last executing test programs:

9.070395869s ago: executing program 4 (id=6970):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f00000002c0)=0x1074)

8.927271725s ago: executing program 4 (id=6971):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x438, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x9, 0xffffffff, 0x3, 0x4, 0x9, 0xfffffffc, 0xff, 0xffff, 0x4, 0x1ff, 0xc3c, 0x4, 0xffff, 0x5, 0x6, 0x2, 0x5, 0xf, 0xf, 0xe4aa, 0xfffffffb, 0x2, 0x8, 0x7, 0x80000000, 0x0, 0xb4, 0x9, 0x55b, 0x8, 0x1, 0x0, 0x800, 0x3, 0x4, 0xfffffff8, 0x77f, 0x8000, 0x5, 0xa892, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x1, 0xc048fab, 0x6, 0x401, 0x0, 0x80000000, 0xcd3f, 0xc, 0x4fe6, 0x7, 0x0, 0xf, 0x6, 0x1, 0x4, 0x7fff, 0x94, 0x1, 0xffa8, 0xfaa, 0x400, 0xfffffff9, 0x22b5f307, 0x4, 0x3, 0x59, 0x9, 0x1, 0x8, 0x2, 0x4, 0x4, 0x1, 0x3, 0xfffffffd, 0x5, 0x68, 0x5, 0x2, 0x8, 0xd2, 0xfffffffb, 0x0, 0x95ef, 0x9, 0x6, 0xfffffffa, 0x80000001, 0x1c00000, 0x68f, 0x3, 0x6, 0xe1a7, 0xcf26, 0xbb0, 0x9, 0x7, 0x1000, 0x6442, 0x3, 0x10000, 0x80000000, 0x4, 0x6, 0x1, 0x3, 0x7, 0x5, 0x8000, 0x8, 0xd0, 0x7, 0x9, 0xab, 0x8, 0xc, 0x9, 0xd, 0x6, 0x3, 0xc, 0x1, 0x9, 0xd, 0x4, 0x4, 0x100, 0x2, 0x5, 0x2cf, 0x2, 0x1d, 0xcb, 0x4, 0x6, 0x4, 0x9, 0x1, 0xa2, 0x0, 0x8, 0xc, 0x7, 0xee, 0x2, 0x80, 0x5, 0x1, 0xffff8b74, 0x8001, 0x10, 0x7e5d, 0xfffffffc, 0x0, 0x4, 0x80, 0x8, 0x7, 0x7, 0x4f5ce71f, 0x64a, 0xd5, 0x7f, 0xed, 0x7ff, 0x0, 0x5, 0x9000000, 0x9, 0x781f1cfe, 0x4, 0x6b4a, 0x1, 0xd23, 0x0, 0x12e, 0x10, 0x9, 0x5a3, 0x600, 0x3, 0x6, 0x5, 0x8, 0x0, 0x2, 0x3, 0xfff, 0xfff, 0xf, 0x3f190c17, 0x4000, 0x7, 0x3ff, 0x4, 0x4, 0x3, 0x8, 0x2, 0x6, 0xf, 0x40000, 0x413, 0x0, 0x8, 0x1, 0x44c, 0x400, 0x7f, 0x3, 0x0, 0xa9b, 0x1, 0x5, 0xfffffbff, 0x4, 0x4, 0xe, 0x7, 0x7, 0xa, 0x31, 0x80, 0x8, 0x8, 0x5, 0x0, 0x10, 0x0, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x5, 0x8, 0xdf0d, 0x0, 0x10ec, 0x7, 0x6, 0x9, 0x0, 0x7fffffff, 0x6, 0x7, 0x1431, 0xcddb]}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008401050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe800000000000000000000000000000010000000000000000080000000800000000000000000000000000000000000000000001000000003200000000"], 0x23c}}, 0x0)

8.84330729s ago: executing program 4 (id=6973):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0xb, 0xc, "6ca50f25b1fe461b46d40b3e"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)={0x0, 0x17, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.932855369s ago: executing program 3 (id=6982):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000010202"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', <r6=>0x0, 0x4, 0x2, 0x5, 0x6093, 0x1d, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, 0x8000, 0x8, 0x5, 0x4}})
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x5, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa21a, 0x1, 0x8}, {0x100400, 0x5, 0x6365, 0x4, 0x2, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r10=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r13}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000810}, 0x801)
r15 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r15, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000040)="5ee2873a2f94e1263fcf49b699f59f93f9634642de4103a2ff155c0dd5f62e8bd878572757bbecb1fdcf1cb5926dfb910fd57e07f7bbe607", 0x38}], 0x2}, 0x24040849)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.726679344s ago: executing program 3 (id=6994):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f0000001700)=""/163, 0xa3}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000003180)=""/246, 0xf6}], 0x9}, 0x81}], 0x4, 0x40012032, 0x0)

5.621533588s ago: executing program 3 (id=6996):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2014f8fae22899e, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x400, 0x200200)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x0, 0xa, 0x6, 0x0, "42456168d9daee7d1f84d2c86c422a7d0c47030ef54b45468532cd735d4909eb845dc0f017bda7622d008af72b1eec09a8794dbe8a71655f89fb63d1fce8e0fb", "82286f788d2a30978c3b215c021060f5f2b01853f303340b5d9762b4aa5b29e4", [0x100, 0xfdff]})

5.526933105s ago: executing program 4 (id=6997):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4)
sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r3 = userfaultfd(0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000200)=0x7)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20008080)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902", @ANYRESDEC=0x0], 0x0)
r5 = getpid()
kcmp(r5, r5, 0x19a778fad9df666b, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

5.470999636s ago: executing program 1 (id=6998):
unshare(0x2040400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @local, <r1=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1e, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4e21, 0x4e11, @local, 0x5}}}, 0x108)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002a80)={0x1c, &(0x7f0000002540)=ANY=[], 0x0, 0x0})

4.196834226s ago: executing program 0 (id=7000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40810}, 0x40)
syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.942895534s ago: executing program 0 (id=7001):
epoll_create1(0x0)
r0 = socket(0x15, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x40, 0x0, 0xf5, 0xfffffff7, 0x17, "83b0dd81a633403f7454af765b1dd555ea6b5f"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x5, 0x9c, '\x00', 0x1bd})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0xfffffff9})
getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x200, 0x40)
getdents64(r5, 0x0, 0x0)
write$UHID_INPUT(r5, &(0x7f0000002840)={0x8, {"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", 0x1000}}, 0x1006)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00000000000000bd00000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r6)
mq_open(&(0x7f0000000000)='(/\x00', 0x40, 0x7a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3.293568633s ago: executing program 2 (id=7003):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r2 = userfaultfd(0x80001) (rerun: 64)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async)
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) (async, rerun: 64)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64)
syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="776cc98b5ea757a85a633793379b763a26d52aa7bd351820", 0x0, 0x18)
syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f00000004c0)="9266b709b6a124c788f903c38e5f6f0102c2de5d1cb867eb", 0x0, 0x18)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

3.095062606s ago: executing program 2 (id=7004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00,G', @ANYRES16=0x0, @ANYBLOB="01002dbd70000000000014000000080014006c24000005001900000000000800150081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0xfffffe6e, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4054)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa"], 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
r5 = socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x53)
lseek(r7, 0xfffffffffffffffc, 0x2)
getdents(r7, 0x0, 0x54)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r9, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)

2.990129408s ago: executing program 1 (id=7005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=ANY=[@ANYBLOB="e8000000100003042000"/20, @ANYRES32=0x0, @ANYBLOB="0003400000000000b800128009000100766c616e00000000a8000280060001000000000006000500c554000006000500810000001c0004800c00010002000000000800000c0001000600000006000000700004800c00010000000100100001000c00010005000000030000000c00010005000000080000000800010002000000018000000c000100220b0000010000000c00010004000000010000000c00010006080000020000000c00010000000000010000000c000100800000000600000000001980000001000600000008000a00", @ANYRES32=0x0, @ANYBLOB], 0xe8}, 0x1, 0xba01, 0x0, 0x44844}, 0x0)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0)

2.710154983s ago: executing program 1 (id=7006):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffe, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x3}, {0x4, 0x7fffffffffffffff}, {0x2, 0x7ff}, 0x70bd2c, 0x3505, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "2104667a00"/20}}]}, 0x150}}, 0x48080)

2.526934593s ago: executing program 1 (id=7007):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180))
r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
io_setup(0x6, &(0x7f0000001380)=<r3=>0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0))
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}])
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000, 0x0, r4})
mkdir(0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r5, 0x2)
sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
clock_gettime(0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

2.378856427s ago: executing program 0 (id=7008):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x7, [@union={0xd, 0x9, 0x0, 0x5, 0x1, 0x8, [{0x4, 0x4, 0x6}, {0x0, 0x3, 0x6}, {0x10, 0x5, 0x1}, {0x5, 0x2, 0x2}, {0x7, 0x3, 0xe1}, {0x4, 0x2, 0xc}, {0xd, 0x5, 0x6}, {0xd, 0x4, 0x6}, {0xd, 0x2, 0xffff8000}]}, @union={0x4, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x8, 0x3, 0x7}, {0xe, 0x4, 0x81}, {0x10, 0x5, 0xd6}, {0x5, 0x0, 0x7}, {0x5, 0x2, 0x7c}, {0xe, 0x4, 0x6}]}, @func={0x5, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x30, 0x42b16d73a8f3f2fd, 0x30]}}, &(0x7f00000004c0)=""/88, 0xf7, 0x58, 0x0, 0x8}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xbf, &(0x7f00000002c0)=""/191, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x28000600)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x1, 0xa}, 0x6c)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x3, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x810)
exit(0x6)
ptrace(0x10, r5)
ptrace(0x11, r5)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4)
ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x921, &(0x7f0000000280)='veth0_vlan\x00', 0x7f, 0x7, 0x6})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r7 = dup2(r6, r3)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4)

2.222000968s ago: executing program 2 (id=7009):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000030}, 0x4048040)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r2 = userfaultfd(0x801)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000003c0)="aa7742d1fd451005faed417201883804b19abd7cc919ab4713e3458f4f82db64ec27104aede175f5d48b06721925533b9ebf0c37c1274277718343222856b8498763163dacbde25510", 0x49}, {0x0}], 0x2, &(0x7f0000001d40)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x40014}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e40)}], 0x1, &(0x7f0000001f80)=[@op={0x18}], 0x18, 0x24004850}, {0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f00000020c0)="1d12171a27b07a46e14cd9a5a028bd", 0xf}, {&(0x7f0000002100)}], 0x3, 0x0, 0x0, 0x80}], 0x3, 0x10)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_genetlink_get_family_id$team(0x0, r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.067141731s ago: executing program 4 (id=7010):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="c3cc910c6ce869bb5585e46e", @ANYRES16=r2, @ANYBLOB="0502fcfffffffddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f31000000000800080000000000"], 0x3c}}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @remote}, 0x60, {0x2, 0x0, @loopback}, 'veth1_macvtap\x00'})
sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="e713c70ea54b407e7e50e85c2d19188ed21fde0c406286b99b7abe89fc5a6900e80533f5dcc53ba457a3cf75b128602676c16552962dfe9791aaf6ddad333005e85744e0d8903981a28ec9e86ef954f9b6e89038888d2c59a86cc1d2ad3306fc39be2f955082c3ba63baddac4d993e6ac659f7940e5598968cfa816855740bfab2380b3d61afed8fdedebac2929564ad68c1ed7f1f3aa4c76de0e991e75e7ee1dd1d5bc380107582d64a42dbf2a0c213b70c0600c4e8315dffdaecad46c9c28f3248773654066400e7b8b23eaa1c13343a75e5be90808c0e9a20e1dba6533f97bee532", 0xe3}, {&(0x7f00000003c0)="802401f4287d96a738d0672b6fe7be52e0556aabac2edca77606606e748bb0c285ee21ac3c3a4dcecf4b3f3b64b6d0841a48b466c2fa7baf82832cb91c3355f354e5feb928d4cb14230812a09c24c556fce89532c598a2d7d73430f2ca5d4680390f0f4252b0f4d776420773239044674d386d2fd7ae5af8008ce527ecf0786ee0a544", 0x83}], 0x2, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x60}, 0x44000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x1, 0x4, {{0x23, 0x4, 0x1, 0x9, 0x8c, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0x2b, 0xe9, [@multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @local, @rand_addr=0x64010101, @private=0xa010102, @remote, @empty]}, @end, @cipso={0x86, 0x1a, 0x2, [{0x5, 0xc, "c8d015fd92126da9fb18"}, {0x2, 0x8, "67a61f924269"}]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0xd, [{@local, 0x10}, {@rand_addr=0x64010100, 0xf641}, {@private=0xa010101, 0x1}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xfffffffb}]}]}}}}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/file0\x00', 0x14a942, 0x0)
write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000200)={0x1, 0xd})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0xa)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8c00, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0)
landlock_restrict_self(r6, 0x4)
r8 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0)
r9 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x40, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0)

2.059632206s ago: executing program 3 (id=7011):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x80000000)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000900)=ANY=[@ANYBLOB="4adb5748d8938a7f456b74dae16c7a58c3d9e4b203833194b7ee9237bc89cd278b8d1952b9c55baac70abbead64dad1e326835c1445e3a41c61d77d9075937e82a215b22ca8742554012d6780493745acfa4836d9fceeb48e0c6fef8589b1635b61fb54e7d831c1227d2092221e6c1b63393a416a77d35ff8c0ec9b858490dd0bc120366647d3c241b9349faaae262e54edc2f39ceea3893574cece121c818d2730af7fcfb6dfb04a5a3ae85cb47bbbc3888f0f40d5827b2985725"], 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "bbf2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x4e}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}})
sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="2800020100000000fe8000000000000000000000000000bb1800000000000000290000003600"/64], 0x40}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x1})
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
bind$can_raw(r5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB='\a', @ANYRESHEX=0x0], 0x0)

1.662962053s ago: executing program 2 (id=7012):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_LSEEK(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0xfff}}, 0x18)
r3 = syz_open_dev$cec(&(0x7f00000020c0), 0x0, 0x262140)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000002100), &(0x7f0000002140)={0x0, 0xfb, 0x70, 0x5, 0x0, "e4283b9ddebbaa3451b43edb649dfec8", "20be7f2834341f94625e1a45d6c483e0508bc2f7c1758a2e13b4f170ca0906b4e3e6450b4f494815fc29afe64afcd5db2f75b46a3b7b94839358e1ab459a1858629f1c8c8fad5aa688faba8560b425581e139b2848a7ee61b8abeb"}, 0x70, 0x2)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000021c0), 0x64600, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000002200)=0x4a1f4a47, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002300)={'gre0\x00', &(0x7f0000002240)={'gretap0\x00', <r5=>0x0, 0x10, 0x7800, 0x2850, 0x1, {{0x19, 0x4, 0x0, 0x9, 0x64, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x28, 0x19, 0x0, 0xc, [0x1, 0x72, 0x9, 0x8, 0x4, 0x800, 0x84a, 0x400, 0xffff]}, @end, @timestamp_prespec={0x44, 0x24, 0x24, 0x3, 0xd, [{@empty, 0xe}, {@remote, 0x9}, {@rand_addr=0x7, 0xe40}, {@loopback, 0x5}]}, @noop]}}}}})
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000002340)=r5)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000002380)={<r6=>0x0, 0x40}, &(0x7f00000023c0)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000002400)={r6, 0x800, 0x2, [0x1, 0x2]}, &(0x7f0000002440)=0xc)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000002480)=[r4, r3], 0x2)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
write$FUSE_ENTRY(r7, &(0x7f00000025c0)={0x90, 0xffffffffffffffda, r1, {0x2, 0x1, 0x1000, 0x8, 0x8, 0x4, {0x3, 0x8000, 0xc2f, 0x7ff, 0xc16c, 0x6, 0x8, 0xfffffffe, 0x9, 0x8000, 0x7, r8, r2, 0x4, 0xfffffffb}}}, 0x90)
io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000002680)={0x1, 0x1}, 0x1)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000026c0)={0x800, 0x9, 0x2, 0x4}, 0x8)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000002700)={{0x109, 0x7fffffff}}, 0x10)
preadv(r0, &(0x7f0000003b00)=[{&(0x7f0000002740)=""/220, 0xdc}, {&(0x7f0000002840)=""/137, 0x89}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/106, 0x6a}, {&(0x7f0000003980)=""/239, 0xef}, {&(0x7f0000003a80)=""/89, 0x59}], 0x6, 0xea, 0xc)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000003b80))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003c80)={'sit0\x00', &(0x7f0000003c00)={'sit0\x00', <r10=>r5, 0x40, 0x20, 0x200, 0xf6a, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x65, 0x0, 0xfc, 0x0, 0x0, @broadcast, @private=0xa010102, {[@generic={0x83, 0x6, "ac44ae25"}, @end, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x2, [{@broadcast, 0xfffffff0}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xffffffff}, {@remote, 0x5}]}, @noop]}}}}})
sendmsg$nl_route(r4, &(0x7f0000003e00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003cc0)=@mpls_delroute={0xd8, 0x19, 0x0, 0x70bd27, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x5, 0xfe, 0x3, 0xfd, 0x3, 0x200}, [@RTA_VIA={0x14, 0x12, {0x9, "e9cf3c69acd767f64fd677e15dbd"}}, @RTA_VIA={0x14, 0x12, {0x1e, "713fc8fc5d636f123d429b79a20d"}}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0xffff3}, {0x2, 0x0, 0x1}, {0x9}, {0x7}, {0x81, 0x0, 0x1}, {}, {0x1}, {0x1}, {0x9}, {0x8000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7}, {0xbcb0}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {}, {0x1ff}, {0x10, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xe}, {0x46c, 0x0, 0x1}, {0x7}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xd6f33}, {0x3, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r10}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x48003)
syz_open_dev$dri(&(0x7f0000003e40), 0x401, 0x80)
syz_create_resource$binfmt(&(0x7f0000003e80)='./file0/file0\x00')
ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000003ec0))
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000004000)={r4}, 0x8)
splice(r11, &(0x7f0000004040)=0xc000000000000000, r3, &(0x7f0000004080)=0x31920e8d, 0x6, 0x2)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000004100), r11)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x34, r12, 0x200, 0x70bd2c, 0xfffffff7, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x40040)

1.56071778s ago: executing program 2 (id=7013):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180))
fanotify_init(0x4000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r5, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10)
bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x1cc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)

1.341975165s ago: executing program 0 (id=7014):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140b, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', <r5=>0x0, 0x8000, 0x7800, 0xc, 0x2a, {{0x28, 0x4, 0x0, 0xb, 0xa0, 0x65, 0x5, 0x0, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0x74, [@rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}]}, @ssrr={0x89, 0x7, 0xfe, [@dev={0xac, 0x14, 0x14, 0x33}]}, @generic={0x87, 0x9, "b5ee5155b71580"}, @rr={0x7, 0xb, 0xaa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xe3, 0x3, 0x4, [{@remote, 0xb1b}, {@multicast2, 0x3}]}, @generic={0x7, 0x9, "1f72f4589e35eb"}, @cipso={0x86, 0x39, 0x0, [{0x6, 0x5, "1b5309"}, {0x3, 0x8, "e23dfa3dfe28"}, {0x1, 0x3, "f6"}, {0x2, 0x3, "c3"}, {0x6, 0x7, "de42ea68ef"}, {0x6, 0x12, "74fd0cc66d0e56ad251b53c6a1e96312"}, {0x2, 0x2}, {0x2, 0x5, "1c6ea5"}]}, @rr={0x7, 0xb, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'sit0\x00', <r8=>0x0, 0x1, 0x1, 0x81, 0x1, {{0x22, 0x4, 0x0, 0x2c, 0x88, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0xc, 0x93, 0x3, 0x7, [{@local, 0x4}]}, @generic={0x89, 0x5, "f9c435"}, @end, @lsrr={0x83, 0xb, 0x80, [@loopback, @empty]}, @lsrr={0x83, 0xb, 0x27, [@broadcast, @local]}, @noop, @ssrr={0x89, 0x23, 0x68, [@loopback, @broadcast, @local, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @remote]}, @timestamp={0x44, 0xc, 0xba, 0x0, 0x6, [0x0, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0xe, [{@local, 0x9}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x9}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r9=>0x0, 0x2f, 0x8, 0x7, 0x5, 0x1, @remote, @empty, 0x40, 0x8, 0xfffff000, 0x8000}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r11=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@multicast2, @multicast2, <r12=>0x0}, &(0x7f0000000680)=0xc)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x220, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x8801)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r13, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x764}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdaf}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe9e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000084)
r14 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x7, 0x0, 0xd, 0x8, 0x8, 0x1, 0xfffffffffffffff7, 0x5a9c, 0x5, 0x6, 0x6, 0x7, 0x6, 0x8, 0x6, 0xd], 0x2000, 0x21000})
r15 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x80000)
connect$unix(r15, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r16 = dup2(r0, r14)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000c40)={<r17=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x6, 0x15d0, 0x200, 0x3}, &(0x7f0000000d00)=0x98)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r16, 0x84, 0x18, &(0x7f0000000d40)={r17, 0x1}, &(0x7f0000000d80)=0x8)
setsockopt$IP6T_SO_SET_REPLACE(r16, 0x29, 0x40, &(0x7f0000000e00)=@security={'security\x00', 0xe, 0x4, 0x5e8, 0xffffffff, 0x0, 0x3d8, 0x3d8, 0xffffffff, 0xffffffff, 0x518, 0x518, 0x518, 0xffffffff, 0x4, &(0x7f0000000dc0), {[{{@ipv6={@mcast2, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xffffffff], 'dvmrp1\x00', 'gretap0\x00', {}, {0xff}, 0xd7, 0x91, 0x1, 0x4e}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x3, [0x5, 0xfffffff7], 0x4, 0x1, 0x4, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}], 0x5}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40be, 'syz0\x00', {0x480000000000000}}}}, {{@ipv6={@private2, @remote, [0xffffffff, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff], 'vxcan1\x00', 'team_slave_1\x00', {}, {}, 0x2e, 0x79, 0x4, 0x15}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "4f8d", 0x1}}, @common=@srh1={{0x90}, {0x6c, 0x9, 0x0, 0xa, 0x9f, @dev={0xfe, 0x80, '\x00', 0x19}, @private2, @mcast1, [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 0x81, 0x200}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3}, {0xffffffffffffffff, 0x5, 0x4}}}}, {{@ipv6={@mcast2, @local, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'gretap0\x00', 'caif0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x0, 0x24}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x67, 0x0, 0x40, 0x3, 0x100, 0x410}}, @common=@srh={{0x30}, {0x3a, 0xad, 0x4, 0x81, 0xfffd, 0x900, 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4}, {0x4, 0x2, 0x1}, {0x4, 0x1, 0x2}, 0x3, 0xfffffbff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)
ioctl$KVM_SET_SREGS2(r16, 0x4140aecd, &(0x7f0000001480)={{0xeeef0000, 0x4, 0x0, 0x2, 0xb8, 0xf1, 0x83, 0xfc, 0x3, 0x3, 0x8, 0xe}, {0xf000, 0x4000, 0x10, 0x9, 0x0, 0x4, 0x0, 0x8, 0x2, 0x7f, 0x8e, 0x2}, {0xeeee0000, 0x1000, 0xb, 0x8, 0x9, 0x1, 0x2, 0x9, 0xe, 0x2, 0x81, 0x6}, {0x100000, 0x7000, 0x8, 0xfe, 0x0, 0xed, 0xd6, 0xfb, 0xfa, 0x50, 0x5, 0x9}, {0x54000, 0x0, 0x9, 0x9, 0x7f, 0xf2, 0x8, 0x7, 0xf8, 0x8, 0x7, 0x6}, {0x2000, 0x40000, 0x9, 0x9, 0xf8, 0x5, 0x9, 0x5, 0x1, 0x7, 0x7, 0x5}, {0xdddd0000, 0x58000, 0x8, 0x1c, 0x4, 0x80, 0x8, 0x2, 0x5, 0x9, 0xf, 0xf1}, {0x4000, 0x54000, 0xd, 0x5, 0x5, 0x7f, 0x7, 0x9, 0xb0, 0x2, 0x9, 0x1}, {0x30000, 0x9}, {0x4, 0xa}, 0x80040024, 0x0, 0x5000, 0x500080, 0xe, 0x801, 0x5000, 0x0, [0xd0c0, 0xb0, 0x100000000]})
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
sendmsg$IPSET_CMD_FLUSH(r16, &(0x7f0000001680)={&(0x7f00000015c0), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x4, 0x6, 0x900, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000084)
syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r16, 0x84, 0x6d, &(0x7f0000001700)={0x0, 0x1000, "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"}, &(0x7f0000002740)=0x1008)

1.184099555s ago: executing program 0 (id=7015):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xe598}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000180), &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0), 0x0, 0xff})

493.193303ms ago: executing program 0 (id=7016):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206d0403ca9d000000000109022d1a010000700109040001010300010009210000020122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000007, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/183, 0xb7}], 0x4, &(0x7f0000000800)=""/46, 0x2e}, 0x8}], 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x4400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/215, 0xd7}], 0x1)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x222, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3, 0x200})

403.38081ms ago: executing program 3 (id=7017):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x40000000010, 0xf1, 0xfffffffffffffff7, 0x10, 0x1, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x40000, 0x6d101}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0xd1a, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe5, 0x42, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x0, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0x4, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x2, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xfc, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x4, 0x8]}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64)
r3 = gettid() (rerun: 64)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) (async, rerun: 64)
tkill(r3, 0xe) (async, rerun: 64)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb)

307.6186ms ago: executing program 1 (id=7018):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40002)
ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

187.468387ms ago: executing program 3 (id=7019):
r0 = socket$inet6(0xa, 0x1, 0x49)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000040)=0x2)
r2 = socket(0xa, 0x3, 0x3a)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x7, 0xa9ff, 0x4, 0x8000, 0xa, 0x4})
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000000c0))
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x5d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014)
r5 = gettid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x16, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
sendmsg(r2, &(0x7f0000002040)={&(0x7f0000000480)=@ll={0x11, 0x19, r6, 0x1, 0xa, 0x6, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000500)="95989c8ee588cbe5513b91835103e465df331829373aeda8665cf5100300a02fb70ff4d5f15d37b2ada8c624b394efec1e29f3b3160054d81435b26668579679b4f6a46aded8050df88d8b5385855d0170358abb9559f7c2a9046082e232256f6ceb2c51284700cfe7ce3d6d70ea21387b220fa335dee38c1d1942aa53f6a90733e1b0e81863283e35b08f13545b4bbacbafa9793390575daba726b2352b643243c137c64fa4b0f7f7d0d763ba3f8217e5353832094738f7fe7e0ab14e4809601f1acd133bef4cedfc502cdd8423e2906d0f7c8876710f4e73210b0e2106045b56a78e648431", 0xe6}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="3db6953c1f831e6fae713546352e3397538ff08baa42c450f5e093ecbd9ac98ce0eeef1d5547eeb34d366f1086", 0x2d}, {&(0x7f0000001d40)="f7c5d1d647e15ee30fd0c6a3e0a981cb5cd588d9e34c6cec0137616d5a9e32a84f02148c98e729dce9c1e0686f4baca4334bcc7b0026d6968f9e7e8cbcd2ebb65976a81fbd566ea4c93c1c897b4169ab57fe599746e6085145d01bd03f10f904d82a28afd1b5a9e06b7d8a4c202daf2b146fbb1253a41b94d2ef077149e056c3f42da80eae570cbef8e8abd81ecd35614943d8db54ce0d5a7f260fbdb2a2a07b5b53e16374139e5e59a9fc7b7d45dc2f5b9752c86927a46d61ea10d8c201b5c122bd9d0eb5368778f7e2434346649b9655ae5875a6ea862b9627c005f3f54e852c", 0xe1}, {&(0x7f0000001e40)="1c087e065551ac3f3c528a7d377280ed7e39fb606ff030665b28d151e173b571f6d9da2796639f97248f2924e925d6b82dcf454d452e273de5c304d2069031cad2898c1a70e7ce0e37a062eeba63dfc8d9f6269381e9a270d9188f2324fc12a01173e878060cd8a48f5a219c8c7318e4415507fb7e343d77b89bf7588f55dadbd3efa437a5520f819fac0f77a651c45a3d588f0e6902495eb28840c3d1728ff8fe1f23f8bf2f0acb75da0aa3ef7b12ec4875667db7d9b685d89ee95512cf8f9c3393cd2f2cf3593a59b905d72da728f191ac2444e5b5259d29fb66df6c84a810162169eca244372129866c28e05b65", 0xef}], 0x5, &(0x7f0000001fc0)=[{0x48, 0x104, 0x4, "adff178eebf7e7754d8047ada367fa2ea196d79248e57e05f03c4d1dedc7850567651f0a98f3c5620be8c3aa1bc5af0022"}], 0x48}, 0x840)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000800)=0x4)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
uname(0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002e977f508c70b02007c9e01020b0109022400010f01e01009049a070277333d00090509f0000404024009050b"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

131.460564ms ago: executing program 4 (id=7020):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3")
fsopen(&(0x7f0000000040)='udf\x00', 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x38}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x18, 0x0, @tid=r1}, &(0x7f0000000740)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000780)={<r6=>0x0, <r7=>0x0})
timer_settime(r5, 0x0, &(0x7f00000007c0)={{r6, r7+10000000}}, 0x0)
r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r10, 0x4068aea3, &(0x7f00000009c0)={0xa8})
syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x12, "ee153459ca529beb5d240bd5156f13854a91"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, &(0x7f00000002c0)={0x0, 0xd2265e3f83532fb8, 0xac, {0xac, 0x2c, "5ff3d6fc8f635026e1555876bd38ee23578874fe15bb63efc630b18c17a1ea8a27003afad6902a1ff13b88c7ed34ba35661b31d85bec0bf52316e8d98f74b6df4bf31f3116cad9be3e46439ad6d810166372f68f30bf14b84b8bd4fb90d8be24b644eb6d7e74c79d79c4d21861d5ab109a6175abd67d760765d6e272a52df58e35e23b4376bd409eaab85d3140fb02ad9b93076c687c4960026d426ef8164e8007dba9b343ae78802d00"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00030400000004031d64d384c15fb0cbd4e7"], &(0x7f00000003c0)=ANY=[@ANYBLOB="002222000000278b0d640a8a01e8927cfe9fc544bc171668bf26c191a5bd5d242f8d96c3b0269f26"], &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xd42}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0xe, 0x83, "5ce58a822a9be0adc4cf4d7bae064eb62197a9d765a8e04b27abd6427448f37e4e489672eb13749507fcde586f03ded2a805ed2d7e724bb620ef983656aae8dadbacaa32e7fb5899641b5612a23b93b05d64a0d06b3d5bea349eb72324e323477a4386e248a26ed279409129cafbc5a0f925efe3403bbd2097faa06b7cbd228f097b5a"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x1, 0x46, "79a75ad2c243d42374d64b0171b724fa8caaf737dbe4d0ded7181be08da8058b795ff2ae6014b84a3043b255be4272ed2afbf741e658a4e5faf21ed7d0ed043dea4357e81fbe"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x81}})
r11 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x8000000000000000, 0x0)
ioctl$DVB_DEMUX_DMX_ADD_PID(r11, 0x40026f33, &(0x7f0000000180)=0x6)

23.183392ms ago: executing program 2 (id=7021):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0xfd}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r4=>0x0)
io_submit(r4, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
accept4$alg(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0xfd}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
io_setup(0xff, &(0x7f0000000380)) (async)
io_submit(r4, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) (async)

0s ago: executing program 1 (id=7022):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000001500)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x2a, 0x1, 0x1000, {0xd, @tcp_ip6_spec={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x4e23, 0x10}, {0x0, @broadcast, 0x9, 0xc0, [0xfff, 0x6c1]}, @sctp_ip4_spec={@multicast1, @empty, 0x4e24, 0x4e24, 0x1b}, {0x0, @empty, 0x5, 0x2be, [0x9, 0x1]}, 0x4, 0x1000}, 0x5c}})
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r3 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0)
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000100)=""/4096)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x9}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0], 0x0, 0xa1, &(0x7f00000012c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001300), &(0x7f0000001240), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x13, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff8001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$unix(0x1, 0x5, 0x0) (async)
connect$unix(r2, &(0x7f0000001500)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x2a, 0x1, 0x1000, {0xd, @tcp_ip6_spec={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x4e23, 0x10}, {0x0, @broadcast, 0x9, 0xc0, [0xfff, 0x6c1]}, @sctp_ip4_spec={@multicast1, @empty, 0x4e24, 0x4e24, 0x1b}, {0x0, @empty, 0x5, 0x2be, [0x9, 0x1]}, 0x4, 0x1000}, 0x5c}}) (async)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async)
syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) (async)
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000100)=""/4096) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x9}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0], 0x0, 0xa1, &(0x7f00000012c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001300), &(0x7f0000001240), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x13, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff8001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) (async)

kernel console output (not intermixed with test programs):

h-speed USB device number 99 using dummy_hcd
[ 1528.082732][T28466] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1528.106238][ T5634] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1528.136966][T28466] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1528.184478][T28466] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1528.212582][T28466] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 1528.234680][T29769] openvswitch: netlink: IPv4 tun info is not correct
[ 1528.242407][T28466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.259713][T28466] usb 5-1: Product: syz
[ 1528.269969][T28466] usb 5-1: Manufacturer: syz
[ 1528.278709][T28466] usb 5-1: SerialNumber: syz
[ 1528.290716][ T5634] usb 2-1: Using ep0 maxpacket: 32
[ 1528.303962][T28466] usb 5-1: rejected 1 configuration due to insufficient available bus power
[ 1528.327000][T28466] usb 5-1: no configuration chosen from 1 choice
[ 1528.342912][ T5634] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1528.377046][ T5634] usb 2-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1528.427575][ T5634] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[ 1528.458637][ T5634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.480011][ T5634] usb 2-1: Product: syz
[ 1528.485012][ T5634] usb 2-1: Manufacturer: syz
[ 1528.490833][ T5634] usb 2-1: SerialNumber: syz
[ 1528.863700][ T5634] comedi comedi5: Wrong number of endpoints
[ 1528.892367][ T5634] dt9812 2-1:244.0: driver 'dt9812' failed to auto-configure device.
[ 1528.971588][ T5634] usb 2-1: USB disconnect, device number 74
[ 1529.206544][T29782] binder: 29777:29782 ioctl 4018620d 0 returned -22
[ 1529.292914][T29782] No such timeout policy "syz1"
[ 1530.094989][T29801] binder: transaction release 227 bad handle 1, ret = -22
[ 1530.579068][ T5634] usb 5-1: USB disconnect, device number 99
[ 1530.594696][T29806] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1531.056945][T29818] IPv6: addrconf: prefix option has invalid lifetime
[ 1531.140545][ T5634] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1531.300485][ T5634] usb 5-1: Using ep0 maxpacket: 8
[ 1531.314080][ T5634] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1531.338561][ T5634] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1531.357868][ T5634] usb 5-1: string descriptor 0 read error: -22
[ 1531.374928][ T5634] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1531.412003][ T5634] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1531.480798][ T5634] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1531.527676][ T5634] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1531.576269][ T5634] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1531.601335][ T5634] usb 5-1: media controller created
[ 1531.646171][ T5634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1531.712315][T29830] FAULT_INJECTION: forcing a failure.
[ 1531.712315][T29830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1531.727592][T20206] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[ 1531.751423][T29830] CPU: 1 UID: 0 PID: 29830 Comm: syz.0.6690 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1531.751466][T29830] Tainted: [L]=SOFTLOCKUP
[ 1531.751474][T29830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1531.751485][T29830] Call Trace:
[ 1531.751494][T29830]  <TASK>
[ 1531.751503][T29830]  dump_stack_lvl+0xe8/0x150
[ 1531.751533][T29830]  should_fail_ex+0x412/0x560
[ 1531.751561][T29830]  _copy_from_iter+0x1d3/0x1670
[ 1531.751598][T29830]  ? __pfx__copy_from_iter+0x10/0x10
[ 1531.751618][T29830]  ? sock_alloc_send_pskb+0x896/0x990
[ 1531.751648][T29830]  ? __pfx__copy_from_iter+0x10/0x10
[ 1531.751680][T29830]  copy_page_from_iter+0x220/0x2d0
[ 1531.751706][T29830]  skb_copy_datagram_from_iter+0x306/0x710
[ 1531.751742][T29830]  tun_get_user+0xc5e/0x43e0
[ 1531.751780][T29830]  ? aa_file_perm+0x192/0x15e0
[ 1531.751810][T29830]  ? aa_file_perm+0x50e/0x15e0
[ 1531.751829][T29830]  ? __pfx_tun_get_user+0x10/0x10
[ 1531.751853][T29830]  ? __lock_acquire+0x6b5/0x2cf0
[ 1531.751879][T29830]  ? kstrtoull+0x12f/0x1d0
[ 1531.751918][T29830]  ? ref_tracker_alloc+0x35c/0x4c0
[ 1531.751945][T29830]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1531.751971][T29830]  ? tun_get+0x1c/0x2f0
[ 1531.751991][T29830]  ? tun_get+0x1c/0x2f0
[ 1531.752017][T29830]  ? tun_get+0x1c/0x2f0
[ 1531.752036][T29830]  ? tun_get+0x1c/0x2f0
[ 1531.752060][T29830]  tun_chr_write_iter+0x113/0x200
[ 1531.752094][T29830]  vfs_write+0x61d/0xb90
[ 1531.752133][T29830]  ? __pfx_vfs_write+0x10/0x10
[ 1531.752172][T29830]  ? __fget_files+0x2a/0x420
[ 1531.752207][T29830]  ksys_write+0x150/0x270
[ 1531.752239][T29830]  ? __pfx_ksys_write+0x10/0x10
[ 1531.752274][T29830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.752297][T29830]  do_syscall_64+0x174/0x580
[ 1531.752316][T29830]  ? trace_irq_disable+0x3b/0x140
[ 1531.752346][T29830]  ? clear_bhb_loop+0x40/0x90
[ 1531.752370][T29830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.752387][T29830] RIP: 0033:0x7f553659ce59
[ 1531.752405][T29830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1531.752420][T29830] RSP: 002b:00007f5537467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1531.752441][T29830] RAX: ffffffffffffffda RBX: 00007f5536815fa0 RCX: 00007f553659ce59
[ 1531.752466][T29830] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003
[ 1531.752479][T29830] RBP: 00007f5537467090 R08: 0000000000000000 R09: 0000000000000000
[ 1531.752492][T29830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1531.752504][T29830] R13: 00007f5536816038 R14: 00007f5536815fa0 R15: 00007f553693fa48
[ 1531.752536][T29830]  </TASK>
[ 1532.114853][ T5634] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1532.152352][T20206] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1532.164054][T20206] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1532.175576][T20206] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[ 1532.185477][T20206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.193548][T20206] usb 3-1: Product: syz
[ 1532.197725][T20206] usb 3-1: Manufacturer: syz
[ 1532.202641][T20206] usb 3-1: SerialNumber: syz
[ 1532.210226][T29827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1532.435848][ T5634] usb 5-1: USB disconnect, device number 100
[ 1532.583373][T20206] usbhid 3-1:1.0: can't add hid device: -71
[ 1532.616366][T20206] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1532.645082][T20206] usb 3-1: USB disconnect, device number 20
[ 1532.919978][T28466] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1533.012886][T29851] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1533.020861][T29851] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1533.084630][T28466] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1533.115415][T28466] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1533.146744][T28466] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1533.162946][T28466] usb 1-1: config 220 has no interface number 2
[ 1533.169431][T28466] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1533.215658][T28466] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1533.238556][T29856] netlink: 'syz.3.6697': attribute type 2 has an invalid length.
[ 1533.240171][T28466] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1533.276344][T28466] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1533.287384][T28466] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1533.299173][T28466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.319211][T28466] usb 1-1: Product: syz
[ 1533.324426][T28466] usb 1-1: Manufacturer: syz
[ 1533.334581][T28466] usb 1-1: SerialNumber: syz
[ 1533.363302][T29851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1533.384626][T29860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6698'.
[ 1533.406046][T29851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1533.432770][T29860] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1533.562143][T29846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1533.589171][T29846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.702043][T28466] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1533.722558][T28466] uvcvideo 1-1:220.0: No valid video chain found.
[ 1533.750621][T28466] usb 1-1: selecting invalid altsetting 0
[ 1533.801689][T28466] usb 1-1: selecting invalid altsetting 0
[ 1533.807925][T28466] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[ 1533.824656][T28466] usb 1-1: USB disconnect, device number 52
[ 1534.559759][   T29] audit: type=1326 audit(1780084910.152:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1534.623256][T29856] loop9: detected capacity change from 0 to 4096
[ 1534.632831][   T29] audit: type=1326 audit(1780084910.152:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1534.783137][   T29] audit: type=1326 audit(1780084910.202:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1534.811160][T16202] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.868852][T16202] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.907528][T16202] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.925524][T16202] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.932399][   T29] audit: type=1326 audit(1780084910.212:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29871 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cabd5d68e code=0x7ffc0000
[ 1535.023775][   T29] audit: type=1326 audit(1780084910.212:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.051882][ T5634] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1535.098660][   T29] audit: type=1326 audit(1780084910.212:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.144168][   T29] audit: type=1326 audit(1780084910.212:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.181790][   T29] audit: type=1326 audit(1780084910.212:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.212445][   T29] audit: type=1326 audit(1780084910.212:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.240696][T29881] syzkaller0: entered promiscuous mode
[ 1535.246450][T29881] syzkaller0: entered allmulticast mode
[ 1535.257563][   T29] audit: type=1326 audit(1780084910.212:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29867 comm="syz.2.6700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1535.284154][ T5634] usb 1-1: Using ep0 maxpacket: 32
[ 1535.293808][ T5634] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1535.305716][ T5634] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1535.332055][ T5634] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1535.342651][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1535.358787][ T5634] usb 1-1: Product: syz
[ 1535.374476][ T5634] usb 1-1: Manufacturer: syz
[ 1535.392553][ T5634] usb 1-1: SerialNumber: syz
[ 1535.574292][T29891] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6706'.
[ 1535.627342][ T5634] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1535.690012][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1535.938869][ T5634] usb 1-1: disable ehci-hcd to run US-144
[ 1535.992568][ T5634] usb 1-1: USB disconnect, device number 53
[ 1536.146130][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1536.599846][   T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1536.749699][ T5761] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[ 1536.760959][   T46] usb 3-1: Using ep0 maxpacket: 32
[ 1536.786424][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1536.833810][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1536.869794][   T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1536.889852][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1536.910007][   T46] usb 3-1: config 0 descriptor??
[ 1536.931402][   T46] hub 3-1:0.0: USB hub found
[ 1536.934483][ T5761] usb 1-1: not running at top speed; connect to a high speed hub
[ 1536.958972][ T5761] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1536.984401][ T5761] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1537.005650][ T5761] usb 1-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40
[ 1537.041487][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.065646][ T5761] usb 1-1: Manufacturer: ј
[ 1537.082352][ T5761] usb 1-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟
[ 1537.147380][   T46] hub 3-1:0.0: 1 port detected
[ 1537.171189][    T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1537.339586][T29914] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6713'.
[ 1537.342968][    T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[ 1537.370480][T29914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6713'.
[ 1537.396637][    T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1537.413101][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'.
[ 1537.429695][    T9] usb 5-1: config 220 has no interface number 2
[ 1537.466268][    T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1537.518635][    T9] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1537.565004][    T9] usb 5-1: config 220 interface 76 has no altsetting 0
[ 1537.601976][    T9] usb 5-1: config 220 interface 1 has no altsetting 0
[ 1537.611225][T29914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1537.649390][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1537.653472][T29914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1537.690936][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.725208][    T9] usb 5-1: Product: syz
[ 1537.740369][    T9] usb 5-1: Manufacturer: syz
[ 1537.760421][    T9] usb 5-1: SerialNumber: syz
[ 1537.788078][ T5761] usbhid 1-1:1.0: can't add hid device: -71
[ 1537.818312][ T5761] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 1537.873189][ T5761] usb 1-1: USB disconnect, device number 54
[ 1538.176175][   T46] hub 3-1:0.0: hub_hub_status failed (err = -32)
[ 1538.197612][T29932] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6719'.
[ 1538.235370][   T46] hub 3-1:0.0: config failed, can't get hub status (err -32)
[ 1538.284672][   T46] usbhid 3-1:0.0: can't add hid device: -32
[ 1538.307343][   T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[ 1538.372765][   T46] usb 3-1: USB disconnect, device number 21
[ 1538.849876][ T5761] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1538.959969][   T46] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1539.009700][ T5761] usb 1-1: Using ep0 maxpacket: 32
[ 1539.017482][ T5761] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1539.031014][ T5761] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1539.051018][ T5761] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1539.066679][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1539.075587][    T9] usb 5-1: selecting invalid altsetting 0
[ 1539.082766][ T5761] usb 1-1: Product: syz
[ 1539.087459][    T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1539.095825][ T5761] usb 1-1: Manufacturer: syz
[ 1539.100635][ T5761] usb 1-1: SerialNumber: syz
[ 1539.107367][    T9] uvcvideo 5-1:220.0: No valid video chain found.
[ 1539.134570][    T9] usb 5-1: selecting invalid altsetting 0
[ 1539.135817][   T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1539.141743][    T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[ 1539.165830][    T9] usb 5-1: USB disconnect, device number 101
[ 1539.169499][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1539.210270][   T46] usb 2-1: Product: syz
[ 1539.216502][   T46] usb 2-1: Manufacturer: syz
[ 1539.234266][   T46] usb 2-1: SerialNumber: syz
[ 1539.341564][ T5761] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1539.415764][ T5761] usb 1-1: disable ehci-hcd to run US-144
[ 1539.433978][ T5761] usb 1-1: USB disconnect, device number 55
[ 1539.486374][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1539.684827][   T29] kauditd_printk_skb: 26 callbacks suppressed
[ 1539.684848][   T29] audit: type=1400 audit(1780084915.282:5356): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=29955 comm="syz.2.6728"
[ 1539.801549][T29960] xt_hashlimit: size too large, truncated to 1048576
[ 1539.857134][   T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1539.870969][T29965] program syz.3.6727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1539.878071][   T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1540.210134][ T5761] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1540.279298][T29977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1540.379748][ T5761] usb 1-1: Using ep0 maxpacket: 32
[ 1540.387074][ T5761] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1540.396617][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.408496][ T5761] usb 1-1: config 0 descriptor??
[ 1540.470351][T10261] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1540.619581][ T5761] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1540.629469][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1540.642799][ T5761] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1540.644611][T10261] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1540.650122][ T5761] usb 1-1: media controller created
[ 1540.673043][T10261] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1540.678813][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1540.685794][T10261] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1540.701298][T10261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.709485][T10261] usb 4-1: Product: syz
[ 1540.715571][T10261] usb 4-1: Manufacturer: syz
[ 1540.734421][T10261] usb 4-1: SerialNumber: syz
[ 1540.771832][T10261] usb 4-1: config 0 descriptor??
[ 1540.786522][T10261] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1541.024389][ T5761] az6027: usb out operation failed. (-71)
[ 1541.047965][ T5761] stb0899_attach: Driver disabled by Kconfig
[ 1541.062259][ T5761] az6027: no front-end attached
[ 1541.062259][ T5761] 
[ 1541.085940][ T5761] az6027: usb out operation failed. (-71)
[ 1541.095110][ T5761] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1541.111500][ T5761] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input165
[ 1541.146174][ T5761] dvb-usb: schedule remote query interval to 400 msecs.
[ 1541.163368][ T5761] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1541.221812][ T5761] usb 1-1: USB disconnect, device number 56
[ 1541.372526][ T5761] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1541.804623][   T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[ 1541.826055][   T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1541.864169][   T46] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1541.894205][   T46] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1541.913723][T29997] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1541.922749][   T46] usb 2-1: USB disconnect, device number 75
[ 1541.929219][T29997] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1542.056730][T29997] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1542.064873][T29997] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1542.076527][T29997] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1542.085584][T29997] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1542.100635][T29997] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1542.109765][T29997] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1542.116046][T29997] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1542.127833][T29997] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1542.379714][ T5761] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1542.387520][    T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1542.449856][   T46] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1542.539708][ T5761] usb 1-1: Using ep0 maxpacket: 8
[ 1542.544892][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1542.552520][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1542.565152][ T5761] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1542.574774][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1542.585873][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.594241][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1542.599655][   T46] usb 2-1: Using ep0 maxpacket: 8
[ 1542.608533][ T5761] usb 1-1: config 0 descriptor??
[ 1542.612997][   T46] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[ 1542.626771][   T46] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[ 1542.628378][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1542.648699][   T46] usb 2-1: config 0 has no interface number 0
[ 1542.653955][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1542.657751][   T46] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10
[ 1542.673900][    T9] usb 5-1: Product: syz
[ 1542.676932][   T46] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[ 1542.679121][    T9] usb 5-1: Manufacturer: syz
[ 1542.690687][   T46] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1542.695199][    T9] usb 5-1: SerialNumber: syz
[ 1542.708729][   T46] usb 2-1: config 0 interface 52 has no altsetting 0
[ 1542.723019][   T46] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[ 1542.733332][   T46] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[ 1542.743209][   T46] usb 2-1: Product: syz
[ 1542.747756][   T46] usb 2-1: SerialNumber: syz
[ 1542.757096][   T46] usb 2-1: config 0 descriptor??
[ 1542.831196][ T5761] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1542.953634][    T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1543.011471][   T46] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input166
[ 1543.012695][    T9] usb 5-1: disable ehci-hcd to run US-144
[ 1543.038504][    T9] usb 5-1: USB disconnect, device number 102
[ 1543.121533][   T46] usb 2-1: USB disconnect, device number 76
[ 1543.121621][    C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[ 1543.209755][ T5639] Bluetooth: hci3: command 0x0406 tx timeout
[ 1543.346212][T28466] usb 1-1: USB disconnect, device number 57
[ 1543.415133][T30034] usb usb8: usbfs: process 30034 (syz.0.6749) did not claim interface 0 before use
[ 1543.542196][   T46] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1543.691183][   T46] usb 2-1: device descriptor read/64, error -71
[ 1543.918752][    T9] usb 4-1: USB disconnect, device number 43
[ 1543.931638][   T46] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1544.090420][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1544.090870][T18165] Bluetooth: hci5: command 0x0406 tx timeout
[ 1544.099817][   T46] usb 2-1: device descriptor read/64, error -71
[ 1544.169742][T18165] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1544.223937][   T46] usb usb2-port1: attempt power cycle
[ 1544.359889][T28466] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1544.531625][T28466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1544.559732][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1544.569246][T28466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1544.580397][   T46] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1544.599810][T28466] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1544.619009][   T46] usb 2-1: device descriptor read/8, error -71
[ 1544.625778][T28466] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1544.635335][T28466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.676703][T28466] usb 1-1: config 0 descriptor??
[ 1544.690115][ T5761] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1544.735229][    T9] usb 4-1: device descriptor read/64, error -71
[ 1544.859718][   T46] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1544.872416][ T5761] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[ 1544.888264][ T5761] usb 5-1: config 0 has no interface number 0
[ 1544.895232][   T46] usb 2-1: device descriptor read/8, error -71
[ 1544.899612][ T5761] usb 5-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30
[ 1544.930416][ T5761] usb 5-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1544.963446][ T5761] usb 5-1: config 0 interface 101 has no altsetting 0
[ 1544.981278][ T5761] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[ 1544.997850][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1545.006205][    T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1545.027584][ T5761] usb 5-1: config 0 descriptor??
[ 1545.032349][   T46] usb usb2-port1: unable to enumerate USB device
[ 1545.113892][T30043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1545.138104][T30043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1545.149914][    T9] usb 4-1: device descriptor read/64, error -71
[ 1545.174648][T28466] steelseries 0003:1038:1410.0067: unknown main item tag 0x1
[ 1545.190905][T28466] steelseries 0003:1038:1410.0067: not enough values in HID_OUTPUT_REPORT 0 field 0
[ 1545.243651][ T5761] usb 5-1: string descriptor 0 read error: -71
[ 1545.273643][    T9] usb usb4-port1: attempt power cycle
[ 1545.279783][ T5761] usb 5-1: USB disconnect, device number 103
[ 1545.289661][T18165] Bluetooth: hci3: command 0x0406 tx timeout
[ 1545.541224][T25142] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1545.639826][    T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1545.660358][    T9] usb 4-1: device descriptor read/8, error -71
[ 1545.679704][T25142] usb 3-1: device descriptor read/64, error -71
[ 1545.900983][T28466] usb 1-1: USB disconnect, device number 58
[ 1545.909658][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1545.923801][T25142] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1545.959025][    T9] usb 4-1: device descriptor read/8, error -71
[ 1545.989906][T30056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1546.059715][T25142] usb 3-1: device descriptor read/64, error -71
[ 1546.072117][    T9] usb usb4-port1: unable to enumerate USB device
[ 1546.091502][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.097993][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.116670][T30061] netlink: 'syz.0.6756': attribute type 4 has an invalid length.
[ 1546.169699][T18165] Bluetooth: hci5: command 0x0406 tx timeout
[ 1546.169939][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1546.176415][T25142] usb usb3-port1: attempt power cycle
[ 1546.249956][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1546.269949][ T5634] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1546.279030][T30063] FAULT_INJECTION: forcing a failure.
[ 1546.279030][T30063] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1546.301490][T30063] CPU: 0 UID: 0 PID: 30063 Comm: syz.1.6757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1546.301526][T30063] Tainted: [L]=SOFTLOCKUP
[ 1546.301534][T30063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1546.301546][T30063] Call Trace:
[ 1546.301560][T30063]  <TASK>
[ 1546.301569][T30063]  dump_stack_lvl+0xe8/0x150
[ 1546.301597][T30063]  should_fail_ex+0x412/0x560
[ 1546.301618][T30063]  _copy_from_iter+0x1d3/0x1670
[ 1546.301642][T30063]  ? __pfx__copy_from_iter+0x10/0x10
[ 1546.301655][T30063]  ? sock_alloc_send_pskb+0x896/0x990
[ 1546.301672][T30063]  ? __pfx__copy_from_iter+0x10/0x10
[ 1546.301690][T30063]  copy_page_from_iter+0x220/0x2d0
[ 1546.301707][T30063]  skb_copy_datagram_from_iter+0x306/0x710
[ 1546.301727][T30063]  tun_get_user+0xc5e/0x43e0
[ 1546.301749][T30063]  ? aa_file_perm+0x192/0x15e0
[ 1546.301764][T30063]  ? aa_file_perm+0x50e/0x15e0
[ 1546.301775][T30063]  ? __pfx_tun_get_user+0x10/0x10
[ 1546.301789][T30063]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.301804][T30063]  ? kstrtoull+0x12f/0x1d0
[ 1546.301826][T30063]  ? ref_tracker_alloc+0x35c/0x4c0
[ 1546.301842][T30063]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1546.301857][T30063]  ? tun_get+0x1c/0x2f0
[ 1546.301869][T30063]  ? tun_get+0x1c/0x2f0
[ 1546.301884][T30063]  ? tun_get+0x1c/0x2f0
[ 1546.301895][T30063]  ? tun_get+0x1c/0x2f0
[ 1546.301909][T30063]  tun_chr_write_iter+0x113/0x200
[ 1546.301929][T30063]  vfs_write+0x61d/0xb90
[ 1546.301952][T30063]  ? __pfx_vfs_write+0x10/0x10
[ 1546.301975][T30063]  ? __fget_files+0x2a/0x420
[ 1546.301995][T30063]  ksys_write+0x150/0x270
[ 1546.302014][T30063]  ? __pfx_ksys_write+0x10/0x10
[ 1546.302036][T30063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.302049][T30063]  do_syscall_64+0x174/0x580
[ 1546.302063][T30063]  ? clear_bhb_loop+0x40/0x90
[ 1546.302078][T30063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.302090][T30063] RIP: 0033:0x7fa5f099ce59
[ 1546.302104][T30063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1546.302114][T30063] RSP: 002b:00007fa5f185c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1546.302129][T30063] RAX: ffffffffffffffda RBX: 00007fa5f0c15fa0 RCX: 00007fa5f099ce59
[ 1546.302138][T30063] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000003
[ 1546.302146][T30063] RBP: 00007fa5f185c090 R08: 0000000000000000 R09: 0000000000000000
[ 1546.302154][T30063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1546.302161][T30063] R13: 00007fa5f0c16038 R14: 00007fa5f0c15fa0 R15: 00007fa5f0d3fa48
[ 1546.302180][T30063]  </TASK>
[ 1546.620146][T25142] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1546.640314][T25142] usb 3-1: device descriptor read/8, error -71
[ 1546.649200][ T5634] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1546.659683][ T5634] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.670038][ T5634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1546.689746][ T5634] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1546.698860][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.707300][ T5634] usb 5-1: Product: syz
[ 1546.711902][ T5634] usb 5-1: Manufacturer: syz
[ 1546.716521][ T5634] usb 5-1: SerialNumber: syz
[ 1546.733803][ T5634] usb 5-1: selecting invalid altsetting 1
[ 1546.740435][ T5634] usb 5-1: unit 6 not found!
[ 1546.790865][ T5634] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1546.879668][T25142] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1546.920525][T25142] usb 3-1: device descriptor read/8, error -71
[ 1546.928447][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1546.943940][ T5634] usb 5-1: USB disconnect, device number 104
[ 1547.041622][T25142] usb usb3-port1: unable to enumerate USB device
[ 1547.546994][T30070] syz.3.6759 (30070): drop_caches: 2
[ 1547.645523][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6759'.
[ 1547.978516][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6760'.
[ 1548.041135][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6762'.
[ 1548.069703][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6762'.
[ 1548.086333][T30078] netlink: 'syz.3.6762': attribute type 6 has an invalid length.
[ 1548.125816][T30078] netlink: 'syz.3.6762': attribute type 5 has an invalid length.
[ 1548.132906][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'.
[ 1548.253375][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1548.283123][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'.
[ 1548.329728][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1548.332526][T11497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.347539][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6762'.
[ 1548.363720][T11497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.378399][T11497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.382637][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6762'.
[ 1548.388319][T11497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.408052][T11497] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.417163][T11497] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.438580][T11497] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.460837][T30078] netlink: 'syz.3.6762': attribute type 6 has an invalid length.
[ 1548.472887][T11497] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1548.481722][T30078] netlink: 'syz.3.6762': attribute type 5 has an invalid length.
[ 1548.567553][T30096] netlink: 'syz.2.6766': attribute type 4 has an invalid length.
[ 1549.360352][T25142] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1549.489306][T30121] fuse: fd is not a fuse device
[ 1549.558773][T25142] usb 1-1: config 1 has an invalid interface number: 69 but max is 0
[ 1549.616554][T25142] usb 1-1: config 1 has no interface number 0
[ 1549.640482][T25142] usb 1-1: config 1 interface 69 has no altsetting 0
[ 1549.660242][T25142] usb 1-1: New USB device found, idVendor=0a46, idProduct=0269, bcdDevice=d8.46
[ 1549.678189][T25142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.703693][T25142] usb 1-1: Product: syz
[ 1549.716866][T25142] usb 1-1: Manufacturer: syz
[ 1549.731183][T25142] usb 1-1: SerialNumber: syz
[ 1549.994234][T25142] dm9601 1-1:1.69: probe with driver dm9601 failed with error -22
[ 1550.041570][T25142] usb 1-1: USB disconnect, device number 59
[ 1550.367551][T30137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6779'.
[ 1550.987613][T30145] warn_alloc: 2 callbacks suppressed
[ 1550.987637][T30145] syz.3.6782: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1551.037691][T30145] CPU: 0 UID: 0 PID: 30145 Comm: syz.3.6782 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1551.037729][T30145] Tainted: [L]=SOFTLOCKUP
[ 1551.037738][T30145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1551.037751][T30145] Call Trace:
[ 1551.037760][T30145]  <TASK>
[ 1551.037770][T30145]  dump_stack_lvl+0xe8/0x150
[ 1551.037802][T30145]  warn_alloc+0x249/0x340
[ 1551.037836][T30145]  ? stack_trace_save+0xa9/0x100
[ 1551.037870][T30145]  ? __pfx_warn_alloc+0x10/0x10
[ 1551.037908][T30145]  ? kasan_save_track+0x4f/0x80
[ 1551.037936][T30145]  ? kasan_save_track+0x3e/0x80
[ 1551.037963][T30145]  ? __kasan_kmalloc+0x93/0xb0
[ 1551.037992][T30145]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1551.038022][T30145]  ? xskq_create+0x56/0x170
[ 1551.038049][T30145]  ? xsk_setsockopt+0x54c/0x990
[ 1551.038072][T30145]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1551.038099][T30145]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1551.038126][T30145]  ? do_syscall_64+0x174/0x580
[ 1551.038150][T30145]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1551.038213][T30145]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1551.038250][T30145]  ? __kasan_kmalloc+0x93/0xb0
[ 1551.038285][T30145]  vmalloc_user_noprof+0xad/0xe0
[ 1551.038311][T30145]  ? xskq_create+0xbf/0x170
[ 1551.038350][T30145]  xskq_create+0xbf/0x170
[ 1551.038382][T30145]  xsk_init_queue+0x8a/0xe0
[ 1551.038412][T30145]  xsk_setsockopt+0x54c/0x990
[ 1551.038443][T30145]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1551.038471][T30145]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1551.038503][T30145]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1551.038545][T30145]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1551.038581][T30145]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1551.038611][T30145]  do_sock_setsockopt+0x17c/0x1b0
[ 1551.038646][T30145]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1551.038680][T30145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.038705][T30145]  do_syscall_64+0x174/0x580
[ 1551.038723][T30145]  ? trace_irq_disable+0x3b/0x140
[ 1551.038759][T30145]  ? clear_bhb_loop+0x40/0x90
[ 1551.038787][T30145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.038809][T30145] RIP: 0033:0x7f4611b9ce59
[ 1551.038832][T30145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1551.038850][T30145] RSP: 002b:00007f4612a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1551.038874][T30145] RAX: ffffffffffffffda RBX: 00007f4611e15fa0 RCX: 00007f4611b9ce59
[ 1551.038890][T30145] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1551.038903][T30145] RBP: 00007f4611c32d6f R08: 0000000000000004 R09: 0000000000000000
[ 1551.038916][T30145] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1551.038930][T30145] R13: 00007f4611e16038 R14: 00007f4611e15fa0 R15: 00007f4611f3fa48
[ 1551.038964][T30145]  </TASK>
[ 1551.039014][T30145] Mem-Info:
[ 1551.360188][T30145] active_anon:21166 inactive_anon:0 isolated_anon:0
[ 1551.360188][T30145]  active_file:23698 inactive_file:4235 isolated_file:0
[ 1551.360188][T30145]  unevictable:768 dirty:176 writeback:0
[ 1551.360188][T30145]  slab_reclaimable:7511 slab_unreclaimable:103071
[ 1551.360188][T30145]  mapped:42735 shmem:14448 pagetables:1437
[ 1551.360188][T30145]  sec_pagetables:0 bounce:0
[ 1551.360188][T30145]  kernel_misc_reclaimable:0
[ 1551.360188][T30145]  free:1302506 free_pcp:10987 free_cma:0
[ 1551.599988][T10261] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1551.677419][T30145] Node 0 active_anon:87300kB inactive_anon:0kB active_file:94580kB inactive_file:16808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172012kB dirty:704kB writeback:0kB shmem:58952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:13204kB pagetables:5564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1551.747074][T30145] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1551.820071][T10261] usb 2-1: Using ep0 maxpacket: 8
[ 1551.828192][T10261] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1551.840489][T10261] usb 2-1: config 179 has no interface number 0
[ 1551.857760][T10261] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1551.868606][T30145] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1551.879888][T10261] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1551.943478][T10261] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1551.956786][T10261] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1551.971334][T30145] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1551.977932][T30145] Node 0 DMA32 free:1247996kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94500kB inactive_anon:0kB active_file:94580kB inactive_file:16808kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:31184kB local_pcp:17876kB free_cma:0kB
[ 1552.029399][T10261] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1552.061568][T10261] usb 2-1: config 179 interface 65 has no altsetting 0
[ 1552.096608][T30145] lowmem_reserve[]: 0 0 0 0 0
[ 1552.103640][T10261] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1552.134628][T30145] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1552.179929][T10261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.264526][T10261] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input167
[ 1552.275916][T30145] lowmem_reserve[]: 0 0 0 0 0
[ 1552.295348][T30145] Node 1 Normal free:3937860kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13360kB local_pcp:11088kB free_cma:0kB
[ 1552.390311][T30145] lowmem_reserve[]: 0 0 0 0 0
[ 1552.410342][T30145] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1552.463345][T30145] Node 0 DMA32: 1978*4kB (UE) 5417*8kB (UME) 3177*16kB (UME) 2667*32kB (UME) 1469*64kB (UME) 1016*128kB (UME) 630*256kB (UME) 345*512kB (UME) 170*1024kB (UME) 19*2048kB (UME) 67*4096kB (UM) = 1236832kB
[ 1552.512237][T30145] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1552.525261][T30145] Node 1 Normal: 11*4kB (U) 7*8kB (U) 3*16kB (M) 3*32kB (U) 2*64kB (UM) 6*128kB (UM) 4*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 960*4096kB (UM) = 3937908kB
[ 1552.566970][   T29] audit: type=1800 audit(1780084928.162:5357): pid=30147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6783" name="file1" dev="tmpfs" ino=375 res=0 errno=0
[ 1552.602611][T30145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1552.623466][T30145] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1552.634766][T30145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1552.645195][T30145] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1552.655348][T30145] 45399 total pagecache pages
[ 1552.660961][T30145] 0 pages in swap cache
[ 1552.665884][T30145] Free swap  = 124996kB
[ 1552.671813][T30145] Total swap = 124996kB
[ 1552.679982][T30145] 2097051 pages RAM
[ 1552.683914][T30145] 0 pages HighMem/MovableOnly
[ 1552.698915][T30145] 427066 pages reserved
[ 1552.705940][T30145] 0 pages cma reserved
[ 1553.296952][T30174] ipvlan2: entered promiscuous mode
[ 1553.550788][   T29] audit: type=1326 audit(1780084929.152:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1553.584888][   T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1553.628795][   T29] audit: type=1326 audit(1780084929.152:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1553.728912][   T29] audit: type=1326 audit(1780084929.152:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1553.762650][T28466] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1553.815795][   T29] audit: type=1326 audit(1780084929.152:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1553.935223][   T29] audit: type=1326 audit(1780084929.152:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1553.999930][   T29] audit: type=1326 audit(1780084929.152:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1554.081580][   T29] audit: type=1326 audit(1780084929.152:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1554.163351][   T29] audit: type=1326 audit(1780084929.152:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1554.251802][   T29] audit: type=1326 audit(1780084929.152:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30176 comm="syz.2.6791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cabd9ce59 code=0x7ffc0000
[ 1554.459606][ T5761] usb 2-1: USB disconnect, device number 81
[ 1554.459754][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1554.898059][T10261] IPVS: starting estimator thread 0...
[ 1555.019765][T30220] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1555.150011][T10261] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1555.319657][T10261] usb 4-1: Using ep0 maxpacket: 8
[ 1555.332835][T10261] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1555.348206][T10261] usb 4-1: config 2 has an invalid interface number: 99 but max is 0
[ 1555.359927][ T5761] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1555.374902][T10261] usb 4-1: config 2 has no interface number 0
[ 1555.391589][T10261] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E
[ 1555.420814][T10261] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1555.469006][T10261] usb 4-1: config 2 interface 99 has no altsetting 0
[ 1555.497932][T10261] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3
[ 1555.515360][T10261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.539512][T10261] usb 4-1: Product: syz
[ 1555.549807][ T5761] usb 5-1: Using ep0 maxpacket: 32
[ 1555.555696][T10261] usb 4-1: Manufacturer: syz
[ 1555.567747][T10261] usb 4-1: SerialNumber: syz
[ 1555.590469][ T5761] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1555.625823][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.645394][ T5761] usb 5-1: config 0 descriptor??
[ 1555.666812][T30227] IPv6: addrconf: prefix option has invalid lifetime
[ 1555.668013][ T5761] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1555.846833][T10261] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.99/input/input168
[ 1555.911969][    C1] xpad 4-1:2.99: xpad_irq_in - usb_submit_urb failed with result -1
[ 1556.090421][T25142] usb 4-1: USB disconnect, device number 48
[ 1556.266347][T30234] netlink: 'syz.4.6803': attribute type 10 has an invalid length.
[ 1556.302231][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6808'.
[ 1556.351012][T30234] 8021q: adding VLAN 0 to HW filter on device team0
[ 1556.381113][ T5761] gspca_sq930x: ucbus_write failed -110
[ 1556.397438][T30234] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1556.399326][ T5761] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[ 1557.008826][T30251] macsec1: entered promiscuous mode
[ 1557.029088][T30251] vlan1: entered promiscuous mode
[ 1557.053222][T30251] vlan1: left promiscuous mode
[ 1557.669671][ T5634] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 1557.841753][ T5634] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.866385][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1557.894670][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1557.899866][T10261] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1557.931858][ T5634] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1557.973374][ T5634] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[ 1557.995774][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.010857][ T5634] usb 1-1: config 0 descriptor??
[ 1558.069842][T10261] usb 4-1: Using ep0 maxpacket: 16
[ 1558.086155][T10261] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1558.116431][T10261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.129161][T10261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1558.138971][T10261] usb 4-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0
[ 1558.160060][T10261] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1558.171129][T10261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.179341][T10261] usb 4-1: Product: syz
[ 1558.184334][T10261] usb 4-1: Manufacturer: syz
[ 1558.189227][T10261] usb 4-1: SerialNumber: syz
[ 1558.291228][T30259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1558.310404][T30259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1558.545192][ T5761] usb 5-1: USB disconnect, device number 105
[ 1558.560653][ T5634] usbhid 1-1:0.0: can't add hid device: -71
[ 1558.575670][ T5634] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1558.666631][ T5634] usb 1-1: USB disconnect, device number 60
[ 1559.239798][ T5634] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1559.392165][ T5634] usb 5-1: device descriptor read/64, error -71
[ 1559.476235][T30294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6823'.
[ 1559.639801][ T5634] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1559.789754][ T5634] usb 5-1: device descriptor read/64, error -71
[ 1559.919995][T28466] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1559.920656][ T5634] usb usb5-port1: attempt power cycle
[ 1560.110224][T28466] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[ 1560.129210][T28466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1560.144800][T28466] usb 3-1: config 0 has no interface number 0
[ 1560.163472][T28466] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.9f
[ 1560.208978][T28466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.252135][T28466] usb 3-1: config 0 descriptor??
[ 1560.300095][ T5634] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1560.382565][ T5634] usb 5-1: device descriptor read/8, error -71
[ 1560.629696][ T5634] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1560.673233][ T5634] usb 5-1: device descriptor read/8, error -71
[ 1560.815625][ T5634] usb usb5-port1: unable to enumerate USB device
[ 1560.899924][T10261] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[ 1560.912593][T10261] cdc_ncm 4-1:1.0: bind() failure
[ 1560.950058][T10261] usb 4-1: USB disconnect, device number 49
[ 1560.963019][   T46] usb 3-1: USB disconnect, device number 26
[ 1561.029903][ T5761] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1561.170436][ T5761] usb 2-1: device descriptor read/64, error -71
[ 1561.369832][T28466] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1561.419933][   T46] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1561.429843][ T5761] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1561.489692][T10261] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1561.532718][T28466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1561.545644][T28466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1561.557801][T28466] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1561.568607][T28466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.576916][   T46] usb 4-1: device descriptor read/64, error -71
[ 1561.589102][T28466] usb 1-1: config 0 descriptor??
[ 1561.599673][ T5761] usb 2-1: device descriptor read/64, error -71
[ 1561.642105][T10261] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[ 1561.652778][T10261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.666412][T10261] usb 3-1: config 0 has no interface number 0
[ 1561.673009][T10261] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.9f
[ 1561.683171][T10261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.697928][T10261] usb 3-1: config 0 descriptor??
[ 1561.720076][ T5761] usb usb2-port1: attempt power cycle
[ 1561.821497][   T46] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1561.969682][   T46] usb 4-1: device descriptor read/64, error -71
[ 1562.048032][T28466] hid-led 0003:1D34:000A.0068: unknown main item tag 0x0
[ 1562.064207][T28466] hid-led 0003:1D34:000A.0068: unknown main item tag 0x0
[ 1562.079916][ T5761] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1562.080009][T28466] hid-led 0003:1D34:000A.0068: unknown main item tag 0x0
[ 1562.098597][   T46] usb usb4-port1: attempt power cycle
[ 1562.110409][ T5761] usb 2-1: device descriptor read/8, error -71
[ 1562.119074][T10261] usb 3-1: USB disconnect, device number 27
[ 1562.247104][T28466] hid-led 0003:1D34:000A.0068: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0
[ 1562.346077][T28466] hid-led 0003:1D34:000A.0068: Dream Cheeky Webmail Notifier initialized
[ 1562.359683][ T5761] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1562.400629][ T5761] usb 2-1: device descriptor read/8, error -71
[ 1562.449673][   T46] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1562.480590][   T46] usb 4-1: device descriptor read/8, error -71
[ 1562.520649][ T5761] usb usb2-port1: unable to enumerate USB device
[ 1562.543228][T30319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6829'.
[ 1562.582539][T28466] usb 1-1: USB disconnect, device number 61
[ 1562.725659][   T46] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1562.801142][   T46] usb 4-1: device descriptor read/8, error -71
[ 1562.874712][T30326] input: syz1 as /devices/virtual/input/input169
[ 1562.909959][   T46] usb usb4-port1: unable to enumerate USB device
[ 1563.062270][T30328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6835'.
[ 1563.073794][T30328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6835'.
[ 1563.589922][T28466] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1563.750254][T28466] usb 3-1: Using ep0 maxpacket: 32
[ 1563.768315][T28466] usb 3-1: config 2 has an invalid interface number: 13 but max is 0
[ 1563.783823][T28466] usb 3-1: config 2 has no interface number 0
[ 1563.810257][T28466] usb 3-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1563.845325][T28466] usb 3-1: config 2 interface 13 has no altsetting 0
[ 1563.868525][T28466] usb 3-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92
[ 1563.888246][T28466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.907257][T28466] usb 3-1: Product: syz
[ 1563.919900][T28466] usb 3-1: Manufacturer: syz
[ 1563.933100][T28466] usb 3-1: SerialNumber: syz
[ 1564.187943][T28466] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1564.304207][T30348] warn_alloc: 1 callbacks suppressed
[ 1564.304228][T30348] syz.1.6842: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1564.370606][T28466] usb 3-1: USB disconnect, device number 28
[ 1564.410888][T30348] CPU: 0 UID: 0 PID: 30348 Comm: syz.1.6842 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1564.410929][T30348] Tainted: [L]=SOFTLOCKUP
[ 1564.410938][T30348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1564.410950][T30348] Call Trace:
[ 1564.410960][T30348]  <TASK>
[ 1564.410969][T30348]  dump_stack_lvl+0xe8/0x150
[ 1564.410999][T30348]  warn_alloc+0x249/0x340
[ 1564.411031][T30348]  ? stack_trace_save+0xa9/0x100
[ 1564.411066][T30348]  ? __pfx_warn_alloc+0x10/0x10
[ 1564.411104][T30348]  ? kasan_save_track+0x4f/0x80
[ 1564.411132][T30348]  ? kasan_save_track+0x3e/0x80
[ 1564.411159][T30348]  ? __kasan_kmalloc+0x93/0xb0
[ 1564.411186][T30348]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1564.411214][T30348]  ? xskq_create+0x56/0x170
[ 1564.411243][T30348]  ? xsk_setsockopt+0x54c/0x990
[ 1564.411268][T30348]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1564.411294][T30348]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1564.411322][T30348]  ? do_syscall_64+0x174/0x580
[ 1564.411346][T30348]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1564.411411][T30348]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1564.411449][T30348]  ? __kasan_kmalloc+0x93/0xb0
[ 1564.411486][T30348]  vmalloc_user_noprof+0xad/0xe0
[ 1564.411514][T30348]  ? xskq_create+0xbf/0x170
[ 1564.411556][T30348]  xskq_create+0xbf/0x170
[ 1564.411587][T30348]  xsk_init_queue+0x8a/0xe0
[ 1564.411618][T30348]  xsk_setsockopt+0x54c/0x990
[ 1564.411648][T30348]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1564.411676][T30348]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1564.411709][T30348]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1564.411740][T30348]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1564.411765][T30348]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1564.411794][T30348]  do_sock_setsockopt+0x17c/0x1b0
[ 1564.411828][T30348]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1564.411862][T30348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.411885][T30348]  do_syscall_64+0x174/0x580
[ 1564.411904][T30348]  ? trace_irq_disable+0x3b/0x140
[ 1564.411933][T30348]  ? clear_bhb_loop+0x40/0x90
[ 1564.411958][T30348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.411979][T30348] RIP: 0033:0x7fa5f099ce59
[ 1564.412000][T30348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1564.412016][T30348] RSP: 002b:00007fa5f185c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1564.412039][T30348] RAX: ffffffffffffffda RBX: 00007fa5f0c15fa0 RCX: 00007fa5f099ce59
[ 1564.412053][T30348] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1564.412066][T30348] RBP: 00007fa5f0a32d6f R08: 0000000000000004 R09: 0000000000000000
[ 1564.412079][T30348] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1564.412092][T30348] R13: 00007fa5f0c16038 R14: 00007fa5f0c15fa0 R15: 00007fa5f0d3fa48
[ 1564.412127][T30348]  </TASK>
[ 1564.510012][T30348] Mem-Info:
[ 1564.743717][T30348] active_anon:8526 inactive_anon:0 isolated_anon:0
[ 1564.743717][T30348]  active_file:24786 inactive_file:4243 isolated_file:0
[ 1564.743717][T30348]  unevictable:768 dirty:223 writeback:0
[ 1564.743717][T30348]  slab_reclaimable:7157 slab_unreclaimable:101770
[ 1564.743717][T30348]  mapped:32798 shmem:3223 pagetables:1352
[ 1564.743717][T30348]  sec_pagetables:0 bounce:0
[ 1564.743717][T30348]  kernel_misc_reclaimable:0
[ 1564.743717][T30348]  free:1319548 free_pcp:8481 free_cma:0
[ 1564.798348][T29508] udevd[29508]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1564.856293][T30348] Node 0 active_anon:34404kB inactive_anon:0kB active_file:98932kB inactive_file:16840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131280kB dirty:892kB writeback:0kB shmem:11756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13128kB pagetables:5360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1564.943877][T30348] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1565.063886][T30348] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1565.135573][T30357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1565.175959][T30348] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1565.196458][T30348] Node 0 DMA32 free:1317372kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41928kB inactive_anon:0kB active_file:98932kB inactive_file:16840kB unevictable:1536kB writepending:904kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:21304kB local_pcp:9456kB free_cma:0kB
[ 1565.239791][T30348] lowmem_reserve[]: 0 0 0 0 0
[ 1565.272349][T30348] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1565.381111][T30348] lowmem_reserve[]: 0 0 0 0 0
[ 1565.396596][T30363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6848'.
[ 1565.406591][T30348] Node 1 Normal free:3941388kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9828kB local_pcp:0kB free_cma:0kB
[ 1565.496679][T30348] lowmem_reserve[]: 0 0 0 0 0
[ 1565.513480][T30348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1565.565610][T30348] Node 0 DMA32: 6776*4kB (UME) 8758*8kB (UME) 5051*16kB (UME) 2361*32kB (UME) 1497*64kB (UME) 993*128kB (UME) 635*256kB (UME) 343*512kB (UME) 172*1024kB (UME) 25*2048kB (UME) 67*4096kB (UM) = 1316384kB
[ 1565.624343][T30348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1565.644980][T30348] Node 1 Normal: 16*4kB (UM) 14*8kB (U) 15*16kB (UM) 9*32kB (UM) 6*64kB (U) 8*128kB (UM) 4*256kB (U) 2*512kB (UM) 1*1024kB (U) 2*2048kB (M) 960*4096kB (UM) = 3941440kB
[ 1565.682439][T30348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1565.706983][T30348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1565.730985][T28466] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1565.773269][T30348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1565.809337][T30348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1565.839037][T30348] 34742 total pagecache pages
[ 1565.853367][T30348] 0 pages in swap cache
[ 1565.869466][T30348] Free swap  = 124996kB
[ 1565.877028][T30348] Total swap = 124996kB
[ 1565.887942][T30348] 2097051 pages RAM
[ 1565.898007][T30348] 0 pages HighMem/MovableOnly
[ 1565.899968][T28466] usb 5-1: Using ep0 maxpacket: 8
[ 1565.908163][T30348] 427066 pages reserved
[ 1565.915901][T30348] 0 pages cma reserved
[ 1565.945576][T28466] usb 5-1: config 4 has an invalid interface number: 86 but max is 0
[ 1565.972929][T28466] usb 5-1: config 4 has no interface number 0
[ 1565.991345][T28466] usb 5-1: config 4 interface 86 has no altsetting 0
[ 1566.023230][T28466] usb 5-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=8a.56
[ 1566.052780][T28466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.069713][ T5761] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1566.089763][T28466] usb 5-1: Product: syz
[ 1566.100186][T28466] usb 5-1: Manufacturer: syz
[ 1566.109686][T28466] usb 5-1: SerialNumber: syz
[ 1566.239622][ T5761] usb 1-1: Using ep0 maxpacket: 8
[ 1566.256128][ T5761] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1566.269935][    T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1566.291181][ T5761] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41
[ 1566.328145][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.358706][ T5761] usb 1-1: Product: syz
[ 1566.368921][T30363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6848'.
[ 1566.380865][ T5761] usb 1-1: Manufacturer: syz
[ 1566.397786][ T5761] usb 1-1: SerialNumber: syz
[ 1566.438779][T28466] uvcvideo 5-1:4.86: Found Unit with invalid ID 0
[ 1566.458813][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1566.475512][T28466] uvcvideo 5-1:4.86: probe with driver uvcvideo failed with error -22
[ 1566.499351][T28466] usb 5-1: USB disconnect, device number 110
[ 1566.500802][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1566.557618][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1566.613667][    T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1566.633235][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.646792][ T5761] gspca_main: spca506-2.14.0 probing 99fa:8988
[ 1566.676462][    T9] usb 2-1: Product: syz
[ 1566.696424][    T9] usb 2-1: Manufacturer: syz
[ 1566.715083][    T9] usb 2-1: SerialNumber: syz
[ 1566.887206][ T5761] usb 1-1: USB disconnect, device number 62
[ 1566.989764][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1567.218350][    T9] usb 2-1: disable ehci-hcd to run US-144
[ 1567.265294][    T9] usb 2-1: USB disconnect, device number 86
[ 1567.366958][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'.
[ 1567.380153][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1567.411114][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'.
[ 1567.619869][ T5761] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1567.755779][T30388] sg_write: data in/out 425984/136 bytes for SCSI command 0x0-- guessing data in;
[ 1567.755779][T30388]    program syz.1.6856 not setting count and/or reply_len properly
[ 1567.822711][ T5761] usb 5-1: Using ep0 maxpacket: 16
[ 1567.844405][ T5761] usb 5-1: no configurations
[ 1567.855634][ T5761] usb 5-1: can't read configurations, error -22
[ 1567.987354][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1567.987375][   T29] audit: type=1326 audit(1780084943.582:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30390 comm="syz.3.6858" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4611b9ce59 code=0x0
[ 1568.019878][ T5761] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1568.049685][ T5634] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1568.199968][ T5761] usb 5-1: Using ep0 maxpacket: 16
[ 1568.209633][ T5634] usb 2-1: Using ep0 maxpacket: 16
[ 1568.232125][ T5761] usb 5-1: no configurations
[ 1568.244005][ T5634] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1568.253056][ T5761] usb 5-1: can't read configurations, error -22
[ 1568.273234][ T5634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1568.286626][ T5761] usb usb5-port1: attempt power cycle
[ 1568.305134][ T5634] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1568.331387][ T5634] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1568.377473][ T5634] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[ 1568.399179][ T5634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1568.418983][ T5634] usb 2-1: Product: syz
[ 1568.433679][ T5634] usb 2-1: Manufacturer: syz
[ 1568.449103][ T5634] usb 2-1: SerialNumber: syz
[ 1568.639772][ T5761] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1568.690393][ T5761] usb 5-1: Using ep0 maxpacket: 16
[ 1568.698264][ T5761] usb 5-1: no configurations
[ 1568.703335][ T5761] usb 5-1: can't read configurations, error -22
[ 1568.849692][ T5761] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1568.894434][ T5761] usb 5-1: Using ep0 maxpacket: 16
[ 1568.912213][ T5761] usb 5-1: no configurations
[ 1568.927687][ T5761] usb 5-1: can't read configurations, error -22
[ 1568.946644][ T5761] usb usb5-port1: unable to enumerate USB device
[ 1569.768877][   T29] audit: type=1326 audit(1780084945.362:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30419 comm="syz.3.6868" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4611b9ce59 code=0x0
[ 1569.874681][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'.
[ 1569.884905][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'.
[ 1570.249702][ T5761] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1570.420636][ T5761] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1570.431689][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.440423][ T5761] usb 3-1: Product: syz
[ 1570.444807][ T5761] usb 3-1: Manufacturer: syz
[ 1570.450295][ T5761] usb 3-1: SerialNumber: syz
[ 1570.461310][ T5761] usb 3-1: config 0 descriptor??
[ 1570.481215][ T5761] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1570.487666][ T5761] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1570.497345][ T5761] f81232 3-1:0.0: f81534a converter detected
[ 1570.697776][ T5634] usb 2-1: 0:2 : does not exist
[ 1570.708190][T30429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1570.734343][T30429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.767171][ T5761] usb 3-1: f81534a converter now attached to ttyUSB0
[ 1570.874741][ T5634] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1570.910411][ T5634] usb 2-1: USB disconnect, device number 87
[ 1570.996672][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1571.080968][T25142] usb 3-1: USB disconnect, device number 29
[ 1571.173978][T25142] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[ 1571.203638][T25142] f81232 3-1:0.0: device disconnected
[ 1571.949491][T30467] program syz.1.6883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1572.030682][T30472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'.
[ 1572.246023][T30480] tipc: Failed to remove unknown binding: 66,1,1/2468590932:325123389/325123391
[ 1572.272735][T30481] tipc: Failed to remove unknown binding: 66,1,1/2468590932:325123389/325123391
[ 1572.287963][T10259] IPVS: starting estimator thread 0...
[ 1572.379699][T30483] IPVS: using max 50 ests per chain, 120000 per kthread
[ 1572.909681][ T5634] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1573.071380][ T5634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1573.099138][ T5634] usb 5-1: config 0 has no interfaces?
[ 1573.117790][ T5634] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1573.139462][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.164785][ T5634] usb 5-1: Product: syz
[ 1573.178316][ T5634] usb 5-1: Manufacturer: syz
[ 1573.199879][ T5634] usb 5-1: SerialNumber: syz
[ 1573.216308][ T5634] usb 5-1: config 0 descriptor??
[ 1573.437475][T30490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6889'.
[ 1573.538055][T10259] usb 5-1: USB disconnect, device number 115
[ 1573.879887][ T5634] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1574.030802][T10259] usb 5-1: new full-speed USB device number 116 using dummy_hcd
[ 1574.049828][ T5634] usb 1-1: Using ep0 maxpacket: 32
[ 1574.065382][ T5634] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[ 1574.084948][ T5634] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.112198][ T5634] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1574.129847][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.138070][ T5634] usb 1-1: Product: syz
[ 1574.143946][ T5634] usb 1-1: Manufacturer: syz
[ 1574.148617][ T5634] usb 1-1: SerialNumber: syz
[ 1574.172264][ T5634] usb 1-1: config 0 descriptor??
[ 1574.215086][ T5634] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1574.231128][T10259] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1574.269147][T10259] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[ 1574.288565][T10259] usb 5-1: config 0 has no interface number 0
[ 1574.317132][T10259] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1574.347989][T10259] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1574.369661][T10259] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1574.395008][T10259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.397995][T30529] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6901'.
[ 1574.462168][T10259] usb 5-1: config 0 descriptor??
[ 1574.482666][T30507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1574.507909][T30531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6902'.
[ 1574.607144][T11497] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1574.620270][T30531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6902'.
[ 1574.634661][T11497] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1574.656126][T11497] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1574.667723][T11497] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1574.861517][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1575.049840][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1575.061142][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.079347][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1575.106082][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1575.122539][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1575.141705][T10259] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input170
[ 1575.146435][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1575.187729][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1575.223015][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1575.252046][    T9] usb 2-1: Manufacturer: syz
[ 1575.326868][    T9] usb 2-1: config 0 descriptor??
[ 1575.440542][T10259] usb 5-1: USB disconnect, device number 116
[ 1575.440612][    C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[ 1575.653901][    T9] rc_core: IR keymap rc-hauppauge not found
[ 1575.663867][    T9] Registered IR keymap rc-empty
[ 1575.669378][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.699808][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.719736][ T5761] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 1575.729776][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1575.758387][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input171
[ 1575.781802][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.811319][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.829835][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.859704][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.890226][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.899714][ T5761] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1575.924271][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.933310][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.980019][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1575.989063][ T5761] usb 3-1: config 0 descriptor??
[ 1576.031631][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1576.069683][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1576.100022][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1576.138460][    T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1576.162130][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1576.224720][ T5761] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1576.280800][T30535] kvm: apic: phys broadcast and lowest prio
[ 1576.302531][ T5634] gspca_sunplus: reg_r err -71
[ 1576.316529][T10259] usb 2-1: USB disconnect, device number 88
[ 1576.321650][ T5634] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[ 1576.376491][ T5634] usb 1-1: USB disconnect, device number 63
[ 1577.172733][T30552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6908'.
[ 1577.321989][ T5761] [drm:udl_init] *ERROR* Selecting channel failed
[ 1577.356261][T30555] warn_alloc: 5 callbacks suppressed
[ 1577.356281][T30555] syz.3.6909: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1577.403425][ T5761] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[ 1577.412402][T30555] CPU: 0 UID: 0 PID: 30555 Comm: syz.3.6909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1577.412439][T30555] Tainted: [L]=SOFTLOCKUP
[ 1577.412447][T30555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1577.412460][T30555] Call Trace:
[ 1577.412470][T30555]  <TASK>
[ 1577.412479][T30555]  dump_stack_lvl+0xe8/0x150
[ 1577.412511][T30555]  warn_alloc+0x249/0x340
[ 1577.412545][T30555]  ? stack_trace_save+0xa9/0x100
[ 1577.412581][T30555]  ? __pfx_warn_alloc+0x10/0x10
[ 1577.412619][T30555]  ? kasan_save_track+0x4f/0x80
[ 1577.412647][T30555]  ? kasan_save_track+0x3e/0x80
[ 1577.412673][T30555]  ? __kasan_kmalloc+0x93/0xb0
[ 1577.412701][T30555]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1577.412730][T30555]  ? xskq_create+0x56/0x170
[ 1577.412758][T30555]  ? xsk_setsockopt+0x54c/0x990
[ 1577.412790][T30555]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1577.412819][T30555]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1577.412847][T30555]  ? do_syscall_64+0x174/0x580
[ 1577.412871][T30555]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1577.412931][T30555]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1577.412964][T30555]  ? __kasan_kmalloc+0x93/0xb0
[ 1577.412997][T30555]  vmalloc_user_noprof+0xad/0xe0
[ 1577.413023][T30555]  ? xskq_create+0xbf/0x170
[ 1577.413051][T30555]  xskq_create+0xbf/0x170
[ 1577.413083][T30555]  xsk_init_queue+0x8a/0xe0
[ 1577.413112][T30555]  xsk_setsockopt+0x54c/0x990
[ 1577.413141][T30555]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1577.413168][T30555]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1577.413200][T30555]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1577.413232][T30555]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1577.413259][T30555]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1577.413287][T30555]  do_sock_setsockopt+0x17c/0x1b0
[ 1577.413323][T30555]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1577.413358][T30555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1577.413381][T30555]  do_syscall_64+0x174/0x580
[ 1577.413410][T30555]  ? trace_irq_disable+0x3b/0x140
[ 1577.413439][T30555]  ? clear_bhb_loop+0x40/0x90
[ 1577.413465][T30555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1577.413485][T30555] RIP: 0033:0x7f4611b9ce59
[ 1577.413506][T30555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1577.413523][T30555] RSP: 002b:00007f4612a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1577.413546][T30555] RAX: ffffffffffffffda RBX: 00007f4611e15fa0 RCX: 00007f4611b9ce59
[ 1577.413561][T30555] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1577.413574][T30555] RBP: 00007f4611c32d6f R08: 0000000000000004 R09: 0000000000000000
[ 1577.413588][T30555] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1577.413601][T30555] R13: 00007f4611e16038 R14: 00007f4611e15fa0 R15: 00007f4611f3fa48
[ 1577.413635][T30555]  </TASK>
[ 1577.413688][ T5761] [drm] Initialized udl on minor 2
[ 1577.489961][T30555] Mem-Info:
[ 1577.551894][ T5761] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1577.655386][T30555] active_anon:19314 inactive_anon:0 isolated_anon:0
[ 1577.655386][T30555]  active_file:28800 inactive_file:4249 isolated_file:0
[ 1577.655386][T30555]  unevictable:768 dirty:114 writeback:0
[ 1577.655386][T30555]  slab_reclaimable:7130 slab_unreclaimable:102604
[ 1577.655386][T30555]  mapped:34515 shmem:14528 pagetables:1299
[ 1577.655386][T30555]  sec_pagetables:0 bounce:0
[ 1577.655386][T30555]  kernel_misc_reclaimable:0
[ 1577.655386][T30555]  free:1295182 free_pcp:16553 free_cma:0
[ 1577.716949][ T5761] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1577.776405][T30555] Node 0 active_anon:71856kB inactive_anon:0kB active_file:114988kB inactive_file:16864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137956kB dirty:456kB writeback:0kB shmem:50676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13200kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1577.777472][T30557] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[ 1577.846510][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1577.855077][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1577.859905][T30555] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1577.867581][ T5761] usb 3-1: USB disconnect, device number 30
[ 1577.959630][T30555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1578.012560][T30555] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1578.030152][T30555] Node 0 DMA32 free:1229024kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61540kB inactive_anon:0kB active_file:114988kB inactive_file:16864kB unevictable:1536kB writepending:572kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:66284kB local_pcp:28312kB free_cma:0kB
[ 1578.070117][ T5634] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1578.125867][T30555] lowmem_reserve[]: 0 0 0 0 0
[ 1578.150257][T30555] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1578.223984][T30555] lowmem_reserve[]: 0 0 0 0 0
[ 1578.237699][T30555] Node 1 Normal free:3942448kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8820kB local_pcp:0kB free_cma:0kB
[ 1578.300450][ T5634] usb 1-1: Using ep0 maxpacket: 16
[ 1578.311309][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1578.323083][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1578.330037][T30555] lowmem_reserve[]: 0 0 0 0 0
[ 1578.348115][T30555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1578.349683][ T5634] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1578.396398][ T5634] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1578.399962][T28466] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1578.417438][T30555] Node 0 DMA32: 7432*4kB (UME) 7425*8kB (UME) 3987*16kB (UME) 1600*32kB (UME) 1508*64kB (UME) 906*128kB (UME) 633*256kB (UME) 350*512kB (UME) 171*1024kB (UME) 21*2048kB (UME) 65*4096kB (UM) = 1242200kB
[ 1578.418099][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.459743][T30555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1578.490580][T30555] Node 1 Normal: 16*4kB (UM) 14*8kB (U) 16*16kB (UM) 8*32kB (U) 6*64kB (U) 8*128kB (UM) 4*256kB (U) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (UM) = 3942448kB
[ 1578.493584][ T5634] usb 1-1: config 0 descriptor??
[ 1578.534660][T30555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1578.579642][T30555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1578.590050][T28466] usb 5-1: Using ep0 maxpacket: 32
[ 1578.600247][T28466] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1578.625960][T28466] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1578.637941][T30555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1578.653745][T30555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1578.666442][T30555] 34424 total pagecache pages
[ 1578.673137][T28466] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1578.684030][T28466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1578.692742][T28466] usb 5-1: Product: syz
[ 1578.697097][T28466] usb 5-1: Manufacturer: syz
[ 1578.702300][T30555] 0 pages in swap cache
[ 1578.706595][T28466] usb 5-1: SerialNumber: syz
[ 1578.713176][T30555] Free swap  = 124996kB
[ 1578.728531][T30555] Total swap = 124996kB
[ 1578.744443][T30555] 2097051 pages RAM
[ 1578.748909][T30555] 0 pages HighMem/MovableOnly
[ 1578.754612][T30555] 427066 pages reserved
[ 1578.797385][T30555] 0 pages cma reserved
[ 1578.950255][T28466] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1578.957985][ T5634] shield 0003:0955:7214.0069: unknown main item tag 0x4
[ 1578.968632][ T5634] shield 0003:0955:7214.0069: item fetching failed at offset 2/5
[ 1579.009651][ T5634] shield 0003:0955:7214.0069: Parse failed
[ 1579.040962][ T5634] shield 0003:0955:7214.0069: probe with driver shield failed with error -22
[ 1579.068371][T28466] usb 5-1: disable ehci-hcd to run US-144
[ 1579.125677][T28466] usb 5-1: USB disconnect, device number 117
[ 1579.217262][   T46] usb 1-1: USB disconnect, device number 64
[ 1579.295803][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1579.903385][T30596] netlink: 'syz.1.6920': attribute type 13 has an invalid length.
[ 1579.920865][T30596] netlink: 'syz.1.6920': attribute type 27 has an invalid length.
[ 1579.961416][T30603] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1580.205445][T30609] ipvlan2: entered promiscuous mode
[ 1580.222799][T30609] bridge0: port 3(ipvlan2) entered blocking state
[ 1580.230770][T30609] bridge0: port 3(ipvlan2) entered disabled state
[ 1580.237977][T30609] ipvlan2: entered allmulticast mode
[ 1580.283241][T30609] bridge0: entered allmulticast mode
[ 1580.333787][T30611] netlink: 'syz.3.6923': attribute type 1 has an invalid length.
[ 1580.362011][T30611] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6923'.
[ 1580.392752][T30609] ipvlan2: left allmulticast mode
[ 1580.429772][T30609] bridge0: left allmulticast mode
[ 1580.860094][ T5761] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1581.000832][   T29] audit: type=1326 audit(1780084956.592:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30620 comm="syz.3.6927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4611b9ce59 code=0x0
[ 1581.051668][ T5761] usb 5-1: Using ep0 maxpacket: 8
[ 1581.070199][ T5761] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1581.095382][ T5761] usb 5-1: config 179 has no interface number 0
[ 1581.118247][ T5761] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1581.193097][ T5761] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1581.228416][ T5761] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1581.271437][ T5761] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1581.310402][ T5761] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1581.334061][ T5761] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1581.368597][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.422289][T30619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1582.233360][ T5761] usb 5-1: USB disconnect, device number 118
[ 1582.233434][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1582.247866][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1582.609781][ T5634] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1582.777801][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1582.814939][ T5634] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1582.842823][ T5634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.878130][ T5634] usb 2-1: config 0 descriptor??
[ 1582.903340][T30627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1583.026021][T30634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6933'.
[ 1583.160142][   T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1583.303770][T30645] lo: Caught tx_queue_len zero misconfig
[ 1583.340037][   T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1583.426494][T30650] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6937'.
[ 1583.525631][ T5634] usbhid 2-1:0.0: can't add hid device: -71
[ 1583.540125][T29985] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1583.548389][ T5761] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1583.557447][ T5634] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1583.592092][ T5634] usb 2-1: USB disconnect, device number 89
[ 1583.731995][ T5761] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1583.741426][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.753133][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1583.762764][ T5761] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1583.778635][ T5761] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1583.788828][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1583.800357][ T5761] usb 1-1: Product: syz
[ 1583.805683][ T5761] usb 1-1: Manufacturer: syz
[ 1583.826190][ T5761] cdc_wdm 1-1:1.0: skipping garbage
[ 1583.832556][ T5761] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1583.872414][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.884626][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.905012][T30657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.920102][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1583.932517][T30657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.947419][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1584.026027][ T5634] usb 1-1: USB disconnect, device number 65
[ 1584.121924][T30665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1584.153077][T30665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1584.405153][T30674] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6944'.
[ 1584.559897][T10261] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1584.570038][T29989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1584.586272][T29989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1584.675167][T30680] netlink: 'syz.0.6946': attribute type 1 has an invalid length.
[ 1584.704040][T30684] netlink: 'syz.0.6946': attribute type 1 has an invalid length.
[ 1584.729942][T10261] usb 4-1: Using ep0 maxpacket: 16
[ 1584.740506][T10261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.768233][T10261] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1584.780308][T30680] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1584.786989][T10261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.797800][T10261] usb 4-1: Product: syz
[ 1584.802654][T10261] usb 4-1: Manufacturer: syz
[ 1584.808404][T10261] usb 4-1: SerialNumber: syz
[ 1584.829902][T10261] usb 4-1: config 0 descriptor??
[ 1584.848055][T10261] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1584.855689][T10261] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1584.872434][T10261] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1584.987871][T10261] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1585.073089][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1585.170075][T10261] usb 4-1: USB disconnect, device number 54
[ 1585.279791][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1585.462992][ T5634] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1585.475886][    T9] usb 1-1: config 6 has an invalid interface number: 143 but max is 2
[ 1585.490138][    T9] usb 1-1: config 6 has an invalid interface number: 232 but max is 2
[ 1585.504385][    T9] usb 1-1: config 6 has an invalid interface number: 36 but max is 2
[ 1585.515108][    T9] usb 1-1: config 6 has an invalid interface number: 30 but max is 2
[ 1585.524123][    T9] usb 1-1: config 6 has an invalid interface number: 21 but max is 2
[ 1585.533805][    T9] usb 1-1: config 6 has 5 interfaces, different from the descriptor's value: 3
[ 1585.545777][    T9] usb 1-1: config 6 has no interface number 0
[ 1585.552858][    T9] usb 1-1: config 6 has no interface number 1
[ 1585.559372][    T9] usb 1-1: config 6 has no interface number 2
[ 1585.566106][    T9] usb 1-1: config 6 has no interface number 3
[ 1585.574411][    T9] usb 1-1: config 6 has no interface number 4
[ 1585.588251][    T9] usb 1-1: config 6 interface 143 altsetting 9 bulk endpoint 0x2 has invalid maxpacket 1023
[ 1585.611639][T20206] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1585.625330][    T9] usb 1-1: config 6 interface 143 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1585.652504][ T5634] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[ 1585.664786][    T9] usb 1-1: config 6 interface 143 altsetting 9 bulk endpoint 0xC has invalid maxpacket 8
[ 1585.686780][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.705959][    T9] usb 1-1: config 6 interface 143 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[ 1585.731312][ T5634] usb 5-1: config 0 descriptor??
[ 1585.743400][    T9] usb 1-1: config 6 interface 143 altsetting 9 endpoint 0x8A has an invalid bInterval 244, changing to 11
[ 1585.767718][ T5634] gspca_main: spca505-2.14.0 probing 0733:0430
[ 1585.818213][    T9] usb 1-1: config 6 interface 143 altsetting 9 endpoint 0x8A has invalid maxpacket 16504, setting to 1024
[ 1585.856814][    T9] usb 1-1: config 6 interface 143 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 7
[ 1585.889081][    T9] usb 1-1: config 6 interface 232 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[ 1585.923371][    T9] usb 1-1: config 6 interface 36 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[ 1585.966391][    T9] usb 1-1: config 6 interface 30 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16
[ 1586.011220][    T9] usb 1-1: config 6 interface 30 altsetting 11 has a duplicate endpoint with address 0x6, skipping
[ 1586.065282][    T9] usb 1-1: config 6 interface 30 altsetting 11 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1586.113196][    T9] usb 1-1: config 6 interface 30 altsetting 11 has a duplicate endpoint with address 0xE, skipping
[ 1586.146427][    T9] usb 1-1: config 6 interface 30 altsetting 11 has a duplicate endpoint with address 0xA, skipping
[ 1586.163521][T30704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6951'.
[ 1586.212002][    T9] usb 1-1: config 6 interface 30 altsetting 11 has 5 endpoint descriptors, different from the interface descriptor's value: 11
[ 1586.239333][    T9] usb 1-1: too many endpoints for config 6 interface 21 altsetting 48: 34, using maximum allowed: 30
[ 1586.263098][    T9] usb 1-1: config 6 interface 21 altsetting 48 has an invalid descriptor for endpoint zero, skipping
[ 1586.291416][    T9] usb 1-1: config 6 interface 21 altsetting 48 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1586.305687][ T5634] gspca_spca505: reg write: error -110
[ 1586.314970][ T5634] spca505 5-1:0.0: probe with driver spca505 failed with error -5
[ 1586.333986][    T9] usb 1-1: config 6 interface 21 altsetting 48 has a duplicate endpoint with address 0xA, skipping
[ 1586.372749][    T9] usb 1-1: config 6 interface 21 altsetting 48 has a duplicate endpoint with address 0xC, skipping
[ 1586.408925][    T9] usb 1-1: config 6 interface 21 altsetting 48 has a duplicate endpoint with address 0xB, skipping
[ 1586.442470][    T9] usb 1-1: config 6 interface 21 altsetting 48 has 6 endpoint descriptors, different from the interface descriptor's value: 34
[ 1586.504582][    T9] usb 1-1: config 6 interface 143 has no altsetting 0
[ 1586.529722][    T9] usb 1-1: config 6 interface 232 has no altsetting 0
[ 1586.543864][    T9] usb 1-1: config 6 interface 36 has no altsetting 0
[ 1586.570259][    T9] usb 1-1: config 6 interface 30 has no altsetting 0
[ 1586.597518][    T9] usb 1-1: config 6 interface 21 has no altsetting 0
[ 1586.615953][    T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=0714, bcdDevice=b5.4c
[ 1586.633740][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.651121][    T9] usb 1-1: Product: х
[ 1586.660081][    T9] usb 1-1: Manufacturer: 䖐
[ 1586.668256][    T9] usb 1-1: SerialNumber: п
[ 1586.683987][T30691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1586.695573][T30691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1586.813983][T25142] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1586.989662][T25142] usb 3-1: Using ep0 maxpacket: 8
[ 1587.002289][T25142] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1587.022869][T25142] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1587.043542][T25142] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1587.067410][T25142] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1587.094989][T25142] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1587.123242][T25142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.364972][T25142] usb 3-1: GET_CAPABILITIES returned 0
[ 1587.372428][T25142] usbtmc 3-1:16.0: can't read capabilities
[ 1587.572587][T30708] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32
[ 1587.601181][T25142] usb 3-1: USB disconnect, device number 31
[ 1587.707674][    T9] usb 1-1: USB disconnect, device number 66
[ 1588.140433][    T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1588.266837][T10261] usb 5-1: USB disconnect, device number 119
[ 1588.333005][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1588.373217][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1588.396103][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1588.423723][    T9] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1588.433559][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.446703][    T9] usb 1-1: Product: syz
[ 1588.451727][    T9] usb 1-1: Manufacturer: syz
[ 1588.456637][    T9] usb 1-1: SerialNumber: syz
[ 1588.479959][T20206] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[ 1588.569793][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1588.644484][T20206] usb 3-1: No LPM exit latency info found, disabling LPM.
[ 1588.657686][T20206] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1588.667989][T20206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.670859][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.678082][T20206] usb 3-1: Product: 츨땧๭
[ 1588.693112][T20206] usb 3-1: Manufacturer: 艋䔖殏쓣늳ꗏ淡뵆䒂ﻘ汜ꍔ趀짛㥥ꛡ챣ᾡ笅鸲꿟퇄ꦩꓹㆊɵ簩矛᩶棱䈉ਇ⧌䓩峤腬遼↎嬿콕썋뒤蜄糥蹰㫈锞㼝틿∌饐財१傃䢎ϳꨌ感ђ㏍ﾔ춫녩㞥㨸洨篿亣嫓贙呃옄ಉ폐救紥ẻ╠䝷㱕絷퍏籍Ɍ罈⨻넸㍞䲊崠發⚳襟䓒瞯༹䨽ᵷ迋块ꇪꢲ
[ 1588.700282][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.728697][T20206] usb 3-1: SerialNumber: я
[ 1588.763379][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.773101][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.784172][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.795592][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.806832][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.818547][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.830916][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1588.842139][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1588.871491][T30728] netlink: 'syz.1.6961': attribute type 10 has an invalid length.
[ 1588.879874][T25142] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1588.921113][    T9] usb 1-1: Audio class v2/v3 interfaces need an interface association
[ 1588.930245][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1589.030445][T25142] usb 5-1: Using ep0 maxpacket: 32
[ 1589.038982][T25142] usb 5-1: config 1 has an invalid interface number: 101 but max is 2
[ 1589.052927][T25142] usb 5-1: config 1 has an invalid descriptor of length 206, skipping remainder of the config
[ 1589.070148][T25142] usb 5-1: config 1 has no interface number 2
[ 1589.077509][T25142] usb 5-1: too many endpoints for config 1 interface 101 altsetting 216: 228, using maximum allowed: 30
[ 1589.094906][T25142] usb 5-1: config 1 interface 101 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 228
[ 1589.128596][T25142] usb 5-1: config 1 interface 101 has no altsetting 0
[ 1589.149183][T25142] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1589.168935][T25142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.171466][T20206] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1589.182418][T25142] usb 5-1: Product: syz
[ 1589.189003][T25142] usb 5-1: Manufacturer: syz
[ 1589.193868][T25142] usb 5-1: SerialNumber: syz
[ 1589.229029][T20206] usb 3-1: MIDIStreaming interface descriptor not found
[ 1589.294813][   T46] usb 1-1: USB disconnect, device number 67
[ 1589.424652][T20206] usb 3-1: USB disconnect, device number 32
[ 1589.667938][T30746] usb usb8: usbfs: process 30746 (syz.1.6966) did not claim interface 0 before use
[ 1589.678466][T25142] usb 5-1: disable ehci-hcd to run US-144
[ 1589.726145][T25142] usb 5-1: USB disconnect, device number 120
[ 1589.853517][T29554] udevd[29554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1589.921973][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1590.556543][T30766] xt_socket: unknown flags 0xc
[ 1590.575712][T30766] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1590.597030][T30766] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1590.691081][T25142] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1590.784255][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6978'.
[ 1590.806119][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6978'.
[ 1590.845080][T30773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6977'.
[ 1590.859964][T25142] usb 5-1: Using ep0 maxpacket: 32
[ 1590.872087][T25142] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1590.893201][T25142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1590.913267][T25142] usb 5-1: Product: syz
[ 1590.920560][T30773] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1590.927411][T25142] usb 5-1: Manufacturer: syz
[ 1590.932370][T25142] usb 5-1: SerialNumber: syz
[ 1590.947011][T25142] usb 5-1: config 0 descriptor??
[ 1590.963247][T25142] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1591.539967][T20206] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1591.659861][T10261] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1591.699819][T20206] usb 4-1: Using ep0 maxpacket: 32
[ 1591.711644][T20206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.731220][T20206] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1591.747942][T20206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.758656][T20206] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1591.775195][T20206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.786084][T20206] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1591.802832][T20206] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a
[ 1591.813197][T20206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.823451][T20206] usb 4-1: Product: syz
[ 1591.829396][T20206] usb 4-1: Manufacturer: syz
[ 1591.835350][T10261] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[ 1591.844402][T10261] usb 3-1: config 160 has no interface number 0
[ 1591.851870][T10261] usb 3-1: config 160 interface 200 has no altsetting 0
[ 1591.859154][T20206] usb 4-1: SerialNumber: syz
[ 1591.868992][T10261] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1591.882156][T10261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.891832][T10261] usb 3-1: Product: syz
[ 1591.896200][T20206] usb 4-1: config 0 descriptor??
[ 1591.902005][T10261] usb 3-1: Manufacturer: syz
[ 1591.909427][T20206] cdc_acm 4-1:0.0: Zero length descriptor references
[ 1591.917647][T20206] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[ 1591.928139][T10261] usb 3-1: SerialNumber: syz
[ 1592.157991][T30793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1592.170918][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1592.183980][T30793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1592.221804][T10261] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1592.243381][T10261] usb 3-1: MIDIStreaming interface descriptor not found
[ 1592.374198][T10261] usb 3-1: USB disconnect, device number 33
[ 1592.486710][T29554] udevd[29554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1592.650520][    T9] usb 4-1: USB disconnect, device number 55
[ 1592.857985][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6988'.
[ 1592.867494][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6988'.
[ 1592.923745][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6988'.
[ 1592.926365][T29987] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.960905][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6988'.
[ 1592.966093][T29987] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.999698][T29987] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1593.014681][T29987] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1593.045945][T25142] gspca_ov534_9: reg_r err -71
[ 1593.049993][T30811] loop5: detected capacity change from 0 to 3447
[ 1593.116402][T29760] buffer_io_error: 322 callbacks suppressed
[ 1593.116424][T29760] Buffer I/O error on dev loop5, logical block 430, async page read
[ 1593.339915][T25142] gspca_ov534_9: Unknown sensor 0000
[ 1593.341635][T25142] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[ 1593.383226][T25142] usb 5-1: USB disconnect, device number 121
[ 1593.720639][T10261] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1593.880205][T10261] usb 1-1: Using ep0 maxpacket: 32
[ 1593.888685][T10261] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1593.900223][T10261] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1593.911501][T10261] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1593.920011][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1593.937789][T10261] usb 1-1: New USB device found, idVendor=00e4, idProduct=0000, bcdDevice= 0.40
[ 1593.956044][T10261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.965053][T10261] usb 1-1: Product: syz
[ 1593.970225][T10261] usb 1-1: Manufacturer: syz
[ 1593.975222][T10261] usb 1-1: SerialNumber: syz
[ 1594.102002][T25142] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1594.115603][    T9] usb 4-1: too many configurations: 158, using maximum allowed: 8
[ 1594.160102][T20206] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1594.189093][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1594.219390][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.246985][    T9] usb 4-1: Product: syz
[ 1594.264218][    T9] usb 4-1: Manufacturer: syz
[ 1594.286295][    T9] usb 4-1: SerialNumber: syz
[ 1594.294553][T25142] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[ 1594.322642][T25142] usb 2-1: config 0 has no interface number 0
[ 1594.334347][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1594.352087][T20206] usb 5-1: config index 0 descriptor too short (expected 12336, got 36)
[ 1594.375403][T25142] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1594.390041][T20206] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1594.411893][ T5634] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1594.417284][T20206] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[ 1594.442167][T20206] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1594.485358][T25142] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1594.505491][T20206] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1594.525627][T20206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.555881][T25142] usb 2-1: config 0 interface 255 has no altsetting 0
[ 1594.593648][T25142] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1594.633758][T25142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.649931][T28466] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1594.664021][T30828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1594.666404][T10261] usb 1-1: USB disconnect, device number 68
[ 1594.710991][T25142] usb 2-1: config 0 descriptor??
[ 1594.735580][T30828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1594.775613][T25142] cp210x 2-1:0.255: cp210x converter detected
[ 1594.814373][    T9] usb 4-1: USB disconnect, device number 56
[ 1594.843905][T28466] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1594.873409][T28466] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1594.896441][T28466] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1594.915960][T28466] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1594.935734][T28466] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1594.960325][T28466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.007588][T28466] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1595.038169][T28466] usb 3-1: invalid MIDI out EP 0
[ 1595.160855][T25142] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32
[ 1595.331965][T28466] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1595.366703][T28466] usb 3-1: USB disconnect, device number 34
[ 1595.387371][T25142] cp210x 2-1:0.255: failed to get vendor val 0x370c size 15: -121
[ 1595.409849][T25142] cp210x 2-1:0.255: GPIO initialisation failed: -121
[ 1595.423383][T25142] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1595.540681][ T5634] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1595.553024][ T5634] ath9k_htc: Failed to initialize the device
[ 1595.564421][T30851] netlink: 'syz.0.7001': attribute type 10 has an invalid length.
[ 1595.578692][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1595.618298][T30850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1595.626260][T30850] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1595.856852][T30850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1595.878940][T30850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1595.913017][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1596.091984][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1596.113885][    T9] usb 4-1: too many configurations: 158, using maximum allowed: 8
[ 1596.174174][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.08
[ 1596.212337][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.236446][    T9] usb 4-1: Product: syz
[ 1596.248468][    T9] usb 4-1: Manufacturer: syz
[ 1596.266254][    T9] usb 4-1: SerialNumber: syz
[ 1596.300675][T20202] usb 2-1: USB disconnect, device number 90
[ 1596.310164][    T9] usbtest 4-1:1.0: Linux gadget zero
[ 1596.327570][    T9] usbtest 4-1:1.0: high-speed {control in/out bulk-in bulk-out int-in int-out} tests (+alt)
[ 1596.328405][T30881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7005'.
[ 1596.361252][T20202] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1596.387849][T20202] cp210x 2-1:0.255: device disconnected
[ 1596.529395][  T809] usb 4-1: USB disconnect, device number 57
[ 1596.649794][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1596.696944][T30851] team0: Port device geneve0 added
[ 1596.722256][T29987] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1596.734020][T29987] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1596.743765][T29987] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1596.753211][T29987] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1597.026216][T20202] usb 5-1: USB disconnect, device number 122
[ 1597.262676][T30900] netlink: 'syz.2.7009': attribute type 1 has an invalid length.
[ 1597.324096][T30900] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1597.394650][T30896] bond1: (slave geneve2): making interface the new active one
[ 1597.413941][T30896] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1597.490521][ T5728] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1597.510142][T20202] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1597.699665][T20202] usb 5-1: Using ep0 maxpacket: 32
[ 1597.705017][ T5728] usb 4-1: Using ep0 maxpacket: 16
[ 1597.713258][T20202] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1597.728374][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1597.740575][T20202] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1597.752170][ T5728] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1597.765369][T20202] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1597.785937][ T5728] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1597.809305][T20202] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1597.820370][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.834614][T20202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.854377][ T5728] usb 4-1: Product: syz
[ 1597.859776][T20202] usb 5-1: Product: syz
[ 1597.865751][ T5728] usb 4-1: Manufacturer: syz
[ 1597.870643][T20202] usb 5-1: Manufacturer: syz
[ 1597.877033][ T5728] usb 4-1: SerialNumber: syz
[ 1597.881986][T20202] usb 5-1: SerialNumber: syz
[ 1597.915283][T20202] usb 5-1: config 0 descriptor??
[ 1597.920618][ T5728] usb 4-1: 0:2 : does not exist
[ 1598.122693][ T5728] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1598.266878][ T5728] usb 4-1: USB disconnect, device number 58
[ 1598.340789][T29509] udevd[29509]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1598.436849][T20202] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[ 1598.458406][T20202] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[ 1598.498033][T20202] usb 5-1: USB disconnect, device number 123
[ 1598.730021][T30907] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7013'.
[ 1599.000205][  T809] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1599.170304][  T809] usb 1-1: Using ep0 maxpacket: 32
[ 1599.195534][  T809] usb 1-1: config index 0 descriptor too short (expected 6701, got 45)
[ 1599.240371][  T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1599.276358][  T809] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1599.283227][T30935] 
[ 1599.289997][T30935] =====================================================
[ 1599.297033][T30935] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1599.304510][T30935] syzkaller #0 Tainted: G             L     
[ 1599.310578][T30935] -----------------------------------------------------
[ 1599.317507][T30935] syz.1.7022/30935 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1599.325256][T30935] ffff88807baaf558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1599.333993][T30935] 
[ 1599.333993][T30935] and this task is already holding:
[ 1599.341381][T30935] ffff88802ae19028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1599.351165][T30935] which would create a new lock dependency:
[ 1599.357058][T30935]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1599.365195][T30935] 
[ 1599.365195][T30935] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1599.374670][T30935]  (&dev->event_lock#2){..-.}-{3:3}
[ 1599.374702][T30935] 
[ 1599.374702][T30935] ... which became SOFTIRQ-irq-safe at:
[ 1599.387598][T30935]   lock_acquire+0x106/0x350
[ 1599.392299][T30935]   _raw_spin_lock_irqsave+0x40/0x60
[ 1599.397678][T30935]   input_inject_event+0xa4/0x330
[ 1599.402716][T30935]   led_trigger_event+0x138/0x210
[ 1599.407761][T30935]   kbd_bh+0x1c6/0x2e0
[ 1599.412009][T30935]   tasklet_action_common+0x2da/0x4b0
[ 1599.417388][T30935]   handle_softirqs+0x22a/0x840
[ 1599.422241][T30935]   __irq_exit_rcu+0xca/0x220
[ 1599.426936][T30935]   irq_exit_rcu+0x9/0x30
[ 1599.431289][T30935]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1599.437151][T30935]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1599.443244][T30935]   finish_task_switch+0x427/0xbe0
[ 1599.448386][T30935]   __schedule+0x1829/0x5740
[ 1599.453094][T30935]   schedule+0x164/0x360
[ 1599.457444][T30935]   smpboot_thread_fn+0x5bc/0xa50
[ 1599.463107][T30935]   kthread+0x389/0x470
[ 1599.467279][T30935]   ret_from_fork+0x514/0xb70
[ 1599.472047][T30935]   ret_from_fork_asm+0x1a/0x30
[ 1599.476999][T30935] 
[ 1599.476999][T30935] to a SOFTIRQ-irq-unsafe lock:
[ 1599.484023][T30935]  (tasklist_lock){.+.+}-{3:3}
[ 1599.484050][T30935] 
[ 1599.484050][T30935] ... which became SOFTIRQ-irq-unsafe at:
[ 1599.497041][T30935] ...
[ 1599.497049][T30935]   lock_acquire+0x106/0x350
[ 1599.504395][T30935]   _raw_read_lock+0x36/0x50
[ 1599.509126][T30935]   __do_wait+0xde/0x740
[ 1599.513400][T30935]   do_wait+0x1e7/0x510
[ 1599.517579][T30935]   kernel_wait+0xd6/0x1c0
[ 1599.522118][T30935]   call_usermodehelper_exec_work+0xbe/0x230
[ 1599.528121][T30935]   process_scheduled_works+0xb5d/0x1860
[ 1599.533842][T30935]   worker_thread+0xa53/0xfc0
[ 1599.538540][T30935]   kthread+0x389/0x470
[ 1599.542700][T30935]   ret_from_fork+0x514/0xb70
[ 1599.547383][T30935]   ret_from_fork_asm+0x1a/0x30
[ 1599.552243][T30935] 
[ 1599.552243][T30935] other info that might help us debug this:
[ 1599.552243][T30935] 
[ 1599.562471][T30935] Chain exists of:
[ 1599.562471][T30935]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1599.562471][T30935] 
[ 1599.576063][T30935]  Possible interrupt unsafe locking scenario:
[ 1599.576063][T30935] 
[ 1599.584479][T30935]        CPU0                    CPU1
[ 1599.589843][T30935]        ----                    ----
[ 1599.595210][T30935]   lock(tasklist_lock);
[ 1599.599463][T30935]                                local_irq_disable();
[ 1599.606238][T30935]                                lock(&dev->event_lock#2);
[ 1599.613537][T30935]                                lock(&client->buffer_lock);
[ 1599.620916][T30935]   <Interrupt>
[ 1599.624393][T30935]     lock(&dev->event_lock#2);
[ 1599.629251][T30935] 
[ 1599.629251][T30935]  *** DEADLOCK ***
[ 1599.629251][T30935] 
[ 1599.637413][T30935] 7 locks held by syz.1.7022/30935:
[ 1599.642643][T30935]  #0: ffff88802c05e110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1599.651796][T30935]  #1: ffff88801f7e2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330
[ 1599.661918][T30935]  #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330
[ 1599.671644][T30935]  #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1599.681221][T30935]  #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1599.690396][T30935]  #5: ffff88802ae19028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1599.700674][T30935]  #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1599.709784][T30935] 
[ 1599.709784][T30935] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1599.720296][T30935]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1599.726048][T30935]     IN-SOFTIRQ-W at:
[ 1599.730119][T30935]                       lock_acquire+0x106/0x350
[ 1599.736656][T30935]                       _raw_spin_lock_irqsave+0x40/0x60
[ 1599.743798][T30935]                       input_inject_event+0xa4/0x330
[ 1599.750670][T30935]                       led_trigger_event+0x138/0x210
[ 1599.757443][T30935]                       kbd_bh+0x1c6/0x2e0
[ 1599.763270][T30935]                       tasklet_action_common+0x2da/0x4b0
[ 1599.770385][T30935]                       handle_softirqs+0x22a/0x840
[ 1599.776977][T30935]                       __irq_exit_rcu+0xca/0x220
[ 1599.783499][T30935]                       irq_exit_rcu+0x9/0x30
[ 1599.789571][T30935]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1599.797141][T30935]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1599.805152][T30935]                       finish_task_switch+0x427/0xbe0
[ 1599.812041][T30935]                       __schedule+0x1829/0x5740
[ 1599.818404][T30935]                       schedule+0x164/0x360
[ 1599.824403][T30935]                       smpboot_thread_fn+0x5bc/0xa50
[ 1599.831185][T30935]                       kthread+0x389/0x470
[ 1599.837093][T30935]                       ret_from_fork+0x514/0xb70
[ 1599.843599][T30935]                       ret_from_fork_asm+0x1a/0x30
[ 1599.850243][T30935]     INITIAL USE at:
[ 1599.854234][T30935]                      lock_acquire+0x106/0x350
[ 1599.860477][T30935]                      _raw_spin_lock_irqsave+0x40/0x60
[ 1599.867416][T30935]                      input_inject_event+0xa4/0x330
[ 1599.874133][T30935]                      kbd_led_trigger_activate+0xbc/0x100
[ 1599.881351][T30935]                      led_trigger_set+0x535/0x960
[ 1599.887875][T30935]                      led_trigger_set_default+0x260/0x2a0
[ 1599.895084][T30935]                      led_classdev_register_ext+0x787/0x9c0
[ 1599.902472][T30935]                      input_leds_connect+0x517/0x790
[ 1599.909247][T30935]                      input_register_device+0xce0/0x1140
[ 1599.916383][T30935]                      atkbd_connect+0x71e/0xa10
[ 1599.922738][T30935]                      serio_driver_probe+0x82/0xb0
[ 1599.929335][T30935]                      really_probe+0x267/0xaf0
[ 1599.935585][T30935]                      __driver_probe_device+0x1ef/0x380
[ 1599.942618][T30935]                      driver_probe_device+0x4f/0x240
[ 1599.949558][T30935]                      __driver_attach+0x34c/0x640
[ 1599.956166][T30935]                      bus_for_each_dev+0x23b/0x2c0
[ 1599.962794][T30935]                      serio_handle_event+0x1af/0xf80
[ 1599.969657][T30935]                      process_scheduled_works+0xb5d/0x1860
[ 1599.976953][T30935]                      worker_thread+0xa53/0xfc0
[ 1599.983287][T30935]                      kthread+0x389/0x470
[ 1599.989366][T30935]                      ret_from_fork+0x514/0xb70
[ 1599.995713][T30935]                      ret_from_fork_asm+0x1a/0x30
[ 1600.002224][T30935]   }
[ 1600.004816][T30935]   ... key      at: [<ffffffff9a7cc5a0>] input_allocate_device.__key.7+0x0/0x20
[ 1600.014319][T30935] -> (&client->buffer_lock){....}-{3:3} {
[ 1600.020116][T30935]    INITIAL USE at:
[ 1600.024009][T30935]                    lock_acquire+0x106/0x350
[ 1600.030082][T30935]                    _raw_spin_lock+0x2e/0x40
[ 1600.036251][T30935]                    evdev_pass_values+0xb9/0xbd0
[ 1600.042855][T30935]                    evdev_events+0x1e6/0x340
[ 1600.048920][T30935]                    input_pass_values+0x288/0x890
[ 1600.055433][T30935]                    input_event_dispose+0x3e5/0x6b0
[ 1600.062219][T30935]                    input_inject_event+0x1dc/0x330
[ 1600.068809][T30935]                    kd_sound_helper+0x101/0x210
[ 1600.075229][T30935]                    input_handler_for_each_handle+0x101/0x1c0
[ 1600.082781][T30935]                    kd_mksound+0x96/0x130
[ 1600.088627][T30935]                    do_con_write+0x332b/0x58f0
[ 1600.094881][T30935]                    con_write+0x27/0x290
[ 1600.100625][T30935]                    n_tty_write+0xd4f/0x1220
[ 1600.106787][T30935]                    file_tty_write+0x558/0xa10
[ 1600.113030][T30935]                    vfs_write+0x61d/0xb90
[ 1600.118849][T30935]                    ksys_write+0x150/0x270
[ 1600.124834][T30935]                    do_syscall_64+0x174/0x580
[ 1600.131066][T30935]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.138528][T30935]  }
[ 1600.141047][T30935]  ... key      at: [<ffffffff9a7cc840>] evdev_open.__key.27+0x0/0x20
[ 1600.149205][T30935]  ... acquired at:
[ 1600.153007][T30935]    _raw_spin_lock+0x2e/0x40
[ 1600.157720][T30935]    evdev_pass_values+0xb9/0xbd0
[ 1600.162747][T30935]    evdev_events+0x1e6/0x340
[ 1600.167442][T30935]    input_pass_values+0x288/0x890
[ 1600.172553][T30935]    input_event_dispose+0x3e5/0x6b0
[ 1600.177844][T30935]    input_inject_event+0x1dc/0x330
[ 1600.183052][T30935]    kd_sound_helper+0x101/0x210
[ 1600.188020][T30935]    input_handler_for_each_handle+0x101/0x1c0
[ 1600.194282][T30935]    kd_mksound+0x96/0x130
[ 1600.198913][T30935]    do_con_write+0x332b/0x58f0
[ 1600.203781][T30935]    con_write+0x27/0x290
[ 1600.208219][T30935]    n_tty_write+0xd4f/0x1220
[ 1600.212904][T30935]    file_tty_write+0x558/0xa10
[ 1600.217863][T30935]    vfs_write+0x61d/0xb90
[ 1600.222305][T30935]    ksys_write+0x150/0x270
[ 1600.226829][T30935]    do_syscall_64+0x174/0x580
[ 1600.231768][T30935]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.237842][T30935] 
[ 1600.240179][T30935] 
[ 1600.240179][T30935] the dependencies between the lock to be acquired
[ 1600.240188][T30935]  and SOFTIRQ-irq-unsafe lock:
[ 1600.253809][T30935]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1600.259176][T30935]      HARDIRQ-ON-R at:
[ 1600.263436][T30935]                         lock_acquire+0x106/0x350
[ 1600.269954][T30935]                         _raw_read_lock+0x36/0x50
[ 1600.276467][T30935]                         __do_wait+0xde/0x740
[ 1600.282630][T30935]                         do_wait+0x1e7/0x510
[ 1600.288729][T30935]                         kernel_wait+0xd6/0x1c0
[ 1600.295061][T30935]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1600.303252][T30935]                         process_scheduled_works+0xb5d/0x1860
[ 1600.310924][T30935]                         worker_thread+0xa53/0xfc0
[ 1600.317577][T30935]                         kthread+0x389/0x470
[ 1600.323741][T30935]                         ret_from_fork+0x514/0xb70
[ 1600.330354][T30935]                         ret_from_fork_asm+0x1a/0x30
[ 1600.337152][T30935]      SOFTIRQ-ON-R at:
[ 1600.341493][T30935]                         lock_acquire+0x106/0x350
[ 1600.348001][T30935]                         _raw_read_lock+0x36/0x50
[ 1600.354513][T30935]                         __do_wait+0xde/0x740
[ 1600.360673][T30935]                         do_wait+0x1e7/0x510
[ 1600.366768][T30935]                         kernel_wait+0xd6/0x1c0
[ 1600.373100][T30935]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1600.381092][T30935]                         process_scheduled_works+0xb5d/0x1860
[ 1600.388911][T30935]                         worker_thread+0xa53/0xfc0
[ 1600.395499][T30935]                         kthread+0x389/0x470
[ 1600.401569][T30935]                         ret_from_fork+0x514/0xb70
[ 1600.408171][T30935]                         ret_from_fork_asm+0x1a/0x30
[ 1600.414939][T30935]      INITIAL USE at:
[ 1600.419007][T30935]                        lock_acquire+0x106/0x350
[ 1600.425551][T30935]                        _raw_write_lock_irq+0x3d/0x50
[ 1600.432515][T30935]                        copy_process+0x2b4c/0x4440
[ 1600.439132][T30935]                        kernel_clone+0x2d7/0x940
[ 1600.445736][T30935]                        user_mode_thread+0x110/0x180
[ 1600.452597][T30935]                        rest_init+0x23/0x300
[ 1600.458759][T30935]                        start_kernel+0x38a/0x3e0
[ 1600.465356][T30935]                        x86_64_start_reservations+0x24/0x30
[ 1600.472733][T30935]                        x86_64_start_kernel+0x143/0x1c0
[ 1600.479778][T30935]                        common_startup_64+0x13e/0x147
[ 1600.486695][T30935]      INITIAL READ USE at:
[ 1600.491231][T30935]                             lock_acquire+0x106/0x350
[ 1600.498177][T30935]                             _raw_read_lock+0x36/0x50
[ 1600.505054][T30935]                             __do_wait+0xde/0x740
[ 1600.511583][T30935]                             do_wait+0x1e7/0x510
[ 1600.518018][T30935]                             kernel_wait+0xd6/0x1c0
[ 1600.524715][T30935]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1600.533165][T30935]                             process_scheduled_works+0xb5d/0x1860
[ 1600.541062][T30935]                             worker_thread+0xa53/0xfc0
[ 1600.548000][T30935]                             kthread+0x389/0x470
[ 1600.554440][T30935]                             ret_from_fork+0x514/0xb70
[ 1600.561378][T30935]                             ret_from_fork_asm+0x1a/0x30
[ 1600.568586][T30935]    }
[ 1600.571280][T30935]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1600.579191][T30935]    ... acquired at:
[ 1600.583184][T30935]    _raw_read_lock+0x36/0x50
[ 1600.587876][T30935]    send_sigurg+0x12b/0x420
[ 1600.592492][T30935]    sk_send_sigurg+0x6c/0x2e0
[ 1600.597264][T30935]    queue_oob+0x42c/0x4f0
[ 1600.601683][T30935]    unix_stream_sendmsg+0xcb1/0xe80
[ 1600.606971][T30935]    ____sys_sendmsg+0x972/0x9f0
[ 1600.611917][T30935]    ___sys_sendmsg+0x2a5/0x360
[ 1600.616798][T30935]    __sys_sendmmsg+0x27c/0x4e0
[ 1600.621670][T30935]    __x64_sys_sendmmsg+0xa0/0xc0
[ 1600.626702][T30935]    do_syscall_64+0x174/0x580
[ 1600.631483][T30935]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.637552][T30935] 
[ 1600.639883][T30935]  -> (&f_owner->lock){....}-{3:3} {
[ 1600.645195][T30935]     INITIAL USE at:
[ 1600.649265][T30935]                      lock_acquire+0x106/0x350
[ 1600.655511][T30935]                      _raw_write_lock_irq+0x3d/0x50
[ 1600.662191][T30935]                      __f_setown+0x67/0x370
[ 1600.668186][T30935]                      generic_setlease+0xacf/0xfd0
[ 1600.674834][T30935]                      do_fcntl_add_lease+0x35e/0x470
[ 1600.681625][T30935]                      fcntl_setdeleg+0x14c/0x1e0
[ 1600.688229][T30935]                      do_fcntl+0xe6d/0x1a20
[ 1600.694251][T30935]                      __se_sys_fcntl+0xc8/0x150
[ 1600.700676][T30935]                      do_syscall_64+0x174/0x580
[ 1600.707008][T30935]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.714650][T30935]     INITIAL READ USE at:
[ 1600.719092][T30935]                           lock_acquire+0x106/0x350
[ 1600.725774][T30935]                           _raw_read_lock_irqsave+0x48/0x60
[ 1600.733267][T30935]                           send_sigio+0x38/0x370
[ 1600.740056][T30935]                           kill_fasync+0x24d/0x4d0
[ 1600.746779][T30935]                           lease_break_callback+0x26/0x30
[ 1600.754086][T30935]                           __break_lease+0x81f/0x1ea0
[ 1600.760955][T30935]                           vfs_set_acl+0x4d9/0xc00
[ 1600.767643][T30935]                           file_setxattr+0x233/0x2b0
[ 1600.774407][T30935]                           path_setxattrat+0x3b0/0x440
[ 1600.781358][T30935]                           __x64_sys_fsetxattr+0xbc/0xe0
[ 1600.788473][T30935]                           do_syscall_64+0x174/0x580
[ 1600.795236][T30935]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.803313][T30935]   }
[ 1600.805941][T30935]   ... key      at: [<ffffffff9a4ae880>] file_f_owner_allocate.__key+0x0/0x20
[ 1600.814896][T30935]   ... acquired at:
[ 1600.818791][T30935]    _raw_read_lock_irqsave+0x48/0x60
[ 1600.824182][T30935]    send_sigio+0x38/0x370
[ 1600.828635][T30935]    kill_fasync+0x24d/0x4d0
[ 1600.833249][T30935]    lease_break_callback+0x26/0x30
[ 1600.838470][T30935]    __break_lease+0x81f/0x1ea0
[ 1600.843433][T30935]    vfs_set_acl+0x4d9/0xc00
[ 1600.848062][T30935]    file_setxattr+0x233/0x2b0
[ 1600.852848][T30935]    path_setxattrat+0x3b0/0x440
[ 1600.857797][T30935]    __x64_sys_fsetxattr+0xbc/0xe0
[ 1600.862911][T30935]    do_syscall_64+0x174/0x580
[ 1600.867707][T30935]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.873778][T30935] 
[ 1600.876194][T30935] -> (&new->fa_lock){....}-{3:3} {
[ 1600.881329][T30935]    INITIAL USE at:
[ 1600.885233][T30935]                    lock_acquire+0x106/0x350
[ 1600.891396][T30935]                    _raw_write_lock_irq+0x3d/0x50
[ 1600.897909][T30935]                    fasync_remove_entry+0xf1/0x1c0
[ 1600.904507][T30935]                    lease_modify+0x4f7/0x6c0
[ 1600.910650][T30935]                    locks_remove_file+0x5f0/0xf70
[ 1600.917229][T30935]                    __fput+0x3ae/0xa60
[ 1600.922776][T30935]                    task_work_run+0x1d9/0x270
[ 1600.928937][T30935]                    get_signal+0x11eb/0x1330
[ 1600.935021][T30935]                    arch_do_signal_or_restart+0xbc/0x840
[ 1600.942375][T30935]                    exit_to_user_mode_loop+0xa9/0x680
[ 1600.949239][T30935]                    do_syscall_64+0x353/0x580
[ 1600.955404][T30935]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1600.962862][T30935]    INITIAL READ USE at:
[ 1600.967198][T30935]                         lock_acquire+0x106/0x350
[ 1600.973791][T30935]                         _raw_read_lock_irqsave+0x48/0x60
[ 1600.981001][T30935]                         kill_fasync+0x199/0x4d0
[ 1600.987424][T30935]                         lease_break_callback+0x26/0x30
[ 1600.994630][T30935]                         __break_lease+0x81f/0x1ea0
[ 1601.001322][T30935]                         vfs_set_acl+0x4d9/0xc00
[ 1601.007744][T30935]                         file_setxattr+0x233/0x2b0
[ 1601.014336][T30935]                         path_setxattrat+0x3b0/0x440
[ 1601.021190][T30935]                         __x64_sys_fsetxattr+0xbc/0xe0
[ 1601.028223][T30935]                         do_syscall_64+0x174/0x580
[ 1601.034808][T30935]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.042789][T30935]  }
[ 1601.045291][T30935]  ... key      at: [<ffffffff9a4ae8a0>] fasync_insert_entry.__key+0x0/0x20
[ 1601.054060][T30935]  ... acquired at:
[ 1601.057871][T30935]    _raw_read_lock_irqsave+0x48/0x60
[ 1601.063250][T30935]    kill_fasync+0x199/0x4d0
[ 1601.067860][T30935]    evdev_pass_values+0x627/0xbd0
[ 1601.073069][T30935]    evdev_events+0x1e6/0x340
[ 1601.077751][T30935]    input_pass_values+0x288/0x890
[ 1601.082872][T30935]    input_event_dispose+0x330/0x6b0
[ 1601.088173][T30935]    input_inject_event+0x1dc/0x330
[ 1601.093377][T30935]    evdev_write+0x325/0x4c0
[ 1601.097972][T30935]    vfs_write+0x29a/0xb90
[ 1601.102494][T30935]    ksys_write+0x150/0x270
[ 1601.107039][T30935]    do_syscall_64+0x174/0x580
[ 1601.111818][T30935]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.117889][T30935] 
[ 1601.120211][T30935] 
[ 1601.120211][T30935] stack backtrace:
[ 1601.126169][T30935] CPU: 0 UID: 0 PID: 30935 Comm: syz.1.7022 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1601.126192][T30935] Tainted: [L]=SOFTLOCKUP
[ 1601.126198][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1601.126208][T30935] Call Trace:
[ 1601.126217][T30935]  <TASK>
[ 1601.126225][T30935]  dump_stack_lvl+0xe8/0x150
[ 1601.126243][T30935]  __lock_acquire+0x2a94/0x2cf0
[ 1601.126267][T30935]  ? kill_fasync+0x199/0x4d0
[ 1601.126287][T30935]  lock_acquire+0x106/0x350
[ 1601.126301][T30935]  ? kill_fasync+0x199/0x4d0
[ 1601.126322][T30935]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1601.126351][T30935]  _raw_read_lock_irqsave+0x48/0x60
[ 1601.126373][T30935]  ? kill_fasync+0x199/0x4d0
[ 1601.126392][T30935]  kill_fasync+0x199/0x4d0
[ 1601.126411][T30935]  ? kill_fasync+0x53/0x4d0
[ 1601.126431][T30935]  evdev_pass_values+0x627/0xbd0
[ 1601.126449][T30935]  ? evdev_pass_values+0x661/0xbd0
[ 1601.126466][T30935]  evdev_events+0x1e6/0x340
[ 1601.126480][T30935]  ? evdev_events+0x79/0x340
[ 1601.126493][T30935]  ? input_pass_values+0x8d/0x890
[ 1601.126506][T30935]  input_pass_values+0x288/0x890
[ 1601.126522][T30935]  ? input_handle_event+0x70c/0xf30
[ 1601.126541][T30935]  input_event_dispose+0x330/0x6b0
[ 1601.126561][T30935]  input_inject_event+0x1dc/0x330
[ 1601.126580][T30935]  ? input_inject_event+0xb5/0x330
[ 1601.126599][T30935]  evdev_write+0x325/0x4c0
[ 1601.126613][T30935]  ? __lock_acquire+0x6b5/0x2cf0
[ 1601.126629][T30935]  ? __pfx_evdev_write+0x10/0x10
[ 1601.126644][T30935]  ? bpf_lsm_file_permission+0x9/0x20
[ 1601.126665][T30935]  ? security_file_permission+0x75/0x260
[ 1601.126684][T30935]  ? rw_verify_area+0x255/0x4d0
[ 1601.126703][T30935]  ? __pfx_evdev_write+0x10/0x10
[ 1601.126718][T30935]  vfs_write+0x29a/0xb90
[ 1601.126740][T30935]  ? __pfx_vfs_write+0x10/0x10
[ 1601.126760][T30935]  ? __fget_files+0x2a/0x420
[ 1601.126778][T30935]  ? __fget_files+0x2a/0x420
[ 1601.126794][T30935]  ? __fget_files+0x3a0/0x420
[ 1601.126811][T30935]  ? __fget_files+0x2a/0x420
[ 1601.126829][T30935]  ksys_write+0x150/0x270
[ 1601.126850][T30935]  ? __pfx_ksys_write+0x10/0x10
[ 1601.126873][T30935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.126888][T30935]  do_syscall_64+0x174/0x580
[ 1601.126902][T30935]  ? trace_irq_disable+0x3b/0x140
[ 1601.126923][T30935]  ? clear_bhb_loop+0x40/0x90
[ 1601.126939][T30935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.126954][T30935] RIP: 0033:0x7fa5f099ce59
[ 1601.126969][T30935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1601.126982][T30935] RSP: 002b:00007fa5f185c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1601.127000][T30935] RAX: ffffffffffffffda RBX: 00007fa5f0c15fa0 RCX: 00007fa5f099ce59
[ 1601.127011][T30935] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003
[ 1601.127021][T30935] RBP: 00007fa5f0a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1601.127031][T30935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1601.127041][T30935] R13: 00007fa5f0c16038 R14: 00007fa5f0c15fa0 R15: 00007fa5f0d3fa48
[ 1601.127057][T30935]  </TASK>
[ 1601.131563][  T809] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1601.451979][  T809] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1601.458951][  T809] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d
[ 1601.468618][  T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.481737][T20202] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1601.483706][  T809] usb 1-1: config 0 descriptor??
[ 1601.699585][T20202] usb 5-1: Using ep0 maxpacket: 8
[ 1601.708695][T20202] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1601.718328][T20202] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1601.726954][T20202] usb 5-1: Product: syz
[ 1601.731717][T20202] usb 5-1: Manufacturer: syz
[ 1601.736438][T20202] usb 5-1: SerialNumber: syz
[ 1601.743660][T20202] usb 5-1: config 0 descriptor??
[ 1601.756361][T20202] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1601.906127][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.913667][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.921085][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.928416][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.935771][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.943295][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.950708][  T809] logitech 0003:046D:CA03.006A: unknown main item tag 0x0
[ 1601.960823][  T809] logitech 0003:046D:CA03.006A: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0
[ 1601.974424][  T809] logitech 0003:046D:CA03.006A: no inputs found
[ 1602.013640][T30945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1602.039910][T30945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1602.075908][T30929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1602.086957][T30929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1602.243849][T28871] usb 1-1: USB disconnect, device number 69
[ 1602.322537][T20202] gspca_zc3xx: reg_r err -71
[ 1602.327290][T20202] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1602.341090][T20202] usb 5-1: USB disconnect, device number 124
[ 1607.530849][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.537253][ T1319] ieee802154 phy1 wpan1: encryption failed: -22