f}], 0x1}}], 0x1, 0x400c404)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}], 0x2, 0x48c0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r4, &(0x7f0000000000)=""/43, 0x2b)
getdents64(r4, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6400000006c9bf91393f5852510000000200000a3800048018000180080001006f7366000c000280080001400000000d1c0001800a00010071756575650000000c00028006000140ff8100000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x8000)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0xff, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c)
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000002380)={{r8}, 0x0, 0x4, @unused=[0x0, 0x8, 0x3ff, 0x81], @devid})
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
r9 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
pread64(r9, 0x0, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00')

3.824838528s ago: executing program 4 (id=2978):
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"})
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000871006001c001a80"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.655246293s ago: executing program 4 (id=2979):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c045}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) (async)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r5 = fcntl$dupfd(r4, 0x406, r4)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
syz_clone3(&(0x7f0000001d80)={0x2100000, &(0x7f0000000140), &(0x7f0000000240)=<r6=>0x0, &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/92, 0x5c, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r5}}, 0x58)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r6, 0x6, 0x4002)
write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)
syz_emit_vhci(0x0, 0xf)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
userfaultfd(0x801) (async)
r8 = userfaultfd(0x801)
open$dir(0x0, 0xc4000, 0x20)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x50d0, &(0x7f00000001c0)={0x0, 0xffffffec, 0x0, 0x3, 0x336}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0)

3.482465984s ago: executing program 4 (id=2980):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}}, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x34, 0x0, 0x35, 0x64, 0x38, 0x38, 0x61, 0x61, 0x61, 0x38, 0x35, 0x62, 0x38, 0x35, 0x38, 0x62]}, &(0x7f00000000c0)={0x0, "8b17713f4303c5a0701a95ca16816dea0da01601373b85f695fbc719b92b37ed1f6fb60392616378001c46dc38d961af784a1f76c6da86b2ccc7c585ddb0e1bd", 0x1d}, 0x48, 0xfffffffffffffff8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180))
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb0"], 0x0)

2.919192106s ago: executing program 2 (id=2981):
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
open_tree(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x100)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'group_id'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'rootmode'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}]}, 0xe4}}, 0x44044001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000000b0000000e0000000f0002006e657464657673696d3000"/46], 0x34}}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001}, 0x0)
landlock_restrict_self(r2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.774686863s ago: executing program 2 (id=2982):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x4, 0x10000}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff8000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008401050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe800000000000000000000000000000010000000000000000080000000800000000000000000000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000073500000000010002000000bf0a00000000000000000000000000000000000000000001000004d433"], 0x23c}}, 0x0)

2.570567422s ago: executing program 3 (id=2983):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x3502, 0x5}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast1, 0x0, 0x1}]}]}, 0x1fc}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0)
listen(r3, 0xfffffffd)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000c40)={0x20002012})
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.30181957s ago: executing program 2 (id=2984):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000280)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/10, 0xa}, 0x40010000) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cfda37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd82715df71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ea7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ef2696ee09509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721ddfdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886c2cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (rerun: 64)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 64)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_usb_connect$uac2(0x5, 0x8b, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x9, 0xb2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x20, 0x3ce}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000001000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}}, 0x0) (async, rerun: 32)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x4, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) (rerun: 32)

2.061936291s ago: executing program 2 (id=2985):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, 0x0)
unshare(0x8000400) (async)
r1 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000100)={0x0, "288336fc200001000000000000c8bf879901975ea9c0b13686a90700000024f0", 0x1, 0x1}) (async)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async, rerun: 32)
madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) (async, rerun: 32)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r3, 0x9, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
r4 = syz_io_uring_complete(0x0, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000002ac0)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000002a00)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1, &(0x7f0000000480)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)=""/139, 0x8b}, {&(0x7f0000001540)=""/27, 0x1b}], 0x2, &(0x7f00000015c0)=""/200, 0xc8}, 0x2}, {{&(0x7f00000016c0)=@tipc=@id, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/65, 0x41}, {&(0x7f00000027c0)=""/207, 0xcf}], 0x3, &(0x7f0000002900)=""/242, 0xf2}, 0x6}], 0x3, 0x20, &(0x7f0000002b00)={r5, r6+10000000}) (async)
ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000200)={0x7, [0x3, 0x3, 0x7, 0x8, 0xfffffffffffffc01, 0x6, 0xf7c]}) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) (async)
sendto$unix(r8, 0x0, 0x0, 0x800, 0x0, 0x0)
recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) (async)
r9 = fsmount(r2, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000006000000000000000100000018090020", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000e5b55976b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)

1.74611633s ago: executing program 3 (id=2986):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3e17, &(0x7f0000000240)={0x0, 0x4e36, 0x800, 0x3, 0x27c}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0x10001, 0x7fff], 0x2)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
unshare(0x42040400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x7, 0x800, 0x7, 0xfffffffffffffffa}, 0x0, &(0x7f0000000040)={0x1f, 0x5, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x7ffffffffffffffd, 0x7fffc}, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00')
read$rfkill(r3, &(0x7f0000000000), 0x8)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1.741243453s ago: executing program 2 (id=2987):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000840))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa1000000000000071a0000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.381562521s ago: executing program 2 (id=2988):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
memfd_secret(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r3, r2, 0x0, 0x8)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19})
ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000002d00)={0x1, [{0x2, 0x8000, 0x2, &(0x7f0000000540)="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"}, {0x2, 0xe0, 0x1, &(0x7f0000001540)="035198f27571546502ad0ec7ee3c2e5a056a7ea56896ae0dbb24a490"}, {0x3, 0x420, 0x7, &(0x7f0000001580)="ee46f718cf8153eace50d858a01966269051ce6827fc9a65f223f6918f885d9c3a2091edfc55182a5a908c0d9b933415da025db342cd27285aa1f5f17e358d583370ea0f794882dabbc14931058b25ed0bedb82b1aa7430c1aff6dfa12defe727700d8a66b651e857438b3161e6af0b99a146312bb029a4662083e898670a8b0acd966f9"}, {0x2, 0x340, 0x400, &(0x7f0000001640)="6cbc82162e3923feb41816ac58c4037d290ab77591a83ca962e86bd3e2461efc37568b3f9053b7980ffe7b92f666a3be8de5f3175b0c809f4047a125b570edc9eced0c732e4a1624009e03536a4eae09249033a597dbd0f1a2ec560439bdaea128054e2d39048a7d"}, {0x3, 0x110, 0x3, &(0x7f00000016c0)="0a05be6ca109a2edc6ae1e5a43250a667169d62e9a7aaba7ac2ec695b2f8e9433f03"}, {0x3, 0x790, 0x5, &(0x7f0000001700)="e8b3eb15c1b35511fd5db5d7a7bbd002349d0365dad50704c38add081225b65a05c4c97d146cde43cede1e3f6f31e9662362e1fb662ffb4b71062fc5817479792a9f7afdc296a92db3774dcc94aa8ffee98750aafc14bfc2f496a6dbce39b9ef84c1bba5c205ef737c7470886e5c102343c3f880e4c31a6fc8f05dcdf4fe04ea9fd96fdd1f4fb275dcf1bc83a2836a72a8d1d51810587781aa4787ca919c9419de9a176a29704a208dce261e1f53de5204538a481f77c32bb68bd1faaef14189301ca13ecc2f536bd437005a1f2360b71d959bca21abdc1780d8c6cfd8dba8419ae3da89cb00309e52d9ed11ebd2b26a645b"}, {0x2, 0x598, 0x1, &(0x7f0000001800)="07e2662c9169abc927016494de18cd3a530ab7353f0090032d6a9d761cfd370d9e6a5c999ecbcdf9fd9652133aa54c4547470119e1a76efc6a50697152554a334719652f0824c1d1f03df03bbc1db4e46488a3e8fdd87e58f25eb90373ba9f97482a042e9415623245372c49bcf9382972899925ce61c4a036d585b2f90edf04c1d01c2af1e806008a55af488814f9c12f49d1dd65fbbbf924016e8e973d8211d2df6453eb474a7c7535c35e3422569f1243e9"}, {0x1, 0x4b8, 0xffffffff, &(0x7f0000000340)="5adfc9d9722e5b3bb50763f11594ff17150fb99ad9b0f2ac1bd825108f1029a30aa10ff86cc200181edb1939278ab2652b177f20a6d022403e2ff24ba980539269aa9aee4cbe3333d31e7a23778ae19e536afc20c55dc2b98d18833d0e34ef32370d86ec320622007f2270281ab9d58f82259a6a9fd373a5b678e3b44b9922e32f50c4b73c3d9983c1487f754dd47a7762f9b883973e3a"}, {0x2, 0xd0, 0x3, &(0x7f0000001980)="b079a7cd1774b9aab02d8f56501490aa2f8aa1cce52d69096a1d"}, {0x1, 0x1d0, 0x6, &(0x7f00000019c0)="3f086e14f3c5222af8452723b1189021e35271908574c9fd8e73eccec3cf9ffca4e9ad9b4f3a2241cd80fb5a300f5000070c710cdb9f2c6ddc45"}, {0x1, 0x7e0, 0x800, &(0x7f0000001a00)="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"}, {0x3, 0x1b8, 0x2, &(0x7f0000001b00)="a6942197f523244806b5eceeea027151fa7100dcfdba4de11d4e656afce5e52331a6d40bc355e084529f0992129c5e4ad32a625eb5b704"}, {0x2, 0x8000, 0xf2b1, &(0x7f0000001b40)="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"}, {0x0, 0x328, 0x7, &(0x7f0000002b40)="83a781b1cee26cd9d928b2ff7283364e8fe93809f8aec678032757fb6c2936b72506ed92bdb8af3a2abfe3d79367e8c8377147514c12fdc42438eb18df7f775669546eb8cf56b1452494afd134db52fd9aeb9fa96ba4e998b2bfeb6be4a5adc5e10db31c62"}, {0x1, 0x558, 0x9, &(0x7f0000002bc0)="eafd18ebee0f04184ebb0955d879ec7c5c301a67ed9ba0b53a4e007fad87aa395393d647d908080678053f21696265273a52ab45c6b302d64d84b3bdb02d2fd41726d0066e7c46898fd2b15e5c5eaf49294c3622f2669bd93624ac66bd41cc92a85b1da39fb4530019a3cc1237ee402f22f88f406f2ebed04af0d289dbd33a4ccbfff3c765c0e58b7078abffab356727522ebd47ecd598f0c061116beb38880cc8bb9fd082d4a9268bdf10"}, {0x0, 0x3f0, 0x5, &(0x7f0000002c80)="569e8dbe3247bcf5588e11ecaaf290383da41710d2e5d59107033e0ebd5f2e9c86666adf26037c2d774ab7acdc7d19c6091b9fcd40635f55a91007b130623301f883839cf51cd118315d080348ca4286f4038f28dd067971717df7ca135181db374b2a254f3c5586a1800a133fc8cb2f89f12b19d04af664df4f33683656"}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5)
r8 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r9 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xa5404000)
syz_usb_disconnect(r8)
writev(r9, &(0x7f0000000600)=[{&(0x7f0000000240)="7385f490a1", 0x5}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$unix(0x1, 0x2, 0x0)

1.084004893s ago: executing program 0 (id=2989):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000871006001c001a80"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

894.98896ms ago: executing program 0 (id=2990):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x50, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200209a0100140003006e657464657673696d3000000000000016801400018010000600bd00000005000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

325.967838ms ago: executing program 4 (id=2991):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0xc000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0xffff4a9c0080ffff, &(0x7f0000001180))
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x155a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0})
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @remote, 0xdc}}, 0x24)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000100)=""/73, 0x49}], 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

77.134976ms ago: executing program 0 (id=2992):
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
open_tree(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x100)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fuse\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'group_id'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'rootmode'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}]}, 0xe4}}, 0x44044001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000000b0000000e0000000f0002006e657464657673696d3000"/46], 0x34}}, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001}, 0x0)
landlock_restrict_self(r2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

0s ago: executing program 4 (id=2993):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3, 0x1004})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"bc1a2f915bf174caa389d57dc6e528b7b86fe54dec53339abec86ddeb268e532", 0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r2, r4, &(0x7f00000000c0)=0x2, 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff1f00000000000001"])
r5 = syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300000000000020001280080001006774700014000280080003000100000008000100"], 0x40}}, 0x20000000)
syz_usb_control_io$uac1(r5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9] usb 1-1: Manufacturer: syz
[  834.770321][T14179] usb 1-1: SerialNumber: syz
[  834.844181][T12318] udevd[12318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  834.905855][T14179] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  834.917669][  T809] usb 3-1: 0:2 : does not exist
[  834.938434][  T809] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  834.953993][T14167] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  834.976040][  T809] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  834.990942][  T809] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  835.001004][  T809] usb 3-1: [5] FU [PCM Capture Volume] ch = 1, val = 0/1/1
[  835.019064][  T809] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  835.032119][  T809] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  835.050007][T14180] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  835.081765][  T809] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  835.121367][  T809] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  835.146888][T14167] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  835.175692][T14167] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  835.192111][T14167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.202852][T14157] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  835.213340][  T809] usb 3-1: USB disconnect, device number 49
[  835.223193][T14167] usb 4-1: Product: syz
[  835.232087][T14167] usb 4-1: Manufacturer: syz
[  835.238824][T14167] usb 4-1: SerialNumber: syz
[  835.268271][T14167] usb 4-1: config 0 descriptor??
[  835.298700][T14167] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[  835.320152][T15418] random: crng reseeded on system resumption
[  835.352386][T14167] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  835.387272][T14167] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  835.784299][T14157] usb 5-1: USB disconnect, device number 49
[  835.931802][T15426] udevd[15426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  836.174969][T14180] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  836.189132][  T809] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  836.215741][T14180] ath9k_htc: Failed to initialize the device
[  836.413994][  T809] usb 3-1: Using ep0 maxpacket: 32
[  836.430353][  T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.479777][  T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.508833][  T809] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  836.536612][T14180] usb 1-1: ath9k_htc: USB layer deinitialized
[  836.612688][  T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.682149][  T809] usb 3-1: config 0 descriptor??
[  836.734498][  T809] hub 3-1:0.0: USB hub found
[  836.936149][T14176] usb 1-1: USB disconnect, device number 121
[  837.158018][  T809] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  837.410960][  T809] usbhid 3-1:0.0: can't add hid device: -71
[  837.442137][  T809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  837.508348][  T809] usb 3-1: USB disconnect, device number 50
[  837.703122][T14167] usb 4-1: USB disconnect, device number 26
[  837.773631][T14167] garmin_gps 4-1:0.0: device disconnected
[  837.960542][T15469] loop5: detected capacity change from 0 to 7
[  837.998426][T15469] Dev loop5: unable to read RDB block 7
[  838.025693][T15469]  loop5: unable to read partition table
[  838.070587][T15469] loop5: partition table beyond EOD, truncated
[  838.090510][T15469] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  838.405784][T14180] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  838.584504][T14180] usb 1-1: device descriptor read/64, error -71
[  838.634063][T14167] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  838.839184][T14167] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  838.855800][T14180] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  838.863057][T14167] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  838.894626][T14167] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  838.919539][T14167] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  838.939467][T14167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.947625][T14167] usb 2-1: Product: syz
[  838.952045][T14167] usb 2-1: Manufacturer: syz
[  838.972815][T14167] usb 2-1: SerialNumber: syz
[  839.014077][T14180] usb 1-1: device descriptor read/64, error -71
[  839.157039][T14180] usb usb1-port1: attempt power cycle
[  839.472683][T14167] usb 2-1: 0:2 : does not exist
[  839.535717][T14180] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  839.578155][T14167] usb 2-1: USB disconnect, device number 59
[  839.585765][T14180] usb 1-1: device descriptor read/8, error -71
[  839.733119][T12421] udevd[12421]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  839.805165][  T809] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  839.854570][T14180] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  839.882346][T15513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1919509599 (7678038396 ns) > initial count (6670371196 ns). Using initial count to start timer.
[  839.915998][T14180] usb 1-1: device descriptor read/8, error -71
[  839.977350][  T809] usb 4-1: Using ep0 maxpacket: 32
[  839.986962][  T809] usb 4-1: unable to get BOS descriptor or descriptor too short
[  839.996351][  T809] usb 4-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[  840.007156][  T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  840.019620][  T809] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  840.030794][T14180] usb usb1-port1: unable to enumerate USB device
[  840.037911][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.055509][  T809] usb 4-1: Product: syz
[  840.068759][  T809] usb 4-1: Manufacturer: syz
[  840.079262][  T809] usb 4-1: SerialNumber: syz
[  840.320779][  T809] usb 4-1: unit 4 not found!
[  840.326973][  T809] usb 4-1: unit 0 not found!
[  840.716034][T14180] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  840.725002][  T809] usb 4-1: USB disconnect, device number 27
[  840.893965][T14180] usb 5-1: Invalid ep0 maxpacket: 16
[  841.024131][T14180] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  841.125833][T14179] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  841.167443][T15533] loop5: detected capacity change from 0 to 7
[  841.205924][T15533] Dev loop5: unable to read RDB block 7
[  841.218863][T15533]  loop5: unable to read partition table
[  841.235314][T15533] loop5: partition table beyond EOD, truncated
[  841.242197][T14180] usb 5-1: Invalid ep0 maxpacket: 16
[  841.249848][T14180] usb usb5-port1: attempt power cycle
[  841.256220][T15533] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  841.357903][T14179] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  841.410995][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.450211][T14179] usb 3-1: Product: syz
[  841.463000][T14179] usb 3-1: Manufacturer: syz
[  841.484794][T15540] xt_hashlimit: size too large, truncated to 1048576
[  841.499921][T14179] usb 3-1: SerialNumber: syz
[  841.545277][T14179] usb 3-1: config 0 descriptor??
[  841.596295][T14179] hub 3-1:0.0: bad descriptor, ignoring hub
[  841.616624][T14179] hub 3-1:0.0: probe with driver hub failed with error -5
[  841.639881][T14179] f81232 3-1:0.0: f81534a converter detected
[  841.651193][T14180] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  841.721347][T14180] usb 5-1: Invalid ep0 maxpacket: 16
[  841.786069][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.832013][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.906431][T14180] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  841.920268][T14179] usb 3-1: f81534a converter now attached to ttyUSB0
[  841.991015][T14180] usb 5-1: Invalid ep0 maxpacket: 16
[  841.997227][T14180] usb usb5-port1: unable to enumerate USB device
[  843.074068][T14176] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  843.254614][T14176] usb 2-1: Using ep0 maxpacket: 16
[  843.280657][T14176] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  843.299221][T14176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  843.324883][T14176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  843.349165][T14176] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  843.376644][T14176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.403075][T14176] usb 2-1: Product: syz
[  843.420754][T14176] usb 2-1: Manufacturer: syz
[  843.441125][T14176] usb 2-1: SerialNumber: syz
[  843.505619][T14176] usb 2-1: 0:2 : does not exist
[  843.744112][T14179] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  843.924169][T14179] usb 1-1: Using ep0 maxpacket: 16
[  843.960324][T14179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  843.980149][T14179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.010592][T14179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  844.026186][T14179] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  844.044665][T14180] usb 3-1: USB disconnect, device number 51
[  844.070037][T14179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.119210][T14180] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  844.166792][T14179] usb 1-1: config 0 descriptor??
[  844.175740][T14180] f81232 3-1:0.0: device disconnected
[  844.862915][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.908582][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.236902][T14179] usbhid 1-1:0.0: can't add hid device: -71
[  845.272165][T14179] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  845.344284][T14179] usb 1-1: USB disconnect, device number 126
[  845.678298][T14180] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  845.802326][T15607] vim2m vim2m.0: vidioc_s_fmt queue busy
[  845.832146][T15245] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  845.867867][T15245] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  845.891029][T14180] usb 5-1: Using ep0 maxpacket: 16
[  845.898870][T15245] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  845.911773][T14180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.927633][T15245] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  845.943043][T14180] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  845.957474][T14180] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  845.971185][T14180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.010609][T14180] usb 5-1: config 0 descriptor??
[  846.221043][T15612] trusted_key: encrypted_key: master key parameter 'W#���ȫ������_�' is invalid
[  846.266040][T14180] usb 5-1: USB disconnect, device number 54
[  846.302449][T14157] usb 2-1: USB disconnect, device number 60
[  846.444697][T14176] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  846.624285][T14176] usb 3-1: Using ep0 maxpacket: 32
[  846.633711][T14176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.644892][T14176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.657849][T14176] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  846.667849][T14176] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  846.676596][T14176] usb 3-1: Product: syz
[  846.680891][T14176] usb 3-1: Manufacturer: syz
[  846.691530][T14176] usb 3-1: config 0 descriptor??
[  846.724272][  T809] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  846.877760][  T809] usb 4-1: Using ep0 maxpacket: 8
[  846.898135][  T809] usb 4-1: unable to get BOS descriptor or descriptor too short
[  846.918750][  T809] usb 4-1: config 117 has an invalid interface number: 163 but max is 0
[  846.932928][T15626] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  846.936551][  T809] usb 4-1: config 117 has no interface number 0
[  846.947308][  T809] usb 4-1: config 117 interface 163 has no altsetting 0
[  846.958003][T15626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  846.967613][  T809] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  846.981942][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.990997][  T809] usb 4-1: Product: syz
[  846.999316][  T809] usb 4-1: Manufacturer: syz
[  847.004790][  T809] usb 4-1: SerialNumber: syz
[  847.036122][T14157] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  847.137272][T14176] hid-generic 0003:25DD:F3D2.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0
[  847.198328][T14157] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  847.217909][T14157] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  847.230593][T14157] usb 2-1: config 1 interface 0 has no altsetting 0
[  847.257758][T14157] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  847.287165][T14157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.314919][T14157] usb 2-1: Product: syz
[  847.331071][T14157] usb 2-1: Manufacturer: syz
[  847.354275][T14157] usb 2-1: SerialNumber: syz
[  847.377244][T15622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  847.395184][T15622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  847.408150][T14176] usb 3-1: USB disconnect, device number 52
[  847.901677][T15634] fido_id[15634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  848.021170][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'.
[  848.053276][   T30] audit: type=1326 audit(1781176195.743:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.083794][T15643] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2644'.
[  848.095834][T15643] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2644'.
[  848.116266][  T809] usb 4-1: USB disconnect, device number 28
[  848.130109][T15643] netlink: 640 bytes leftover after parsing attributes in process `syz.0.2644'.
[  848.140459][   T30] audit: type=1326 audit(1781176195.773:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.168267][  T809] f81534a_ctrl 4-1:117.163: failed to enable ports: -19
[  848.184563][   T30] audit: type=1326 audit(1781176195.773:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.215732][   T30] audit: type=1326 audit(1781176195.773:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.248468][   T30] audit: type=1326 audit(1781176195.773:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.289230][   T30] audit: type=1326 audit(1781176195.773:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.452128][   T30] audit: type=1326 audit(1781176195.773:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.526677][   T30] audit: type=1326 audit(1781176195.773:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.556954][   T30] audit: type=1326 audit(1781176195.773:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.602270][T15655] netlink: 'syz.2.2646': attribute type 1 has an invalid length.
[  848.611416][   T30] audit: type=1326 audit(1781176196.033:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.0.2644" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  848.812394][T15655] bond6: entered promiscuous mode
[  848.842463][T15655] 8021q: adding VLAN 0 to HW filter on device bond6
[  848.880674][T14157] rtl8150 2-1:1.0: couldn't reset the device
[  848.894648][T14157] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  848.949298][T14157] usb 2-1: USB disconnect, device number 61
[  848.967811][T15661] 8021q: adding VLAN 0 to HW filter on device bond6
[  848.986521][T15661] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  849.021918][T15661] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  849.083616][T15661] bond6: (slave ip6gre2): making interface the new active one
[  849.096710][T15661] ip6gre2: entered promiscuous mode
[  849.105212][T15661] bond6: (slave ip6gre2): Enslaving as an active interface with an up link
[  849.407402][T14157] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  849.490283][T15677] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2651'.
[  849.501939][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2652'.
[  849.521812][T15677] FAULT_INJECTION: forcing a failure.
[  849.521812][T15677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.584772][T15677] CPU: 1 UID: 0 PID: 15677 Comm: syz.2.2651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  849.584805][T15677] Tainted: [L]=SOFTLOCKUP
[  849.584812][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  849.584824][T15677] Call Trace:
[  849.584832][T15677]  <TASK>
[  849.584842][T15677]  dump_stack_lvl+0xe8/0x150
[  849.584872][T15677]  should_fail_ex+0x412/0x560
[  849.584899][T15677]  _copy_from_user+0x2d/0xb0
[  849.584926][T15677]  ___sys_sendmsg+0x1c6/0x360
[  849.584947][T15677]  ? __lock_acquire+0x6b5/0x2cf0
[  849.584972][T15677]  ? __pfx____sys_sendmsg+0x10/0x10
[  849.584994][T15677]  ? __lock_acquire+0x6b5/0x2cf0
[  849.585034][T15677]  ? __fget_files+0x2a/0x420
[  849.585058][T15677]  ? __fget_files+0x3a0/0x420
[  849.585089][T15677]  __x64_sys_sendmsg+0x1bd/0x2a0
[  849.585112][T15677]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  849.585140][T15677]  ? handle_softirqs+0x715/0x840
[  849.585167][T15677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.585188][T15677]  do_syscall_64+0x174/0x580
[  849.585213][T15677]  ? clear_bhb_loop+0x40/0x90
[  849.585237][T15677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.585257][T15677] RIP: 0033:0x7fd01299ce59
[  849.585277][T15677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.585292][T15677] RSP: 002b:00007fd01393d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  849.585311][T15677] RAX: ffffffffffffffda RBX: 00007fd012c15fa0 RCX: 00007fd01299ce59
[  849.585324][T15677] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004
[  849.585336][T15677] RBP: 00007fd01393d090 R08: 0000000000000000 R09: 0000000000000000
[  849.585346][T15677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.585357][T15677] R13: 00007fd012c16038 R14: 00007fd012c15fa0 R15: 00007fd012d3fa48
[  849.585383][T15677]  </TASK>
[  849.960493][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'.
[  850.239979][T14157] usb 2-1: Using ep0 maxpacket: 16
[  850.297918][  T809] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  850.365655][T15691] loop5: detected capacity change from 0 to 7
[  850.383751][T15691] Dev loop5: unable to read RDB block 7
[  850.406166][T15691]  loop5: unable to read partition table
[  850.412476][T15691] loop5: partition table beyond EOD, truncated
[  850.430612][T15691] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  850.482576][T15693] IPv6: Can't replace route, no match found
[  850.502515][  T809] usb 5-1: config index 0 descriptor too short (expected 8192, got 18)
[  850.521655][T15693] IPv6: Can't replace route, no match found
[  850.530865][  T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  850.572674][  T809] usb 5-1: config 0 has no interfaces?
[  850.583815][  T809] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  850.596523][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.605018][  T809] usb 5-1: Product: syz
[  850.609560][  T809] usb 5-1: Manufacturer: syz
[  850.614726][  T809] usb 5-1: SerialNumber: syz
[  850.625187][  T809] usb 5-1: config 0 descriptor??
[  850.726422][T15705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.914824][T14157] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  850.924972][T14157] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  850.938690][T14157] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  850.946481][  T809] usb 5-1: USB disconnect, device number 55
[  850.947775][T14157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.968328][T14157] usb 2-1: config 0 descriptor??
[  851.228181][T14180] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  851.333768][T14179] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  851.346133][T14178] usb 2-1: USB disconnect, device number 62
[  851.443005][  T996] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  851.485549][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2665'.
[  851.924481][  T809] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  852.092323][  T996] usb 3-1: Using ep0 maxpacket: 16
[  852.196990][  T809] usb 5-1: unable to get BOS descriptor or descriptor too short
[  852.208176][  T809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  852.219760][  T809] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  852.229179][  T809] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  852.242676][  T809] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  852.252063][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.260266][  T809] usb 5-1: Product: syz
[  852.264653][  T809] usb 5-1: Manufacturer: syz
[  852.269322][  T809] usb 5-1: SerialNumber: syz
[  852.310300][T14178] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  852.487525][  T809] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[  852.495671][  T809] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3
[  852.502957][  T809] usb 5-1: 1:1 : unsupported format bits 0x33820006
[  852.509729][  T809] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  852.525257][  T809] usb 5-1: unit 2 not found!
[  852.532115][  T809] usb 5-1: unit 0 not found!
[  852.574667][  T809] usb 5-1: USB disconnect, device number 56
[  852.619001][T12317] udevd[12317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  852.646573][T14179] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  852.654612][T14179] usb 4-1: config 0 has no interface number 0
[  852.663019][T14179] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  852.674036][T14179] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  852.684793][T14179] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  852.693865][T14179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.706705][T14179] usb 4-1: config 0 descriptor??
[  852.752328][T15711] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  852.759954][  T996] usb 3-1: config 1 has an invalid interface number: 73 but max is 0
[  852.768091][  T996] usb 3-1: config 1 has no interface number 0
[  852.774232][  T996] usb 3-1: config 1 interface 73 altsetting 83 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  852.785118][  T996] usb 3-1: config 1 interface 73 has no altsetting 0
[  852.791946][T14180] usb 1-1: unable to get BOS descriptor or descriptor too short
[  852.864727][T14179] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  853.062240][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  853.081067][T14179] usb 4-1: USB disconnect, device number 29
[  853.168386][T15724] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2668'.
[  853.178159][T15724] FAULT_INJECTION: forcing a failure.
[  853.178159][T15724] name failslab, interval 1, probability 0, space 0, times 0
[  853.191459][T15724] CPU: 0 UID: 0 PID: 15724 Comm: syz.4.2668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  853.191490][T15724] Tainted: [L]=SOFTLOCKUP
[  853.191499][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  853.191512][T15724] Call Trace:
[  853.191521][T15724]  <TASK>
[  853.191530][T15724]  dump_stack_lvl+0xe8/0x150
[  853.191559][T15724]  should_fail_ex+0x412/0x560
[  853.191588][T15724]  should_failslab+0xa8/0x100
[  853.191610][T15724]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  853.191641][T15724]  ? __alloc_skb+0x186/0x7d0
[  853.191670][T15724]  ? __alloc_skb+0x1d0/0x7d0
[  853.191697][T15724]  ? __local_bh_enable_ip+0xd0/0x130
[  853.191724][T15724]  __alloc_skb+0x1d0/0x7d0
[  853.191759][T15724]  netlink_sendmsg+0x5d4/0xb40
[  853.191789][T15724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  853.191813][T15724]  ? aa_sock_msg_perm+0xf1/0x1b0
[  853.191846][T15724]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  853.191877][T15724]  ____sys_sendmsg+0x972/0x9f0
[  853.191898][T15724]  ? __might_fault+0xaf/0x130
[  853.191932][T15724]  ? __pfx_____sys_sendmsg+0x10/0x10
[  853.191963][T15724]  ? import_iovec+0x73/0xa0
[  853.192000][T15724]  ___sys_sendmsg+0x2a5/0x360
[  853.192020][T15724]  ? __lock_acquire+0x6b5/0x2cf0
[  853.192048][T15724]  ? __pfx____sys_sendmsg+0x10/0x10
[  853.192105][T15724]  ? __fget_files+0x2a/0x420
[  853.192130][T15724]  ? __fget_files+0x3a0/0x420
[  853.192166][T15724]  __x64_sys_sendmsg+0x1bd/0x2a0
[  853.192191][T15724]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  853.192223][T15724]  ? __pfx_ksys_write+0x10/0x10
[  853.192262][T15724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.192285][T15724]  do_syscall_64+0x174/0x580
[  853.192307][T15724]  ? trace_irq_disable+0x3b/0x140
[  853.192338][T15724]  ? clear_bhb_loop+0x40/0x90
[  853.192367][T15724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.192389][T15724] RIP: 0033:0x7f771899ce59
[  853.192413][T15724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.192431][T15724] RSP: 002b:00007f7719798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  853.192454][T15724] RAX: ffffffffffffffda RBX: 00007f7718c15fa0 RCX: 00007f771899ce59
[  853.192469][T15724] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004
[  853.192484][T15724] RBP: 00007f7719798090 R08: 0000000000000000 R09: 0000000000000000
[  853.192497][T15724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.192510][T15724] R13: 00007f7718c16038 R14: 00007f7718c15fa0 R15: 00007f7718d3fa48
[  853.192543][T15724]  </TASK>
[  853.207283][T14180] usb 1-1: config 4 has an invalid interface number: 138 but max is 0
[  853.489318][T14180] usb 1-1: config 4 has no interface number 0
[  853.495539][T14180] usb 1-1: config 4 interface 138 has no altsetting 0
[  853.867711][T14178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  853.879674][T14178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  853.889478][T14178] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  853.902414][T14178] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  853.911507][T14178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.980066][T15733] netlink: 'syz.4.2672': attribute type 30 has an invalid length.
[  853.987052][T14180] usb 1-1: string descriptor 0 read error: -71
[  853.994255][T14180] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[  854.003330][T14180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.015612][T14178] usb 2-1: config 0 descriptor??
[  854.062085][T15734] syzkaller0: entered promiscuous mode
[  854.067972][T15734] syzkaller0: entered allmulticast mode
[  854.086855][T14180] usb 1-1: can't set config #4, error -71
[  854.094776][T14180] usb 1-1: USB disconnect, device number 127
[  854.194644][  T996] usb 3-1: string descriptor 0 read error: -71
[  854.201021][  T996] usb 3-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice=1e.18
[  854.210113][  T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.308577][  T996] usb 3-1: can't set config #1, error -71
[  854.316127][  T996] usb 3-1: USB disconnect, device number 53
[  854.324455][T15733] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2672'.
[  854.414243][T14179] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  854.647134][T14178] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  854.907900][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  854.916872][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  854.928758][  T809] usb 2-1: USB disconnect, device number 63
[  855.181598][T14180] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  855.231133][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2678'.
[  855.524990][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'.
[  855.534249][T15761] openvswitch: netlink: Flow actions attr not present in new flow.
[  855.564234][  T809] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  855.726452][T14179] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  855.824183][  T809] usb 5-1: Using ep0 maxpacket: 16
[  855.871524][  T809] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  855.881183][T15763] fuse: Unknown parameter ''
[  855.886508][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.895182][  T809] usb 5-1: Product: syz
[  855.899726][  T809] usb 5-1: Manufacturer: syz
[  855.908504][  T809] usb 5-1: SerialNumber: syz
[  855.925599][  T809] r8152-cfgselector 5-1: Unknown version 0x0000
[  855.935451][  T809] r8152-cfgselector 5-1: config 0 descriptor??
[  856.523038][T14180] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  856.533929][T14180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.545475][T14180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.555228][T14180] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  856.632150][T14179] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[  856.641266][T14179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.649315][T14179] usb 4-1: Product: syz
[  856.653508][T14179] usb 4-1: Manufacturer: syz
[  856.658136][T14179] usb 4-1: SerialNumber: syz
[  856.663259][  T996] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  856.707540][  T809] r8152-cfgselector 5-1: USB disconnect, device number 57
[  856.860633][T14179] usb 4-1: can't set config #1, error -71
[  856.900256][T14179] usb 4-1: USB disconnect, device number 30
[  856.963991][T14180] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  856.973108][T14180] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  856.981240][T14180] usb 1-1: Manufacturer: syz
[  856.991408][T14180] usb 1-1: config 0 descriptor??
[  857.232713][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  857.232732][   T30] audit: type=1326 audit(1781176204.873:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.3.2687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4be499ce59 code=0x0
[  857.846760][T14179] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  857.955546][T14180] usbhid 1-1:0.0: can't add hid device: -71
[  857.961660][T14180] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  857.971267][  T996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  857.981425][  T996] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  857.993542][T14180] usb 1-1: USB disconnect, device number 2
[  858.067209][T14158] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  858.514391][T14179] usb 3-1: Invalid ep0 maxpacket: 64
[  858.623626][  T996] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  858.633708][  T996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.642534][T14158] usb 4-1: Using ep0 maxpacket: 32
[  858.652552][T14158] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  858.663138][T14158] usb 4-1: config 0 has no interface number 0
[  858.672155][  T996] usb 2-1: Product: syz
[  858.676992][T14179] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  858.686202][T14158] usb 4-1: config 0 interface 12 has no altsetting 0
[  858.694638][  T996] usb 2-1: Manufacturer: syz
[  858.700428][  T996] usb 2-1: SerialNumber: syz
[  858.708943][T14158] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  858.721866][T14158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.731887][T14158] usb 4-1: Product: syz
[  858.736555][T14158] usb 4-1: Manufacturer: syz
[  858.747948][T14158] usb 4-1: SerialNumber: syz
[  858.761903][T14158] usb 4-1: config 0 descriptor??
[  858.809938][T15802] syzkaller0: entered promiscuous mode
[  858.815451][T15802] syzkaller0: entered allmulticast mode
[  859.170072][T14179] usb 3-1: Invalid ep0 maxpacket: 64
[  859.175888][T14179] usb usb3-port1: attempt power cycle
[  859.201184][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2694'.
[  859.622923][T14180] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  859.630735][T14179] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  859.838651][T14178] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  860.053877][T14179] usb 3-1: Invalid ep0 maxpacket: 64
[  860.062537][  T996] usb 2-1: unit 5 not found!
[  860.101968][  T996] usb 2-1: USB disconnect, device number 64
[  860.268650][T14179] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  860.477550][T15816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2697'.
[  860.486853][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2697'.
[  860.508618][T14178] usb 1-1: Using ep0 maxpacket: 16
[  860.613651][T14179] usb 3-1: device descriptor read/8, error -71
[  860.723684][T14179] usb usb3-port1: unable to enumerate USB device
[  860.935041][T14180] usb 5-1: config index 0 descriptor too short (expected 24929, got 18)
[  860.943466][T14180] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  860.952195][T14180] usb 5-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  860.962484][T14180] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  860.972392][  T996] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  861.136883][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2700'.
[  861.155459][T14178] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  861.183538][T15823] team0: Port device team_slave_0 removed
[  861.373970][T14179] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  861.741865][T15830] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  861.801845][T14180] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  861.810926][T14180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.818921][T14180] usb 5-1: Product: syz
[  861.823098][T14180] usb 5-1: Manufacturer: syz
[  861.827714][T14180] usb 5-1: SerialNumber: syz
[  862.015453][T14158] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  862.023744][T14158] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  862.031247][T14158] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  862.038919][T14158] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  862.048251][T14178] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[  862.057345][T14178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.070186][T14178] usb 1-1: Product: syz
[  862.074430][T14178] usb 1-1: Manufacturer: syz
[  862.079066][T14178] usb 1-1: SerialNumber: syz
[  862.084885][T14158] usb 4-1: USB disconnect, device number 31
[  862.244272][T14180] usb 5-1: USB disconnect, device number 58
[  862.252574][  T996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  862.263021][  T996] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  862.667405][T14179] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[  862.679462][T14179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  862.690637][  T996] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  862.699682][  T996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  862.707676][  T996] usb 2-1: SerialNumber: syz
[  862.713755][T14158] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  862.894049][  T996] cdc_ether 2-1:1.0: GUID doesn't match
[  862.990459][T14180] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  863.085184][  T996] usb 2-1: USB disconnect, device number 65
[  863.104511][T14158] usb 4-1: device descriptor read/64, error -71
[  863.433896][T14158] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  863.543660][T14179] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  863.553059][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.561094][T14179] usb 3-1: Product: syz
[  863.565298][T14179] usb 3-1: Manufacturer: syz
[  863.569945][T14179] usb 3-1: SerialNumber: syz
[  863.579946][T14179] usb 3-1: config 0 descriptor??
[  863.642509][T15842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2705'.
[  863.663774][T14179] usb 3-1: can't set config #0, error -71
[  863.671398][T14179] usb 3-1: USB disconnect, device number 58
[  863.887736][T14158] usb 4-1: device descriptor read/64, error -71
[  863.997979][T14158] usb usb4-port1: attempt power cycle
[  864.004935][  T809] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  864.217758][  T809] usb 2-1: Using ep0 maxpacket: 16
[  864.233799][  T809] usb 2-1: config 252 has an invalid interface number: 15 but max is 0
[  864.253685][  T809] usb 2-1: config 252 has no interface number 0
[  864.264355][  T809] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  864.298707][  T809] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  864.308551][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.316973][  T809] usb 2-1: Product: syz
[  864.321278][  T809] usb 2-1: Manufacturer: syz
[  864.326259][  T809] usb 2-1: SerialNumber: syz
[  864.340863][T14180] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  864.349890][T14180] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  864.359185][T14180] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  864.368562][T14180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.384596][T15849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.393360][  T809] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  864.404587][T15849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.449858][T14158] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  864.567496][T14180] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  864.673919][T14179] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  864.811777][T15844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  864.845126][T15844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  864.902671][T14158] usb 4-1: device descriptor read/8, error -71
[  864.909098][T14180] gspca_sn9c2028: read1 error -71
[  864.919242][  T809] usb 2-1: USB disconnect, device number 66
[  864.928557][T15243] usb 2-1: Failed to submit usb control message: -71
[  864.945295][T15243] usb 2-1: unable to send the bmi data to the device: -71
[  864.955218][T15243] usb 2-1: unable to get target info from device
[  864.961650][T15243] usb 2-1: could not get target info (-71)
[  864.969447][T15243] usb 2-1: could not probe fw (-71)
[  865.010551][T14180] gspca_sn9c2028: read1 error -71
[  865.114126][T14180] gspca_sn9c2028: read1 error -71
[  865.119326][T14180] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71
[  865.132216][T14180] usb 5-1: USB disconnect, device number 59
[  865.799209][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'.
[  865.996893][T14158] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  866.004771][T14179] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  866.012914][T14179] usb 3-1: config 2 has no interface number 0
[  866.019071][T14179] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64
[  866.029900][T14179] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  866.039811][T14179] usb 3-1: config 2 interface 88 has no altsetting 0
[  866.164157][T14176] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  866.172961][T15888] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2719'.
[  866.182456][T15888] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2719'.
[  866.369972][T15895] warning: `syz.0.2721' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  866.383801][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.404669][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.413588][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.425866][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.437032][T14176] usb 5-1: config index 0 descriptor too short (expected 24929, got 18)
[  866.447544][T14176] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  866.459819][T14176] usb 5-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  866.471618][T14176] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  866.488621][T14176] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  866.564569][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.572699][T14176] usb 5-1: Product: syz
[  866.577488][   T30] audit: type=1326 audit(1781176214.153:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.636923][T14176] usb 5-1: Manufacturer: syz
[  866.688994][T14176] usb 5-1: SerialNumber: syz
[  866.709329][   T30] audit: type=1326 audit(1781176214.153:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.747412][   T30] audit: type=1326 audit(1781176214.153:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.773004][   T30] audit: type=1326 audit(1781176214.153:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.802836][   T30] audit: type=1326 audit(1781176214.153:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.828692][   T30] audit: type=1326 audit(1781176214.153:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.854100][   T30] audit: type=1326 audit(1781176214.153:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.854524][T15899] loop5: detected capacity change from 0 to 7
[  866.887103][   T30] audit: type=1326 audit(1781176214.153:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.916024][T15899] Dev loop5: unable to read RDB block 7
[  866.921744][T15899]  loop5: unable to read partition table
[  866.925891][T14179] usb 3-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=c7.06
[  866.932767][T15899] loop5: partition table beyond EOD, 
[  866.936500][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.936528][T14179] usb 3-1: Product: syz
[  866.936543][T14179] usb 3-1: Manufacturer: syz
[  866.936559][T14179] usb 3-1: SerialNumber: syz
[  866.966473][   T30] audit: type=1326 audit(1781176214.203:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  866.992196][T15899] truncated
[  867.012866][T15899] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  867.022255][   T30] audit: type=1326 audit(1781176214.203:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.2721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  867.051302][T15852] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  867.113385][T14176] usb 5-1: USB disconnect, device number 60
[  867.160728][T14179] pl2303 3-1:2.88: required interrupt-in endpoint missing
[  867.171105][T14158] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  867.182464][T14158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  867.192256][T14158] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  867.392011][T14180] usb 3-1: USB disconnect, device number 59
[  867.592351][T14158] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  867.601479][T14158] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  867.609593][T14158] usb 4-1: Manufacturer: syz
[  867.616930][T14158] usb 4-1: config 0 descriptor??
[  867.812457][T14179] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  867.828410][T14158] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  867.916611][T14178] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32
[  868.016606][T14176] usb 4-1: USB disconnect, device number 35
[  868.169902][T15920] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  868.233461][T15922] xt_connbytes: Forcing CT accounting to be enabled
[  868.258707][T15922] set match dimension is over the limit!
[  868.471201][T14179] usb 2-1: Using ep0 maxpacket: 16
[  869.014666][T14179] usb 2-1: config 3 has an invalid interface number: 20 but max is 0
[  869.023590][T14179] usb 2-1: config 3 has no interface number 0
[  869.029696][T14179] usb 2-1: config 3 interface 20 has no altsetting 0
[  869.241802][T14178] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  869.885650][T14179] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  869.894937][T14179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.909313][T14179] usb 2-1: Product: syz
[  869.913547][T14179] usb 2-1: Manufacturer: syz
[  869.918558][T14179] usb 2-1: SerialNumber: syz
[  870.050846][T15936] dlm: Unknown command passed to DLM device : 33
[  870.050846][T15936] 
[  870.106407][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  870.112805][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  870.508468][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2736'.
[  870.765820][T14178] usb 4-1: unable to get BOS descriptor or descriptor too short
[  870.857898][T15958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  870.883268][T14179] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.20/input/input66
[  870.894710][ T4986] bcm5974 2-1:3.20: could not read from device
[  870.916408][ T4986] bcm5974 2-1:3.20: could not read from device
[  870.929554][T14179] usb 2-1: USB disconnect, device number 67
[  870.988716][T14178] usb 4-1: not running at top speed; connect to a high speed hub
[  870.996965][ T4986] bcm5974 2-1:3.20: could not read from device
[  871.008977][T12314] bcm5974 2-1:3.20: could not read from device
[  871.037959][T12314] udevd[12314]: Error opening device "/dev/input/event4": No such device
[  871.046599][T12314] udevd[12314]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.054326][T12314] udevd[12314]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.062068][T12314] udevd[12314]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.069786][T12314] udevd[12314]: Unable to EVIOCGABS device "/dev/input/event4"
[  871.432210][T14178] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  871.442388][T14178] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  872.015036][T15986] netlink: 'syz.1.2745': attribute type 2 has an invalid length.
[  872.192520][T15989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.215245][T15989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.439176][T14178] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  872.448300][T14178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.543683][T14178] usb 4-1: can't set config #2, error -71
[  872.551309][T14178] usb 4-1: USB disconnect, device number 36
[  872.594127][T14165] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  872.876332][T14165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  872.890554][T14165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.942903][T14165] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  872.992055][T14165] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  873.024265][T14165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.054479][T14165] usb 3-1: config 0 descriptor??
[  873.229126][T14178] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  873.294331][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'.
[  873.303517][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'.
[  873.478889][T14165] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  873.501509][T14165] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  873.509413][T14176] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  873.518882][T14165] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  873.536336][T14165] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  873.554474][T14165] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  873.595876][T14165] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  873.683186][T16009] netlink: 'syz.1.2752': attribute type 6 has an invalid length.
[  873.711513][T16009] netlink: 'syz.1.2752': attribute type 7 has an invalid length.
[  873.720797][T16009] netlink: 'syz.1.2752': attribute type 8 has an invalid length.
[  873.749146][T14165] usb 3-1: USB disconnect, device number 60
[  873.774075][T14176] usb 5-1: Using ep0 maxpacket: 8
[  873.794901][T14176] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  873.813947][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.822318][T14176] usb 5-1: Product: syz
[  873.831993][T14176] usb 5-1: Manufacturer: syz
[  873.836986][T14176] usb 5-1: SerialNumber: syz
[  873.849172][T14176] usb 5-1: config 0 descriptor??
[  873.860681][T14176] cdc_ether 5-1:0.0: bad CDC descriptors
[  873.867920][T14176] usb 5-1: unsupported MDLM descriptors
[  874.106932][T16021] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2755'.
[  874.135281][T16021] netlink: 'syz.3.2755': attribute type 1 has an invalid length.
[  874.252598][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'.
[  874.627371][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'.
[  874.637063][T16036] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  874.644351][T16036] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2761'.
[  875.107338][T14178] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  875.336018][T14179] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  875.767197][T14179] usb 3-1: device descriptor read/64, error -71
[  875.801176][T16049] overlay: Unknown parameter '�W��z�!�?V1�|G�*�<b�d�|%p���K�Sn�l/F�6O���l��"x�v|QTc�r�n�iY��W�c٩�x덾Y8�.G��8��XS�lଅ3���kgnK^fښr�-�57���@'
[  876.091643][T14179] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  876.415126][T14178] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  876.426261][T14178] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  876.439422][T14178] usb 4-1: config 0 interface 0 has no altsetting 0
[  876.446128][T14178] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  876.455272][T14178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.467889][T14165] usb 5-1: USB disconnect, device number 61
[  876.477370][T14178] usb 4-1: config 0 descriptor??
[  876.528732][T14179] usb 3-1: device descriptor read/64, error -71
[  876.756517][T14179] usb usb3-port1: attempt power cycle
[  877.077407][T14178] lenovo 0003:17EF:60EE.0031: unknown main item tag 0x2
[  877.084459][T14178] lenovo 0003:17EF:60EE.0031: unknown main item tag 0x6
[  877.091522][T14178] lenovo 0003:17EF:60EE.0031: ignoring exceeding usage max
[  877.123124][T14178] lenovo 0003:17EF:60EE.0031: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[  877.171918][T14179] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  877.444108][T14176] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  877.603475][T14179] usb 3-1: device descriptor read/8, error -71
[  877.706045][T14176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  877.718356][T14176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  877.728962][T14176] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  877.742143][T14176] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  877.744385][T16071] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2771'.
[  877.752833][T14176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.764183][T16071] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2771'.
[  877.779343][T14176] usb 2-1: config 0 descriptor??
[  877.832126][T14178] lenovo 0003:17EF:60EE.0031: Sensitivity setting failed: -71
[  877.843125][T14158] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  877.854809][T14178] usb 4-1: USB disconnect, device number 38
[  877.942164][T14179] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  878.174035][T16079] trusted_key: encrypted_key: insufficient parameters specified
[  878.277130][T14158] usb 5-1: device descriptor read/64, error -71
[  878.283763][T14179] usb 3-1: device not accepting address 64, error -71
[  878.291754][T14179] usb usb3-port1: unable to enumerate USB device
[  878.613823][T14158] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  879.049041][T14158] usb 5-1: device descriptor read/64, error -71
[  879.055880][T14176] usbhid 2-1:0.0: can't add hid device: -71
[  879.076728][T14176] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  879.129005][T14176] usb 2-1: USB disconnect, device number 68
[  879.212713][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.234536][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.273495][T14158] usb usb5-port1: attempt power cycle
[  879.329959][T16094] syzkaller0: entered promiscuous mode
[  879.343914][T16094] syzkaller0: entered allmulticast mode
[  879.379571][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  879.404404][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.627955][T16098] binder: BINDER_SET_CONTEXT_MGR already set
[  879.635552][T16098] binder: 16097:16098 ioctl 4018620d 200000000100 returned -16
[  879.665542][T16098] binder_alloc: binder_alloc_mmap_handler: 16097 200000ffd000-200001000000 already mapped failed -16
[  879.698673][T14158] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  879.729123][T16099] binder_alloc: 16097: binder_alloc_buf, no vma
[  879.754855][T16098] loop5: detected capacity change from 0 to 14
[  879.773510][T16098] Dev loop5: unable to read RDB block 14
[  879.791161][T16098]  loop5: AHDI p1 p2 p3
[  879.800693][T16098] loop5: partition table partially beyond EOD, truncated
[  879.825307][T16098] loop5: p1 start 1601398130 is beyond EOD, truncated
[  879.842288][T16098] loop5: p2 start 1702059890 is beyond EOD, truncated
[  880.158288][T14158] usb 5-1: device descriptor read/8, error -71
[  880.454061][T14176] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  880.478342][T14158] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  880.593673][T16118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.605485][T16118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.685782][T14176] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid maxpacket 47941, setting to 1024
[  880.703251][T14176] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x85 has invalid maxpacket 1024
[  880.714584][T14176] usb 3-1: config 0 interface 0 has no altsetting 0
[  880.724455][T14176] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  880.735786][T14176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.744183][T14176] usb 3-1: Product: syz
[  880.748836][T14176] usb 3-1: Manufacturer: syz
[  880.753544][T14176] usb 3-1: SerialNumber: syz
[  880.782969][T14176] usb 3-1: config 0 descriptor??
[  880.811679][T14158] usb 5-1: device descriptor read/8, error -71
[  880.820961][T16111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  880.832802][T14176] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  880.843501][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  880.851968][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  880.861789][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  880.869937][T14165] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[  880.878497][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  880.888196][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  880.896406][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  880.906725][T14176] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  880.918903][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  880.927229][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  880.937537][T14158] usb usb5-port1: unable to enumerate USB device
[  880.944963][T16127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2788'.
[  880.949210][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  880.962267][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  880.970448][T14176] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  880.979329][T16127] xt_HMARK: spi-set and port-set can't be combined
[  880.985199][T14176] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  880.994459][T14165] usb 2-1: device descriptor read/64, error -71
[  881.125029][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  881.125056][   T30] audit: type=1326 audit(1781176228.803:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.189748][   T30] audit: type=1326 audit(1781176228.803:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.214989][   T30] audit: type=1326 audit(1781176228.803:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.239766][   T30] audit: type=1326 audit(1781176228.803:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.264344][   T30] audit: type=1326 audit(1781176228.803:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.301695][   T30] audit: type=1326 audit(1781176228.803:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.326110][   T30] audit: type=1326 audit(1781176228.803:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.350747][   T30] audit: type=1326 audit(1781176228.803:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.354806][T14165] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  881.383329][   T30] audit: type=1326 audit(1781176228.803:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.0.2791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.584368][T14165] usb 2-1: device descriptor read/64, error -71
[  881.694521][T14165] usb usb2-port1: attempt power cycle
[  881.747638][T14158] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  881.890795][   T30] audit: type=1326 audit(1781176229.553:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16140 comm="syz.0.2793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x7ffc0000
[  881.993653][T16143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.003730][T16143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.124497][T14165] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  882.174787][T14165] usb 2-1: device descriptor read/8, error -71
[  882.399938][T14158] usb 5-1: Using ep0 maxpacket: 8
[  882.454324][T14165] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  882.505252][T14165] usb 2-1: device descriptor read/8, error -71
[  882.614517][T14165] usb usb2-port1: unable to enumerate USB device
[  883.059513][T14158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  883.070732][T14158] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  883.080477][T14158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.099518][T14158] usb 5-1: config 0 descriptor??
[  883.606935][T14158] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  883.671202][T14165] usb 3-1: USB disconnect, device number 65
[  883.699636][T14165] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  883.749116][T14165] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  883.785039][T14165] keyspan 3-1:0.0: device disconnected
[  883.992084][T16168] syz_tun: entered allmulticast mode
[  884.005519][T16168] pim6reg: entered allmulticast mode
[  884.070553][T16165] kvm: pic: non byte write
[  884.178491][T16163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2799'.
[  884.343146][T16173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2801'.
[  884.388726][T14158] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  885.506390][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  885.515370][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.703606][T14158] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  885.704630][T14176] usb 5-1: USB disconnect, device number 66
[  885.711748][T14158] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  885.711771][T14158] usb 3-1: config 0 has no interface number 0
[  886.014410][T16190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  886.102806][T16192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.118239][T16192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.220526][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  886.220546][   T30] audit: type=1800 audit(1781176233.893:3376): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2808" name="file1" dev="tmpfs" ino=2805 res=0 errno=0
[  886.303855][T16200] IPv6: Can't replace route, no match found
[  886.582378][T14158] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  886.592504][T14158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.607185][T14158] usb 3-1: Product: syz
[  886.613615][T14158] usb 3-1: Manufacturer: syz
[  886.624749][T14158] usb 3-1: SerialNumber: syz
[  886.644605][T14158] usb 3-1: config 0 descriptor??
[  886.724747][T14176] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  886.950997][T14176] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  886.990642][T14176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.009235][T14176] usb 2-1: Product: syz
[  887.016585][T14176] usb 2-1: Manufacturer: syz
[  887.021297][T14176] usb 2-1: SerialNumber: syz
[  887.036965][T14176] usb 2-1: config 0 descriptor??
[  887.045411][T14176] hub 2-1:0.0: bad descriptor, ignoring hub
[  887.051531][T14176] hub 2-1:0.0: probe with driver hub failed with error -5
[  887.060021][T14176] f81232 2-1:0.0: f81534a converter detected
[  887.085374][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.096664][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.248566][T14176] f81534a ttyUSB0: f81232_set_register failed status: -71
[  887.260413][T14176] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  887.294692][T14158] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  887.295431][T14176] usb 2-1: USB disconnect, device number 73
[  887.302073][T14158] uvcvideo 3-1:0.64: No valid video chain found.
[  887.317084][T14176] f81232 2-1:0.0: device disconnected
[  887.327529][T14158] usb 3-1: USB disconnect, device number 66
[  887.775111][T14176] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  887.939585][T14158] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  888.044203][T14176] usb 2-1: Using ep0 maxpacket: 8
[  888.053419][T14176] usb 2-1: config index 0 descriptor too short (expected 878, got 110)
[  888.073938][T14176] usb 2-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config
[  888.104322][T14176] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 1
[  888.118444][T14176] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  888.143896][T14176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.151984][T14176] usb 2-1: Product: syz
[  888.158456][T14176] usb 2-1: Manufacturer: syz
[  888.163102][T14176] usb 2-1: SerialNumber: syz
[  888.319076][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.329027][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.419489][T16245] xt_CT: You must specify a L4 protocol and not use inversions on it
[  888.437675][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.461014][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.511427][T16230] team_slave_1: Caught tx_queue_len zero misconfig
[  888.664140][T14165] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  888.967330][T14165] usb 4-1: Using ep0 maxpacket: 32
[  888.987327][T14165] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  889.008662][T14165] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  889.021931][T14165] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  889.030630][T14165] usb 4-1: Product: syz
[  889.035355][T14165] usb 4-1: Manufacturer: syz
[  889.040049][T14165] usb 4-1: SerialNumber: syz
[  889.058569][T14165] usb 4-1: config 0 descriptor??
[  889.070497][T16244] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  889.349447][T16251] netlink: 'syz.3.2823': attribute type 1 has an invalid length.
[  889.357328][T16251] netlink: 4176 bytes leftover after parsing attributes in process `syz.3.2823'.
[  889.646510][T14176] usb 2-1: USB disconnect, device number 74
[  890.155579][T14158] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  890.164688][T14158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.172675][T14158] usb 3-1: Product: syz
[  890.176837][T14158] usb 3-1: Manufacturer: syz
[  890.184943][T14158] usb 3-1: config 0 descriptor??
[  890.204466][T14176] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  890.261608][T14158] usb 3-1: can't set config #0, error -71
[  890.270841][T14158] usb 3-1: USB disconnect, device number 67
[  890.474076][T14176] usb 2-1: Using ep0 maxpacket: 32
[  890.481576][T14176] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  890.490546][T14176] usb 2-1: config 0 has no interface number 0
[  890.497035][T14176] usb 2-1: config 0 interface 12 has no altsetting 0
[  890.506237][T14176] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  890.515566][T14176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.523616][T14176] usb 2-1: Product: syz
[  890.528011][T14176] usb 2-1: Manufacturer: syz
[  890.532681][T14176] usb 2-1: SerialNumber: syz
[  890.543631][T14176] usb 2-1: config 0 descriptor??
[  890.877913][T16275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  890.885775][T16275] syzkaller0: entered promiscuous mode
[  890.891291][T16275] syzkaller0: entered allmulticast mode
[  890.905733][T16275] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  890.950456][T16275] tipc: Resetting bearer <eth:syzkaller0>
[  890.958769][T16274] tipc: Resetting bearer <eth:syzkaller0>
[  890.984101][T16274] tipc: Disabling bearer <eth:syzkaller0>
[  891.145261][T14158] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  891.197676][T16279] bond6 (unregistering): Released all slaves
[  891.231044][T16280] fuse: Bad value for 'fd'
[  891.235934][T16282] fuse: Bad value for 'fd'
[  891.503074][T14179] usb 4-1: USB disconnect, device number 39
[  891.792977][T16295] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2840'.
[  891.835563][T14158] usb 3-1: Using ep0 maxpacket: 16
[  892.251748][  T996] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[  892.474295][T14158] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[  892.482544][T14158] usb 3-1: config 0 has no interface number 0
[  892.488693][T14158] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  892.500200][T14179] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  892.509136][T14158] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  892.696536][  T996] usb 5-1: device descriptor read/64, error -71
[  892.731333][T14176] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  892.752688][T14176] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  892.770577][T14176] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  892.784043][T14176] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  892.816994][T14176] usb 2-1: USB disconnect, device number 75
[  893.029069][  T996] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  893.113532][T16318] program syz.0.2847 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  893.137666][T14179] usb 4-1: Using ep0 maxpacket: 16
[  893.352273][T14158] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  893.362133][T14158] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  893.370470][T14158] usb 3-1: Product: syz
[  893.374691][T14158] usb 3-1: Manufacturer: syz
[  893.379314][T14158] usb 3-1: SerialNumber: syz
[  893.386597][T14158] usb 3-1: config 0 descriptor??
[  893.460655][  T996] usb 5-1: device descriptor read/64, error -71
[  893.467164][T14158] usb 3-1: can't set config #0, error -71
[  893.480946][T14158] usb 3-1: USB disconnect, device number 68
[  893.570167][  T996] usb usb5-port1: attempt power cycle
[  893.790725][T14179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  893.801635][T14179] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  893.811394][T14179] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  893.820425][T14179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.865746][T14179] usb 4-1: config 0 descriptor??
[  894.008254][  T996] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  894.227668][T14178] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  894.299582][T16329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'.
[  894.379531][T16333] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2852'.
[  894.444172][  T996] usb 5-1: device descriptor read/8, error -71
[  894.630680][T16337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2853'.
[  894.643081][T16338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2853'.
[  894.768138][T14179] usbhid 4-1:0.0: can't add hid device: -71
[  894.774225][T14179] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  894.783095][  T996] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  894.792781][T14179] usb 4-1: USB disconnect, device number 40
[  895.091764][  T996] usb 5-1: device descriptor read/8, error -71
[  895.202273][  T996] usb usb5-port1: unable to enumerate USB device
[  895.254544][T14176] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  895.534320][T14178] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  895.542398][T14178] usb 2-1: config 0 has no interface number 0
[  895.548864][T14178] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.559771][T14178] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  895.569605][T14178] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  895.578705][T14178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.608390][T14176] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  895.618995][T14178] usb 2-1: config 0 descriptor??
[  895.656476][T14176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.693456][T14176] usb 3-1: Product: syz
[  895.719862][T14176] usb 3-1: Manufacturer: syz
[  895.744007][T14176] usb 3-1: SerialNumber: syz
[  895.771566][T14176] usb 3-1: config 0 descriptor??
[  895.951629][T14257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  895.963310][T14257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  896.004592][T14257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  896.015377][T14257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  896.023263][T14257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  896.110751][ T4951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  896.124090][ T4951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  896.134584][ T4951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  896.150301][ T4951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  896.158046][ T4951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  896.272477][T16365] netem: change failed
[  896.333218][T14178] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0032/input/input68
[  896.467433][T14178] holtek_kbd 0003:04D9:A055.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  896.524710][T14176] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  896.570829][T14176] f81604 3-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  896.600614][T14176] f81604 3-1:0.0: probe with driver f81604 failed with error -121
[  896.615873][  T809] usb 2-1: USB disconnect, device number 76
[  896.763871][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  896.778018][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  896.829106][T16373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  896.838540][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.847805][T16373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  896.855099][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.864331][T16373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  896.871596][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.912042][T16373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  896.925615][T15240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  896.936505][T15240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.956598][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.969575][T16373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  896.981038][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  897.157659][T15240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.168007][T15240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.284068][T14176] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  897.411378][T16363] bridge0: port 1(bridge_slave_0) entered blocking state
[  897.426716][T16363] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.438156][T16363] bridge_slave_0: entered allmulticast mode
[  897.459053][T16363] bridge_slave_0: entered promiscuous mode
[  897.500382][T15240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.510716][T15240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.537098][T16363] bridge0: port 2(bridge_slave_1) entered blocking state
[  897.544478][T16363] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.548418][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  897.551758][T16363] bridge_slave_1: entered allmulticast mode
[  897.582837][T16363] bridge_slave_1: entered promiscuous mode
[  897.606369][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  897.642812][T14176] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  897.670496][T16363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  897.695487][T14176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.704109][T16363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  897.720172][T14176] usb 4-1: config 0 descriptor??
[  897.787419][T16363] team0: Port device team_slave_0 added
[  897.814920][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  897.825070][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.841114][T16363] team0: Port device team_slave_1 added
[  897.890210][T15240] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.899970][T15240] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.935195][T16392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  897.944530][T16392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  897.985811][T16363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.992867][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.020278][T16363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  898.084539][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.093636][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.105655][T16363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  898.123414][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.184062][T16363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  898.248234][T16377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.257112][T16377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.275948][T14257] Bluetooth: hci5: command tx timeout
[  898.298315][T14178] usb 3-1: USB disconnect, device number 69
[  898.406906][T16363] hsr_slave_0: entered promiscuous mode
[  898.421188][T16363] hsr_slave_1: entered promiscuous mode
[  898.447760][T16363] debugfs: 'hsr0' already exists in 'hsr'
[  898.457366][T16363] Cannot create hsr debugfs directory
[  898.742379][T14176] hid-steam 0003:28DE:1142.0033: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  898.781451][T14176] hid-steam 0003:28DE:1142.0033: Steam wireless receiver connected
[  898.982154][T14176] hid-steam 0003:28DE:1142.0034: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  899.238634][T15240] bridge_slave_1: left allmulticast mode
[  899.254044][T15240] bridge_slave_1: left promiscuous mode
[  899.267183][T15240] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.298725][T15240] bridge_slave_0: left allmulticast mode
[  899.314958][T15240] bridge_slave_0: left promiscuous mode
[  899.321546][T15240] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.387418][  T809] usb 4-1: USB disconnect, device number 41
[  899.394709][T14179] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  899.507984][T16403] fuse: Bad value for 'fd'
[  899.545691][  T809] hid-steam 0003:28DE:1142.0033: Steam wireless receiver disconnected
[  900.334125][T14257] Bluetooth: hci5: command tx timeout
[  900.622378][T15240] bond1 (unregistering): Released all slaves
[  900.646934][T15240] bond0 (unregistering): Released all slaves
[  900.663685][T15240] bond2 (unregistering): Released all slaves
[  900.680039][T15240] bond3 (unregistering): Released all slaves
[  900.696458][T15240] bond4 (unregistering): Released all slaves
[  900.720664][T14179] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  900.733010][T14179] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  900.744512][T14179] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  900.762231][T15240] bond5 (unregistering): Released all slaves
[  900.786905][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1
[  901.013868][T16430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.044446][T16430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.108696][T15240] tipc: Left network mode
[  901.310002][T14178] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  901.522661][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2
[  901.610329][T14179] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  901.622951][T14179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.631008][T14179] usb 2-1: Product: syz
[  901.635193][T14179] usb 2-1: Manufacturer: syz
[  901.643743][T14179] usb 2-1: SerialNumber: syz
[  901.665385][T14165] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  901.739811][T14179] usb 2-1: config 0 descriptor??
[  901.837998][T16399] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  901.849820][T16399] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  901.869202][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.878517][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.888734][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  901.897801][T14165] usb 3-1: device descriptor read/64, error -71
[  901.906070][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  901.958618][T14179] usb 2-1: ucan: probing device on interface #0
[  901.965121][T14178] usb 4-1: Using ep0 maxpacket: 16
[  902.081857][T14179] usb 2-1: ucan: could not read protocol version, ret=-71
[  902.089064][T14179] usb 2-1: ucan: probe failed; try to update the device firmware
[  902.112817][T14179] usb 2-1: USB disconnect, device number 77
[  902.235191][T14165] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  902.451329][T14165] usb 3-1: device descriptor read/64, error -71
[  902.458269][T14257] Bluetooth: hci5: command tx timeout
[  902.594951][T14165] usb usb3-port1: attempt power cycle
[  902.618809][T14178] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.628992][T14178] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  902.641910][T14178] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  902.650988][T14178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.692652][T14178] usb 4-1: config 0 descriptor??
[  902.884344][T14178] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  902.931339][T15240] hsr_slave_0: left promiscuous mode
[  902.975564][T15240] hsr_slave_1: left promiscuous mode
[  902.981724][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  902.989202][T15240] batman_adv: batadv0: Removing interface: batadv_slave_0
[  903.004419][T14165] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  903.014378][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  903.021803][T15240] batman_adv: batadv0: Removing interface: batadv_slave_1
[  903.055019][T14165] usb 3-1: device descriptor read/8, error -71
[  903.080292][T14167] usb 4-1: USB disconnect, device number 42
[  903.147482][T15240] veth1_vlan: left promiscuous mode
[  903.348306][T14165] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  903.395359][T14165] usb 3-1: device descriptor read/8, error -71
[  903.525636][T14165] usb usb3-port1: unable to enumerate USB device
[  903.873312][T15240] team0 (unregistering): Port device team_slave_1 removed
[  904.016298][T14165] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  904.024677][T15240] team0 (unregistering): Port device team_slave_0 removed
[  904.299791][T14165] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  904.324372][T14165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.360330][T14165] usb 4-1: Product: syz
[  904.379552][T14165] usb 4-1: Manufacturer: syz
[  904.401117][T14165] usb 4-1: SerialNumber: syz
[  904.467104][T14165] usb 4-1: config 0 descriptor??
[  904.519832][T14257] Bluetooth: hci5: command tx timeout
[  904.536909][T14165] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  904.638812][T16363] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  904.651379][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  904.734762][T16363] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  904.925331][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  904.937867][T16363] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  904.996932][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  905.008784][T16363] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  905.022695][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  905.036131][T16525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.044997][T16525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  905.139668][T16527] bond2: entered promiscuous mode
[  905.151032][T16527] 8021q: adding VLAN 0 to HW filter on device bond2
[  905.189945][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'.
[  905.218002][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.258139][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  905.324343][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'.
[  905.345549][T16544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  905.418213][T14165] gspca_stk1135: reg_w 0x3 err -110
[  905.433505][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.468289][T14165] gspca_stk1135: Sensor write failed
[  905.478462][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.506736][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  905.517382][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  905.520509][T14165] gspca_stk1135: Sensor write failed
[  905.540976][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.570596][T14165] gspca_stk1135: Sensor read failed
[  905.579505][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.593469][T14165] gspca_stk1135: Sensor read failed
[  905.613539][T16363] 8021q: adding VLAN 0 to HW filter on device bond0
[  905.621339][T14165] gspca_stk1135: Detected sensor type unknown (0x0)
[  905.639848][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.648009][T15240] IPVS: stop unused estimator thread 0...
[  905.661806][T14165] gspca_stk1135: Sensor read failed
[  905.670609][T14167] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  905.698305][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.723714][T14165] gspca_stk1135: Sensor read failed
[  905.738440][T16363] 8021q: adding VLAN 0 to HW filter on device team0
[  905.756265][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.783261][T14165] gspca_stk1135: Sensor write failed
[  905.790904][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.798081][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  905.809985][T14165] gspca_stk1135: serial bus timeout: status=0x00
[  905.830040][T15241] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.837218][T15241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  905.840463][T14165] gspca_stk1135: Sensor write failed
[  905.874076][T14167] usb 2-1: Using ep0 maxpacket: 16
[  905.883242][T14165] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  905.905005][T14167] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  905.930204][T14167] usb 2-1: config 0 has no interface number 0
[  905.960439][T14167] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  905.983454][T16363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  905.989479][T14167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.034575][T14167] usb 2-1: Product: syz
[  906.051949][T14167] usb 2-1: Manufacturer: syz
[  906.072906][T14167] usb 2-1: SerialNumber: syz
[  906.106471][T14167] usb 2-1: config 0 descriptor??
[  906.134231][T14167] hub 2-1:0.132: bad descriptor, ignoring hub
[  906.144603][T14167] hub 2-1:0.132: probe with driver hub failed with error -5
[  906.167626][T16363] veth0_vlan: entered promiscuous mode
[  906.190546][T14167] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input69
[  906.205585][T16363] veth1_vlan: entered promiscuous mode
[  906.314304][T16363] veth0_macvtap: entered promiscuous mode
[  906.325263][T16363] veth1_macvtap: entered promiscuous mode
[  906.479580][T16363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  906.497451][T16363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  906.507816][T16564] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  906.634321][T15241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.706924][T15241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.724214][T15241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.769705][T15241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.816139][T14158] usb 4-1: USB disconnect, device number 43
[  906.944774][ T6667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.955119][ T6667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.987553][T16573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  907.000597][T16573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  907.053729][T15240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.061614][T15240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.265990][T14176] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  909.318372][T14158] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  909.555336][T14176] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  909.564853][T14176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.573008][T14176] usb 3-1: Product: syz
[  909.583647][T14176] usb 3-1: Manufacturer: syz
[  909.593333][T14176] usb 3-1: SerialNumber: syz
[  909.617369][T14176] usb 3-1: config 0 descriptor??
[  909.638358][T14176] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  909.772975][T16623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.781838][T16623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.994088][T14158] usb 4-1: Using ep0 maxpacket: 32
[  910.246223][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  910.255255][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  910.425901][T16624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  910.436980][T16624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  910.494278][T14176] gspca_stk1135: reg_w 0x3 err -110
[  910.500695][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.507130][T14176] gspca_stk1135: Sensor write failed
[  910.512631][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.519106][T14176] gspca_stk1135: Sensor write failed
[  910.524482][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.530844][T14176] gspca_stk1135: Sensor read failed
[  910.536164][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.542552][T14176] gspca_stk1135: Sensor read failed
[  910.548029][T14176] gspca_stk1135: Detected sensor type unknown (0x0)
[  910.554733][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.561080][T14176] gspca_stk1135: Sensor read failed
[  910.568356][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.576263][T14176] gspca_stk1135: Sensor read failed
[  910.581940][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.589178][T14176] gspca_stk1135: Sensor write failed
[  910.596638][T14176] gspca_stk1135: serial bus timeout: status=0x00
[  910.603267][T14176] gspca_stk1135: Sensor write failed
[  910.610271][T14176] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110
[  910.680357][T14158] usb 4-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config
[  910.690570][T14158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  910.699486][T14158] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  910.710199][T14158] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  910.723147][T14158] usb 4-1: config 0 interface 0 has no altsetting 0
[  911.108922][T14158] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  911.118044][T14158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  911.126065][T14158] usb 4-1: SerialNumber: syz
[  911.148251][T14158] usb 4-1: config 0 descriptor??
[  911.184684][T16626] netlink: 'syz.4.2908': attribute type 1 has an invalid length.
[  911.357511][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'.
[  911.359792][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'.
[  911.654593][T14158] usb-storage 4-1:0.0: USB Mass Storage device detected
[  911.682452][T14158] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  911.693865][T16644] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2914'.
[  911.703131][T16644] 8021q: VLANs not supported on sit0
[  911.934714][T14158] usb 4-1: USB disconnect, device number 44
[  911.953798][T14176] usb 3-1: USB disconnect, device number 74
[  912.254635][T14167] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  912.524772][T14167] usb 5-1: Using ep0 maxpacket: 32
[  912.533421][T14167] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  912.547844][T14167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  912.559378][T14167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  912.569818][T14167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  912.581526][T14167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  912.595154][T14176] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  912.607278][T14167] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  912.618299][T14167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.627230][T14167] usb 5-1: Product: syz
[  912.632086][T14167] usb 5-1: Manufacturer: syz
[  912.637382][T14167] usb 5-1: SerialNumber: syz
[  912.646371][T14167] usb 5-1: config 0 descriptor??
[  912.704765][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  912.717855][T16674] vim2m vim2m.0: vidioc_s_fmt queue busy
[  912.864034][T14176] usb 3-1: Using ep0 maxpacket: 32
[  912.889881][T14176] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  912.908647][T14176] usb 3-1: config 2 has no interface number 0
[  912.915470][T14176] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  912.927110][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  912.950467][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.965998][T14176] usb 3-1: config 2 interface 88 has no altsetting 0
[  912.974125][   T10] usb 4-1: Using ep0 maxpacket: 8
[  913.006191][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.023248][T14176] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  913.050574][T14176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  913.063927][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  913.100884][T14176] usb 3-1: Product: syz
[  913.107494][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  913.122325][T14176] usb 3-1: Manufacturer: syz
[  913.130743][T14176] usb 3-1: SerialNumber: syz
[  913.162713][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  913.172849][T16660] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  913.226954][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.247626][   T10] usb 4-1: config 0 descriptor??
[  913.327598][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.348000][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.378107][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.399418][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.436685][T16660] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  913.588290][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  913.607439][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  913.653961][   T10] usb 4-1: USB disconnect, device number 45
[  914.034527][T14167] iforce 5-1:0.0: usb_submit_urb failed: -110
[  914.040858][T16686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  914.051933][T16686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  914.062941][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.091665][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.104360][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.116734][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.123458][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.130053][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.136561][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.143032][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.151126][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.160879][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.167761][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.174717][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.181244][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.195775][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.202237][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.209369][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.216287][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.222834][T14167] iforce 5-1:0.0: usb_submit_urb failed: -32
[  914.229560][T14167] input input70: Timeout waiting for response from device.
[  914.364906][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'.
[  914.706235][T16705] x_tables: duplicate underflow at hook 2
[  914.723287][   T30] audit: type=1326 audit(1781176262.403:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5d9ce59 code=0x7ffc0000
[  914.795319][   T30] audit: type=1326 audit(1781176262.403:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f94e5d9ce59 code=0x7ffc0000
[  914.819663][   T30] audit: type=1326 audit(1781176262.403:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5d9ce59 code=0x7ffc0000
[  914.844042][   T30] audit: type=1326 audit(1781176262.403:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5d9ce59 code=0x7ffc0000
[  914.893887][T14176] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  914.897351][   T30] audit: type=1326 audit(1781176262.403:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94e5d5d68e code=0x7ffc0000
[  914.923207][T14176] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  914.931159][   T30] audit: type=1326 audit(1781176262.403:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5d9caeb code=0x7ffc0000
[  914.959962][ T4986] usb 2-1: reset high-speed USB device number 78 using dummy_hcd
[  914.978580][T14176] asix 3-1:2.88: probe with driver asix failed with error -71
[  915.000108][   T30] audit: type=1326 audit(1781176262.403:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5d9caeb code=0x7ffc0000
[  915.024449][   T30] audit: type=1326 audit(1781176262.403:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5d9caeb code=0x7ffc0000
[  915.057334][ T4986] usb 2-1: device reset changed ep0 maxpacket size!
[  915.066568][T14176] usb 3-1: USB disconnect, device number 75
[  915.077470][T14158] usb 5-1: USB disconnect, device number 71
[  915.145447][   T30] audit: type=1326 audit(1781176262.403:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5d9caeb code=0x7ffc0000
[  915.174248][   T30] audit: type=1326 audit(1781176262.453:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.1.2933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5d9caeb code=0x7ffc0000
[  915.199634][T14165] usb 2-1: USB disconnect, device number 78
[  915.387981][T14165] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  915.508134][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'.
[  915.588259][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'.
[  915.664162][T14165] usb 2-1: Using ep0 maxpacket: 8
[  915.672113][T14165] usb 2-1: unable to get BOS descriptor or descriptor too short
[  915.681664][T14165] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[  915.693428][T14165] usb 2-1: language id specifier not provided by device, defaulting to English
[  915.708771][T14165] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  915.718154][T14165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.726272][T14165] usb 2-1: Product:  
[  915.730492][T14165] usb 2-1: SerialNumber: syz
[  915.743713][T16710] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22
[  915.905013][T14176] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  915.960463][T14158] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  915.978638][T14165] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  916.021052][T14165] usb 2-1: USB disconnect, device number 79
[  916.076639][T12317] udevd[12317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  916.126191][T14167] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  916.176659][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  916.190216][T14176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  916.200380][T14176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  916.213444][T14176] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  916.222609][T14176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.233027][T14176] usb 4-1: config 0 descriptor??
[  916.393918][T14167] usb 3-1: Using ep0 maxpacket: 8
[  916.405591][T14167] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  916.414998][T14167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.423045][T14167] usb 3-1: Product: syz
[  916.427476][T14167] usb 3-1: Manufacturer: syz
[  916.432144][T14167] usb 3-1: SerialNumber: syz
[  916.439539][T14167] usb 3-1: config 0 descriptor??
[  916.450189][T14167] cdc_ether 3-1:0.0: bad CDC descriptors
[  916.457422][T14167] usb 3-1: unsupported MDLM descriptors
[  916.622641][T14158] usb 5-1: Using ep0 maxpacket: 8
[  916.656514][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656556][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656585][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656613][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656642][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656669][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656698][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656726][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656754][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.656780][T14176] macally 0003:060B:0001.0035: unknown main item tag 0x0
[  916.669619][T14176] macally 0003:060B:0001.0035: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0
[  916.875775][T14176] usb 3-1: USB disconnect, device number 76
[  917.072800][  T996] usb 4-1: USB disconnect, device number 46
[  917.875751][T14176] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  918.137249][T14176] usb 3-1: config index 0 descriptor too short (expected 114, got 89)
[  918.148197][T14176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  918.158613][T14158] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  918.167696][T14158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.171398][T14176] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  918.175700][T14158] usb 5-1: Product: syz
[  918.175720][T14158] usb 5-1: Manufacturer: syz
[  918.175737][T14158] usb 5-1: SerialNumber: syz
[  918.185283][T14158] usb 5-1: config 0 descriptor??
[  918.213975][T14176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.227283][T14176] usb 3-1: config 0 descriptor??
[  918.253279][T14176] rndis_host 3-1:0.0: rndis: master #0/ffff888085f07000 slave #1/0000000000000000
[  918.383791][T14158] usb 5-1: can't set config #0, error -71
[  918.391434][T14158] usb 5-1: USB disconnect, device number 72
[  918.478168][T16755] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  918.508956][T14176] usb 3-1: USB disconnect, device number 77
[  918.670049][T16762] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2950' sets config #0
[  919.244619][T16770] pimreg: entered allmulticast mode
[  919.298373][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'.
[  919.342965][T16773] : entered promiscuous mode
[  919.476064][T16780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2955'.
[  919.697453][T16786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  919.720844][T16786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  919.822789][T14158] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  919.933003][T14179] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  920.080176][T16791] loop5: detected capacity change from 0 to 7
[  920.087201][T16791] Dev loop5: unable to read RDB block 7
[  920.092828][T16791]  loop5: unable to read partition table
[  920.098625][T16791] loop5: partition table beyond EOD, truncated
[  920.104819][T16791] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  920.418034][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.443273][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.470624][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  920.470642][   T30] audit: type=1326 audit(1781176268.163:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.2961" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b33d9ce59 code=0x0
[  920.552237][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'.
[  920.561936][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2963'.
[  920.580682][T14179] usb 3-1: Using ep0 maxpacket: 16
[  920.904392][  T996] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  921.079411][T16810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2965'.
[  921.123541][T14158] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  921.132666][T14158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.144547][T14158] usb 4-1: config 0 descriptor??
[  921.235836][T14179] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  921.243997][T14179] usb 3-1: config 0 has no interface number 0
[  921.250148][T14179] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  921.260222][T14179] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  921.345722][T14158] cp210x 4-1:0.0: cp210x converter detected
[  921.988968][T14158] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  921.996804][T14158] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  922.007667][T14158] usb 4-1: cp210x converter now attached to ttyUSB0
[  922.024897][T14158] usb 4-1: USB disconnect, device number 47
[  922.037151][T14158] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  922.045503][T14158] cp210x 4-1:0.0: device disconnected
[  922.100177][T14179] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  922.109285][T14179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.117316][T14179] usb 3-1: Product: syz
[  922.121514][T14179] usb 3-1: Manufacturer: syz
[  922.126127][T14179] usb 3-1: SerialNumber: syz
[  922.135044][T14179] usb 3-1: config 0 descriptor??
[  922.207503][T16782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  922.208782][  T996] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  922.222777][  T996] usb 5-1: config 0 has no interface number 0
[  922.224288][T16782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  922.228962][  T996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.247940][  T996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  922.257766][  T996] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  922.266925][  T996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.278044][  T996] usb 5-1: config 0 descriptor??
[  922.522635][T16782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  922.530164][T16782] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  922.693022][T16822] loop5: detected capacity change from 0 to 7
[  922.701851][T16822] Dev loop5: unable to read RDB block 7
[  922.708447][T16822]  loop5: unable to read partition table
[  922.714978][T16822] loop5: partition table beyond EOD, truncated
[  922.721175][T16822] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  922.880350][  T996] prodikeys 0003:041E:2801.0036: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1
[  922.893614][  T996] hid_prodikeys: hid-prodikeys: failed to find output report
[  922.893614][  T996] 
[  923.106424][T14176] usb 5-1: USB disconnect, device number 73
[  923.256328][T14167] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  923.524754][T14167] usb 4-1: Using ep0 maxpacket: 32
[  923.539988][T14167] usb 4-1: config 4 has an invalid interface number: 8 but max is 0
[  923.581383][T14167] usb 4-1: config 4 has no interface number 0
[  923.601390][T14167] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  923.633207][T14167] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  923.687822][T14167] usb 4-1: config 4 interface 8 has no altsetting 0
[  923.738347][T14167] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  923.769099][T14167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.787412][T14167] usb 4-1: Product: syz
[  923.794477][T14167] usb 4-1: Manufacturer: syz
[  923.802623][T14167] usb 4-1: SerialNumber: syz
[  924.117948][T14167] opticon 4-1:4.8: opticon converter detected
[  924.141178][T14167] usb 4-1: opticon converter now attached to ttyUSB0
[  924.153540][T14167] usb 4-1: USB disconnect, device number 48
[  924.168204][T14167] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  924.178637][T14167] opticon 4-1:4.8: device disconnected
[  924.326306][T14179] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  924.336510][T14179] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  924.359592][T14179] asix 3-1:0.34: probe with driver asix failed with error -71
[  924.403208][T14179] usb 3-1: USB disconnect, device number 78
[  924.491164][T12421] udevd[12421]: setting owner of /dev/bus/usb/003/078 to uid=0, gid=0 failed: No such file or directory
[  924.589826][T14176] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  924.854241][T14176] usb 5-1: Using ep0 maxpacket: 32
[  924.912575][T14176] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  924.928157][T14176] usb 5-1: config 0 has no interface number 0
[  924.996176][T14176] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  925.038786][T14176] usb 5-1: config 0 interface 89 has no altsetting 0
[  925.057061][T16865] netlink: 'syz.3.2983': attribute type 1 has an invalid length.
[  925.130958][T14176] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  925.187999][T14176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.196612][T14176] usb 5-1: Product: syz
[  925.200919][T14176] usb 5-1: Manufacturer: syz
[  925.205596][T14176] usb 5-1: SerialNumber: syz
[  925.241243][T14176] usb 5-1: config 0 descriptor??
[  925.279457][T14176] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  925.342502][T16865] 8021q: adding VLAN 0 to HW filter on device bond5
[  925.350411][T14176] em28xx 5-1:0.89: Video interface 89 found: isoc
[  925.438188][T16873] bond5: (slave geneve3): making interface the new active one
[  925.531257][T16873] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  925.862148][T15245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.873173][T15245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.881939][T15245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.890688][T15245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.577941][T14176] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  926.734443][T14176] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  926.742766][T14179] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  926.826323][T14176] em28xx 5-1:0.89: board has no eeprom
[  926.904414][T14176] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  926.913116][T14176] em28xx 5-1:0.89: analog set to isoc mode.
[  926.935574][T14167] em28xx 5-1:0.89: Registering V4L2 extension
[  926.974737][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2990'.
[  926.983862][T16896] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  927.129203][T14178] usb 5-1: USB disconnect, device number 74
[  927.135217][T14167] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  927.139369][T14178] em28xx 5-1:0.89: Disconnecting em28xx
[  927.219247][T14167] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  927.247942][T14167] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  927.277861][T14167] em28xx 5-1:0.89: No AC97 audio processor
[  927.479838][T14167] usb 5-1: Decoder not found
[  927.508375][T14167] em28xx 5-1:0.89: failed to create media graph
[  927.549452][T14167] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  927.719339][T16901] ==================================================================
[  927.724124][T14167] em28xx 5-1:0.89: Registering snapshot button...
[  927.727574][T16901] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0
[  927.727614][T16901] Read of size 4 at addr ffff888058840860 by task v4l_id/16901
[  927.727630][T16901] 
[  927.727645][T16901] CPU: 1 UID: 0 PID: 16901 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  927.727692][T16901] Tainted: [L]=SOFTLOCKUP
[  927.727721][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  927.727769][T16901] Call Trace:
[  927.727796][T16901]  <TASK>
[  927.727823][T16901]  dump_stack_lvl+0xe8/0x150
[  927.727885][T16901]  print_address_description+0x55/0x1e0
[  927.727932][T16901]  ? v4l2_open+0x395/0x3a0
[  927.728009][T16901]  print_report+0x58/0x70
[  927.728052][T16901]  kasan_report+0x117/0x150
[  927.728111][T16901]  ? v4l2_open+0x395/0x3a0
[  927.728193][T16901]  v4l2_open+0x395/0x3a0
[  927.728273][T16901]  chrdev_open+0x4cd/0x5e0
[  927.728334][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  927.728395][T16901]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  927.728486][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  927.728534][T16901]  do_dentry_open+0x822/0x13a0
[  927.728604][T16901]  vfs_open+0x3b/0x340
[  927.728655][T16901]  ? path_openat+0x2df0/0x3860
[  927.728736][T16901]  path_openat+0x2e08/0x3860
[  927.728829][T16901]  ? __pfx_stack_trace_save+0x10/0x10
[  927.728904][T16901]  ? stack_depot_save_flags+0x33/0x810
[  927.728975][T16901]  ? __pfx_path_openat+0x10/0x10
[  927.729044][T16901]  ? __x64_sys_openat+0x138/0x170
[  927.729105][T16901]  ? __lock_acquire+0x6b5/0x2cf0
[  927.729203][T16901]  do_file_open+0x23e/0x4a0
[  927.729295][T16901]  ? __pfx_do_file_open+0x10/0x10
[  927.729394][T16901]  ? _raw_spin_unlock+0x28/0x50
[  927.729462][T16901]  ? alloc_fd+0x64b/0x6c0
[  927.729532][T16901]  do_sys_openat2+0x113/0x200
[  927.729609][T16901]  ? __pfx_do_sys_openat2+0x10/0x10
[  927.729681][T16901]  ? exc_page_fault+0x6a/0xc0
[  927.729742][T16901]  ? do_user_addr_fault+0xc6f/0x1340
[  927.729803][T16901]  __x64_sys_openat+0x138/0x170
[  927.729876][T16901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.729928][T16901]  do_syscall_64+0x174/0x580
[  927.729988][T16901]  ? trace_irq_disable+0x3b/0x140
[  927.730054][T16901]  ? clear_bhb_loop+0x40/0x90
[  927.730114][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.730173][T16901] RIP: 0033:0x7fa5985d7407
[  927.730223][T16901] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  927.730266][T16901] RSP: 002b:00007ffdb71b8d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  927.730334][T16901] RAX: ffffffffffffffda RBX: 00007fa59854b880 RCX: 00007fa5985d7407
[  927.730376][T16901] RDX: 0000000000000000 RSI: 00007ffdb71baf1c RDI: ffffffffffffff9c
[  927.730415][T16901] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  927.730453][T16901] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  927.730485][T16901] R13: 00007ffdb71b8f50 R14: 00007fa598830000 R15: 0000561817c814d8
[  927.730567][T16901]  </TASK>
[  927.730595][T16901] 
[  928.025996][T16901] Allocated by task 14167:
[  928.030419][T16901]  kasan_save_track+0x3e/0x80
[  928.035124][T16901]  __kasan_kmalloc+0x93/0xb0
[  928.039741][T16901]  __kmalloc_cache_noprof+0x31c/0x660
[  928.045135][T16901]  em28xx_v4l2_init+0x10b/0x2eb0
[  928.050093][T16901]  em28xx_init_extension+0x120/0x1c0
[  928.055506][T16901]  process_scheduled_works+0xb5d/0x1860
[  928.061084][T16901]  worker_thread+0xa53/0xfc0
[  928.065700][T16901]  kthread+0x389/0x470
[  928.069796][T16901]  ret_from_fork+0x514/0xb70
[  928.074418][T16901]  ret_from_fork_asm+0x1a/0x30
[  928.079211][T16901] 
[  928.081578][T16901] Freed by task 14167:
[  928.085669][T16901]  kasan_save_track+0x3e/0x80
[  928.090384][T16901]  kasan_save_free_info+0x46/0x50
[  928.095466][T16901]  __kasan_slab_free+0x5c/0x80
[  928.100257][T16901]  kfree+0x1c5/0x640
[  928.104184][T16901]  em28xx_v4l2_init+0x1685/0x2eb0
[  928.109219][T16901]  em28xx_init_extension+0x120/0x1c0
[  928.114549][T16901]  process_scheduled_works+0xb5d/0x1860
[  928.120113][T16901]  worker_thread+0xa53/0xfc0
[  928.124720][T16901]  kthread+0x389/0x470
[  928.128803][T16901]  ret_from_fork+0x514/0xb70
[  928.133410][T16901]  ret_from_fork_asm+0x1a/0x30
[  928.138209][T16901] 
[  928.140549][T16901] The buggy address belongs to the object at ffff888058840000
[  928.140549][T16901]  which belongs to the cache kmalloc-8k of size 8192
[  928.154609][T16901] The buggy address is located 2144 bytes inside of
[  928.154609][T16901]  freed 8192-byte region [ffff888058840000, ffff888058842000)
[  928.168589][T16901] 
[  928.170925][T16901] The buggy address belongs to the physical page:
[  928.177367][T16901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58840
[  928.186143][T16901] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  928.194656][T16901] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  928.202213][T16901] page_type: f5(slab)
[  928.206206][T16901] raw: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122
[  928.214802][T16901] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  928.223396][T16901] head: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122
[  928.232078][T16901] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  928.240760][T16901] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  928.249441][T16901] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  928.258137][T16901] page dumped because: kasan: bad access detected
[  928.264594][T16901] page_owner tracks the page as allocated
[  928.270317][T16901] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7695, tgid 7692 (syz.2.566), ts 281780091276, free_ts 281746040998
[  928.291604][T16901]  post_alloc_hook+0x22d/0x280
[  928.296392][T16901]  get_page_from_freelist+0x2593/0x2610
[  928.301956][T16901]  __alloc_frozen_pages_noprof+0x18d/0x380
[  928.307803][T16901]  allocate_slab+0x77/0x660
[  928.312469][T16901]  refill_objects+0x339/0x3d0
[  928.317270][T16901]  __pcs_replace_empty_main+0x321/0x720
[  928.322840][T16901]  __kmalloc_cache_noprof+0x392/0x660
[  928.328229][T16901]  landlock_init_hierarchy_log+0x9e/0x5f0
[  928.333969][T16901]  landlock_merge_ruleset+0x666/0x900
[  928.339385][T16901]  __se_sys_landlock_restrict_self+0x2b1/0x810
[  928.345561][T16901]  do_syscall_64+0x174/0x580
[  928.350178][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.356088][T16901] page last free pid 6794 tgid 6794 stack trace:
[  928.362426][T16901]  __free_frozen_pages+0xc1c/0xd30
[  928.367591][T16901]  __slab_free+0x274/0x2c0
[  928.372022][T16901]  qlist_free_all+0x99/0x100
[  928.376626][T16901]  kasan_quarantine_reduce+0x148/0x160
[  928.382104][T16901]  __kasan_slab_alloc+0x22/0x80
[  928.386976][T16901]  __kmalloc_noprof+0x316/0x760
[  928.391932][T16901]  tomoyo_realpath_from_path+0xe3/0x5d0
[  928.397481][T16901]  tomoyo_path_number_perm+0x246/0x630
[  928.402953][T16901]  security_path_chown+0x139/0x340
[  928.408073][T16901]  chown_common+0x40c/0x6b0
[  928.412598][T16901]  do_fchownat+0x14c/0x250
[  928.417028][T16901]  __x64_sys_chown+0x82/0xa0
[  928.421658][T16901]  do_syscall_64+0x174/0x580
[  928.426263][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.432165][T16901] 
[  928.434499][T16901] Memory state around the buggy address:
[  928.440135][T16901]  ffff888058840700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  928.448200][T16901]  ffff888058840780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  928.456268][T16901] >ffff888058840800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  928.464331][T16901]                                                        ^
[  928.471540][T16901]  ffff888058840880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  928.479615][T16901]  ffff888058840900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  928.487687][T16901] ==================================================================
[  928.525375][T14167] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input71
[  928.646274][T16901] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  928.653546][T16901] CPU: 1 UID: 0 PID: 16901 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  928.664176][T16901] Tainted: [L]=SOFTLOCKUP
[  928.668519][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  928.678587][T16901] Call Trace:
[  928.681883][T16901]  <TASK>
[  928.684840][T16901]  vpanic+0x56c/0xa60
[  928.688879][T16901]  ? __pfx_vpanic+0x10/0x10
[  928.693443][T16901]  ? __pfx___schedule+0x10/0x10
[  928.698338][T16901]  panic+0xc5/0xd0
[  928.702086][T16901]  ? __pfx_panic+0x10/0x10
[  928.706528][T16901]  ? preempt_schedule_thunk+0x16/0x30
[  928.711933][T16901]  ? v4l2_open+0x395/0x3a0
[  928.716372][T16901]  check_panic_on_warn+0x89/0xb0
[  928.721337][T16901]  ? v4l2_open+0x395/0x3a0
[  928.725782][T16901]  end_report+0x73/0x170
[  928.730052][T16901]  ? v4l2_open+0x395/0x3a0
[  928.734488][T16901]  kasan_report+0x128/0x150
[  928.739008][T16901]  ? v4l2_open+0x395/0x3a0
[  928.743446][T16901]  v4l2_open+0x395/0x3a0
[  928.747710][T16901]  chrdev_open+0x4cd/0x5e0
[  928.752155][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  928.757124][T16901]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  928.763480][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  928.768434][T16901]  do_dentry_open+0x822/0x13a0
[  928.773222][T16901]  vfs_open+0x3b/0x340
[  928.777308][T16901]  ? path_openat+0x2df0/0x3860
[  928.782101][T16901]  path_openat+0x2e08/0x3860
[  928.786718][T16901]  ? __pfx_stack_trace_save+0x10/0x10
[  928.792121][T16901]  ? stack_depot_save_flags+0x33/0x810
[  928.797596][T16901]  ? __pfx_path_openat+0x10/0x10
[  928.802554][T16901]  ? __x64_sys_openat+0x138/0x170
[  928.807599][T16901]  ? __lock_acquire+0x6b5/0x2cf0
[  928.812561][T16901]  do_file_open+0x23e/0x4a0
[  928.817091][T16901]  ? __pfx_do_file_open+0x10/0x10
[  928.822235][T16901]  ? _raw_spin_unlock+0x28/0x50
[  928.827109][T16901]  ? alloc_fd+0x64b/0x6c0
[  928.831457][T16901]  do_sys_openat2+0x113/0x200
[  928.836157][T16901]  ? __pfx_do_sys_openat2+0x10/0x10
[  928.841376][T16901]  ? exc_page_fault+0x6a/0xc0
[  928.846073][T16901]  ? do_user_addr_fault+0xc6f/0x1340
[  928.851382][T16901]  __x64_sys_openat+0x138/0x170
[  928.856253][T16901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.862332][T16901]  do_syscall_64+0x174/0x580
[  928.866947][T16901]  ? trace_irq_disable+0x3b/0x140
[  928.871991][T16901]  ? clear_bhb_loop+0x40/0x90
[  928.876695][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.882625][T16901] RIP: 0033:0x7fa5985d7407
[  928.887074][T16901] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  928.906707][T16901] RSP: 002b:00007ffdb71b8d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  928.915163][T16901] RAX: ffffffffffffffda RBX: 00007fa59854b880 RCX: 00007fa5985d7407
[  928.923161][T16901] RDX: 0000000000000000 RSI: 00007ffdb71baf1c RDI: ffffffffffffff9c
[  928.931157][T16901] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  928.939145][T16901] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  928.947142][T16901] R13: 00007ffdb71b8f50 R14: 00007fa598830000 R15: 0000561817c814d8
[  928.955150][T16901]  </TASK>
[  928.958781][T16901] Kernel Offset: disabled
[  928.963132][T16901] Rebooting in 86400 seconds..