last executing test programs:

4m15.705625895s ago: executing program 2 (id=149):
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x94, 0x2)
syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100340490d20fd1000de0100010203010902120001040c2008090487090076c0d3"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000140)={0x1, 0x803, 0x2})
syz_emit_ethernet(0x42, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
unshare(0x2c020400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r1 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xf0d1, 0xc000, 0x2000008, 0x4c4})
pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000001}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m13.203222004s ago: executing program 2 (id=160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_setup(0x3c52, 0x0)
sendmsg$inet_sctp(r2, 0x0, 0x881)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0xfffffffffffffe81)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x40}]})

4m12.611411648s ago: executing program 2 (id=163):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0)

4m11.323267094s ago: executing program 2 (id=165):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

4m10.354664429s ago: executing program 2 (id=168):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0xb011, 0x0, 0x0}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m10.089820523s ago: executing program 2 (id=170):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x80045007, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=0x0, @ANYRES32], 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000))
socket$inet(0xa, 0x801, 0x84)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r4, <r5=>0xffffffffffffffff})
close_range(r1, r2, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

4m9.542716335s ago: executing program 32 (id=170):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x80045007, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=0x0, @ANYRES32], 0x0)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000))
socket$inet(0xa, 0x801, 0x84)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r4, <r5=>0xffffffffffffffff})
close_range(r1, r2, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

2m41.071931353s ago: executing program 4 (id=556):
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa8080043", 0xa)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

2m40.394564109s ago: executing program 4 (id=558):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

2m39.350559638s ago: executing program 4 (id=564):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xb1}, 0x4081)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x2)
ppoll(&(0x7f0000000080)=[{r2, 0x42c0}], 0x1, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m39.112387126s ago: executing program 4 (id=566):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
close(0x3)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x402, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d)
close(r1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}])

2m38.728632636s ago: executing program 4 (id=568):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x20}}, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="5d7f9f0c37c757789144dbf58fe4fc5a9ec19136e31c639bf291049c11fd43b142387205eb76dd99417bf7dfb075081a3b41a1df501e4137a648b7f298b6e244324e5d76e12cb058e459e3ab4a0edb9ee7b07eda96b58636f10924", 0x5b}], 0x1}}], 0x1, 0x20008000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents(r2, &(0x7f0000000000)=""/34, 0x22)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)

2m38.329175519s ago: executing program 4 (id=569):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c7628fd", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f00000015c0)=""/4071, 0xfe7, 0x10020, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

2m37.493953412s ago: executing program 33 (id=569):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c7628fd", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f00000015c0)=""/4071, 0xfe7, 0x10020, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

13.041800835s ago: executing program 0 (id=1156):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x100, 0x0, 0x20000006, 0x7, 0xc27}, 0x7, 0xe8}, [{0x2, 0x9, 0x7, 0x4, 0x5, 0x8}, {0x200, 0x57, 0xa, 0x6, 0x977, 0xfffffff7}, {0x705, 0x9, 0x51, 0x7, 0x1, 0xa}, {0x80000001, 0xc, 0x80, 0x10, 0xbc2, 0x2}, {0xff, 0xdcd3, 0x3ff, 0x6, 0x80000000, 0x6}, {0x10001, 0x7, 0x0, 0x800, 0x81, 0x4}, {0xfffffff2, 0x8, 0xfffffff7, 0x2, 0x85, 0x3}, {0xffff, 0x4, 0x7fff, 0xd54a, 0x1, 0x1}, {0x3, 0x3, 0xfffffffd, 0x100, 0x7, 0x80000001}, {0x6b3, 0x4, 0x9d, 0x3, 0x8000, 0x7ff}, {0xffffffaa, 0x4, 0x4, 0xba3, 0x14732273, 0xc5}, {0x7, 0x5, 0x80000000, 0x401, 0x1, 0x7}, {0x80000001, 0x3, 0x5, 0x9, 0xc6e5, 0xfffffffb}, {0xfffffffa, 0x2, 0x5c7, 0x7, 0x1, 0x2}, {0x8, 0x3, 0x9a5, 0x34d57ea2, 0xc, 0x8}, {0x0, 0x665b, 0x0, 0x1, 0x55, 0x10}, {0x2, 0xca57, 0x7, 0xae95, 0x7, 0x2}, {0xffffffff, 0x200, 0x5, 0x5, 0x4, 0xd}, {0x3, 0x9, 0x7, 0x5, 0x1ff, 0x10000}, {0x9, 0xffffffff, 0xfffe0000, 0x100, 0xb, 0x1}, {0x8000, 0x0, 0x3, 0x8bc, 0x4325, 0x2}, {0x2, 0x4, 0x6, 0x3, 0xb3, 0xfffffb60}, {0x2, 0x1, 0x605a, 0x5, 0x800, 0x5}, {0x3, 0x23e000, 0xfffffffd, 0x0, 0x4, 0x3ff}, {0x2, 0x7fffffff, 0x7, 0x5, 0x1, 0x9}, {0x7ff, 0x9, 0x5, 0x1, 0xd4, 0x1}, {0x1000, 0x7, 0xfffffb9c, 0x8000, 0x5, 0xf}, {0x3, 0x9, 0x696, 0x8, 0x6, 0x125d}, {0x1, 0x10, 0x7ff, 0x4, 0x9, 0x8f74}, {0x5, 0x0, 0x10001, 0x2, 0x69, 0x9}, {0x6, 0x0, 0xe, 0x1000, 0x0, 0xe6}, {0x53d, 0x5, 0x1, 0x4, 0x200, 0xfffffffd}, {0x7f, 0x9, 0x1, 0x800, 0x9, 0x40}, {0x2, 0xb, 0x4, 0xf, 0x8, 0x2}, {0xffffffff, 0x30, 0xe, 0x5, 0x0, 0x7}, {0x6c, 0x5, 0x0, 0x1, 0x2}, {0xb, 0x6, 0x7, 0x2, 0x8}, {0xfff, 0x9, 0x0, 0xbb, 0x3, 0xfc38}, {0x3, 0x9, 0x2bc, 0x8001, 0x4, 0xc42d}, {0xac4, 0x4, 0x6, 0x6, 0x7, 0x8}, {0x5, 0x9, 0x8, 0x4, 0x8001, 0x83a6}, {0xcc, 0x3, 0xfffffeb7, 0x4, 0x4c4, 0x8001}, {0x3, 0x123ceeba, 0x8, 0x100, 0x1, 0x6}, {0x7a, 0x6, 0x5, 0x6, 0x1, 0x40}, {0x7fffffff, 0x34, 0x4, 0x5, 0x1, 0x4}, {0x8, 0xbd, 0x0, 0x6, 0x8}, {0x3, 0x8, 0x8, 0x8, 0xfff, 0x4}, {0x1, 0xfffff800, 0x8, 0x6, 0x75b, 0x3}, {0x3, 0x5, 0xd85, 0x29, 0x1, 0x6}, {0xffffffff, 0xfffffff7, 0x7ff, 0x8001, 0x2, 0x8}, {0x1, 0x9, 0x4, 0xc2b3, 0x4, 0x9f1}, {0xff, 0x4, 0x9, 0x0, 0x6, 0x6}, {0x2, 0x0, 0x6, 0x200, 0x85d0, 0x74}, {0xffffff90, 0xddcc, 0x5, 0x7fffffff, 0x2, 0xaad0}, {0x5, 0x0, 0x0, 0xffff, 0x1, 0x9}, {0x7, 0x40, 0xa, 0x800, 0x400}, {0x5, 0xffffffff, 0xffff0001, 0x10000, 0x0, 0xd01e}, {0x9, 0xffff37fd, 0x2efe, 0xfffffffa, 0x1ff, 0x1}, {0x7, 0x8, 0x4, 0x8001, 0x3}, {0xf, 0xad8e, 0x8fa, 0x9, 0xfffffff9, 0x8}, {0xe, 0xc70, 0xfff, 0xfffffff8, 0x2}, {0x4, 0xd, 0x0, 0x7, 0x727c, 0x8}, {0x2, 0x5, 0x3, 0x8, 0x1, 0x2}, {0x2, 0x64a, 0x6, 0x2cc952de, 0x1, 0x4}, {0x1ffe00, 0xf296, 0x8, 0x0, 0x81, 0xb5}, {0x400, 0x1ff, 0x2, 0xe4, 0x4, 0xfce00}, {0x4e, 0x9a, 0x1000, 0x8, 0x1ff, 0x9}, {0x4, 0x5, 0x7, 0x9a, 0x6, 0xab7}, {0x8, 0x6, 0xfffff000, 0x2, 0x1, 0x8000}, {0x8000, 0x5, 0x0, 0x781d, 0x10001, 0x7}, {0x10, 0x2, 0xfff, 0x81, 0x51d, 0x8}, {0x7, 0x6, 0x2, 0x6, 0x4, 0x990}, {0x188c1852, 0x8, 0xa, 0x6, 0xe6a8, 0xc}, {0x20000, 0x959, 0x54f6, 0xb4, 0x85, 0x3}, {0x2, 0x38000, 0x9, 0xcb2, 0x7f, 0x4}, {0x6, 0x7fffffff, 0xe, 0xff, 0x7, 0x2}, {0x4, 0x9, 0x6, 0x6, 0x9, 0x2}, {0x5, 0x8000, 0xe, 0x4, 0x7, 0x1}, {0x3, 0x7, 0x2, 0xa3, 0x2, 0x3}, {0x2, 0x1, 0x7, 0x8, 0x5, 0x6}, {0x40a2, 0x5, 0x1, 0x0, 0x9, 0x4a}, {0x2, 0x9, 0x1, 0x6c4, 0x3, 0x400}, {0x7f, 0xc8, 0x0, 0x7, 0x2, 0xaf5}, {0x7ff, 0x7, 0x7fffffff, 0x0, 0x1, 0x390}, {0x1, 0x3, 0xb5a4, 0x10001, 0x10000, 0x9}, {0x2, 0x9ff0, 0x7fff, 0x5, 0x4, 0x6}, {0x2, 0xc, 0x5, 0x3, 0x1, 0x8}, {0xccc, 0x17b8, 0x1, 0x2, 0x0, 0xb8ba}, {0x9, 0x8001, 0x0, 0x3, 0x969f5792, 0x7}, {0xb, 0x9, 0x4, 0x9, 0x0, 0x77}, {0x2, 0xafc, 0x4, 0x3, 0x9, 0x1}, {0x7ff, 0x9, 0xfffffff8, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x1, 0x7fff, 0xd, 0x3}, {0x7, 0x80000001, 0xffff, 0x0, 0x0, 0x4}, {0x3, 0xc, 0xbd, 0x8, 0x0, 0x4}, {0xfffff801, 0x72c, 0x4, 0x7, 0x3e8c, 0x3}, {0x9, 0x5, 0x40, 0xe, 0x2bc1, 0xffffff81}, {0x80000001, 0xa46, 0x0, 0x1000, 0x4, 0x7}, {0x1, 0x2, 0xffffffff, 0x2, 0x3, 0x8000000}, {0x400, 0x2, 0x101, 0x576, 0x401, 0x7fffffff}, {0x75cb, 0x3, 0x2, 0x3, 0xc, 0xd}, {0xcb6, 0x9, 0x6, 0x9, 0xab3, 0xffff}, {0xc, 0x3, 0x6, 0x4, 0xffff, 0xffffffff}, {0x8001, 0x0, 0x2fa4, 0x1, 0x4, 0x3ff}, {0xe380, 0x4, 0x81, 0x5, 0xf, 0xffffffff}, {0x4, 0x2887eff4, 0x6, 0x5, 0x7ff, 0x5}, {0x200, 0x6, 0x0, 0x2, 0x800, 0xfff}, {0xb6, 0x6, 0x7fffffff, 0x53611e27, 0x9, 0x1}, {0x2, 0x8000, 0x2, 0x8, 0x5, 0x6}, {0xa, 0x5, 0x6, 0x3, 0xa4, 0x5}, {0xfffffffb, 0x6, 0x4054, 0x4, 0x6, 0xd9}, {0xfffffff9, 0x7, 0x0, 0xbcf, 0x5, 0x9}, {0x3, 0xda5, 0x7, 0x1, 0x4, 0x5}, {0x400, 0x871, 0x8, 0xc09, 0x1, 0x88d}, {0x2e, 0x80, 0xffff, 0x59a, 0x10000, 0x41c165e}, {0x3, 0x4, 0x1, 0x9, 0x0, 0x7}, {0x1, 0x80, 0xef86, 0x5, 0x10000000, 0x80000000}, {0x9, 0xac2d, 0x9, 0xa, 0x5, 0x8}, {0x59, 0x6, 0xfffffffb, 0x7, 0x48, 0xd}, {0x5, 0x10, 0xf85, 0x7, 0x9, 0x8}, {0x6, 0x7, 0x7, 0x2, 0x8, 0x101}, {0x3030, 0x2, 0xdd0, 0x1, 0x9, 0xfffffffe}, {0x2, 0x7, 0x1000, 0x2, 0x1ff, 0x5}, {0x0, 0xe06a, 0x3, 0x8, 0xe, 0x97fb}, {0x7, 0x9, 0x1, 0xfffffff7, 0x2, 0xd9b}, {0x7, 0x0, 0x2, 0x9, 0x3, 0x6}, {0x7fff, 0x104, 0x200, 0x5e, 0x4d07, 0x7f}, {0xfffffff2, 0xee3, 0x0, 0x6, 0xfff, 0x2}], [{0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x3}, {}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0xa19a2f37fc43f3d8}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x36d6435f70ccebc3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x6}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)

12.716078336s ago: executing program 0 (id=1159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
removexattr(&(0x7f0000000180)='./file1\x00', 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12.5718086s ago: executing program 5 (id=1161):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

12.099544581s ago: executing program 5 (id=1163):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x200000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0)

11.71325543s ago: executing program 0 (id=1164):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/140, 0xffe5)

10.179508889s ago: executing program 0 (id=1168):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

7.981930728s ago: executing program 5 (id=1174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e65742c706f7274"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_AIE_ON(r4, 0x7001)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000094)

7.84062298s ago: executing program 6 (id=1175):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.455559943s ago: executing program 6 (id=1177):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x48800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32bf, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10000, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

6.958342643s ago: executing program 3 (id=1179):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x240440c4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
listen(0xffffffffffffffff, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x558410e9)

6.032534078s ago: executing program 5 (id=1183):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x7a40745caf86f1bf, 0x13, 0x40, "54d0f1399ad751e38e31c5f72b89d46292b13c831174f34b70dd1797d176ef92f73451966ae355592697181b64ca2980f0a26055472355cdbc74b6b285d19652"}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$l2tp(0x2, 0x2, 0x73)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
writev(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)

5.6025523s ago: executing program 0 (id=1186):
socket(0x10, 0x803, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48808}, 0x4000040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00'})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xf5, 0xffff0000, 0x0, 0x6b, 0x5})
r1 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xbe, 0x5, 0x2f8f, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x1, 0x8, 0x8, 0x2a}}, 0x331b, 0x0, 0x8}})
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xd1d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32)
sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

5.409266941s ago: executing program 6 (id=1187):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
eventfd2(0xe5c, 0x80000)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0xf8, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)

5.10805439s ago: executing program 3 (id=1188):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x12002, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.665724914s ago: executing program 1 (id=1189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x10, 0x0, 0x7, 0x9, 0x0, 0x5, 0x3, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xb, 0x2, 0xd], 0x0, [0xd, 0x7, 0x8, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x5, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x7a}}, 0x0)

4.256672617s ago: executing program 6 (id=1190):
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
close(0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce})
dup(0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socket$inet(0x2, 0x80001, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

3.995090957s ago: executing program 1 (id=1191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xfffffa7d, 0xce, 0xfffffe00, 0x3, 0x7, 0xf5c8}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880)

3.796223995s ago: executing program 3 (id=1192):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x2)
landlock_restrict_self(0xffffffffffffffff, 0x7)
landlock_restrict_self(0xffffffffffffffff, 0x9)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x5)
landlock_restrict_self(0xffffffffffffffff, 0xa)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

3.563446462s ago: executing program 1 (id=1193):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f96400", [0x800]}})
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r3, &(0x7f00000065c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r6, r3, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

3.489960362s ago: executing program 3 (id=1194):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
readv(r0, &(0x7f0000000200), 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

3.13195092s ago: executing program 1 (id=1195):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1f", 0x6f}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ff", 0x93}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.981362338s ago: executing program 0 (id=1196):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000300)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)

2.713376214s ago: executing program 3 (id=1197):
socket$inet(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket(0x2b, 0x3, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
eventfd(0x8)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x8, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x40008, 0x9, 0x20000fb, 0x4, 0x11, 0xffffffffffffffff}})

2.636977368s ago: executing program 1 (id=1198):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2400c4b5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a3100200000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

1.962872805s ago: executing program 5 (id=1199):
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000076c0)={0x14}, 0x14)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x71, 0x40000009, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000000800034000000120140000001000010000000000808fb4b9cf372db5"], 0xd0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20050800)
iopl(0xc0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0x16, 0x0, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

1.097616583s ago: executing program 3 (id=1200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x18040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r3=>0x0)
syz_open_procfs$namespace(r3, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x101002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0xe)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4)

933.301043ms ago: executing program 6 (id=1201):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

759.365508ms ago: executing program 6 (id=1202):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x2010, r0, 0xa94000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0xfff, 0xfffffff5, 0x5, "0f6d00", 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0xff})
fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
fsetxattr(r3, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0)
fgetxattr(r3, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde)

671.807753ms ago: executing program 1 (id=1203):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x2262, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1})
r4 = eventfd2(0x7, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socket$inet(0xa, 0x1, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc)

0s ago: executing program 5 (id=1204):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x2)
landlock_restrict_self(0xffffffffffffffff, 0x7)
landlock_restrict_self(0xffffffffffffffff, 0x9)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(0xffffffffffffffff, 0x5)
landlock_restrict_self(0xffffffffffffffff, 0xa)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

kernel console output (not intermixed with test programs):

promiscuous mode
[  253.001903][ T5724] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  253.035543][ T5724] usb 6-1: USB disconnect, device number 12
[  253.079366][ T8501] bridge4: port 3(veth5) entered blocking state
[  253.087579][ T8501] bridge4: port 3(veth5) entered disabled state
[  253.100734][ T8501] veth5: entered allmulticast mode
[  253.107360][ T8501] veth5: entered promiscuous mode
[  253.298144][ T8510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.597171][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.695735][ T5724] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  253.796815][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.827453][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.838263][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.849376][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.858631][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.875878][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.883441][ T5724] usb 2-1: Using ep0 maxpacket: 16
[  253.932292][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.958200][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.966351][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.966382][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  254.014853][ T5724] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  254.036591][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.047818][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.084796][ T5724] usb 2-1: config 0 descriptor??
[  254.176257][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.827217][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.877667][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.948777][ T5724] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  254.981397][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.001778][ T5724] microsoft 0003:045E:07DA.000F: unknown main item tag 0x4
[  255.028586][ T5724] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  255.086319][   T34] bridge_slave_1: left allmulticast mode
[  255.114753][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input16
[  255.132663][   T34] bridge_slave_1: left promiscuous mode
[  255.166339][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.230996][ T5724] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  255.262469][   T34] bridge_slave_0: left allmulticast mode
[  255.289143][   T34] bridge_slave_0: left promiscuous mode
[  255.327331][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.377089][   T34] veth5: left allmulticast mode
[  255.380229][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.397925][   T34] veth5: left promiscuous mode
[  255.409259][   T34] bridge4: port 3(veth5) entered disabled state
[  255.445032][   T34] veth0_to_bond: left allmulticast mode
[  255.462028][   T34] veth0_to_bond: left promiscuous mode
[  255.479835][   T34] bridge4: port 2(veth0_to_bond) entered disabled state
[  255.502293][   T34] veth3: left allmulticast mode
[  255.513750][   T34] veth3: left promiscuous mode
[  255.525924][   T34] bridge4: port 1(veth3) entered disabled state
[  255.726635][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  255.734204][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  255.909278][   T34] bond2 (unregistering): (slave geneve2): Releasing active interface
[  255.924798][   T34] geneve2 (unregistering): left allmulticast mode
[  255.925961][ T5358] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  255.940027][ T5635] Bluetooth: hci4: command tx timeout
[  255.983114][   T34] bond0 (unregistering): (slave bridge1): Releasing active interface
[  255.991733][   T34] bridge1 (unregistering): left promiscuous mode
[  255.998561][   T34] bridge1 (unregistering): left allmulticast mode
[  256.023306][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.032982][   T34] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  256.041837][   T34] bond3 (unregistering): (slave bridge2): the permanent HWaddr of slave - a2:b7:c8:37:a6:81 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  256.062609][   T34] bond3 (unregistering): (slave bridge3): making interface the new active one
[  256.072748][   T34] bond3 (unregistering): (slave bridge3): Error 16 setting MAC of new active slave
[  256.090355][   T34] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  256.101592][ T5358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  256.114832][ T5358] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  256.129072][ T5358] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  256.129306][   T34] bond1 (unregistering): (slave .`): Releasing active interface
[  256.141206][ T5358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.158986][ T5358] usb 7-1: config 0 descriptor??
[  256.165144][ T8552] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  256.185167][   T34] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.194919][   T34] bond_slave_0: left promiscuous mode
[  256.204374][   T34] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.214242][   T34] bond_slave_1: left promiscuous mode
[  256.220978][   T34] .` (unregistering): Released all slaves
[  256.233608][   T34] bond1 (unregistering): Released all slaves
[  256.257893][   T34] bond0 (unregistering): Released all slaves
[  256.280467][   T34] bond2 (unregistering): Released all slaves
[  256.306274][   T34] bond3 (unregistering): Released all slaves
[  256.324251][   T34] bond4 (unregistering): Released all slaves
[  256.438460][ T5724] usb 2-1: USB disconnect, device number 15
[  256.577569][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.585308][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.809467][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.834942][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.036392][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9
[  257.066553][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.115297][ T5358] usbhid 7-1:0.0: can't add hid device: -71
[  257.137226][ T5358] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  257.173083][ T5358] usb 7-1: USB disconnect, device number 4
[  257.326578][   T80] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.506040][ T8583] socket: no more sockets
[  257.623204][   T34] hsr_slave_0: left promiscuous mode
[  257.638429][   T34] hsr_slave_1: left promiscuous mode
[  257.667004][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.694645][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.718039][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.765215][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.844571][   T34] veth1_macvtap: left promiscuous mode
[  257.867823][   T34] veth0_macvtap: left promiscuous mode
[  258.030019][ T5635] Bluetooth: hci4: command tx timeout
[  258.101015][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.420015][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.497868][   T34] team0 (unregistering): Port device team_slave_1 removed
[  258.551759][   T34] team0 (unregistering): Port device team_slave_0 removed
[  258.756849][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.778664][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.792798][ T8521] bridge_slave_0: entered allmulticast mode
[  258.805725][ T8521] bridge_slave_0: entered promiscuous mode
[  258.833962][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10
[  258.853467][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.869138][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.876857][ T8521] bridge_slave_1: entered allmulticast mode
[  258.890026][ T8521] bridge_slave_1: entered promiscuous mode
[  258.918514][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.006130][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.045306][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.060796][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  259.060813][   T29] audit: type=1326 audit(1785795589.257:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fec38997d97 code=0x50000
[  259.131786][   T29] audit: type=1326 audit(1785795589.257:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec3893f399 code=0x50000
[  259.142082][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.204025][ T8521] team0: Port device team_slave_0 added
[  259.210378][   T29] audit: type=1326 audit(1785795589.257:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fec3893f45d code=0x50000
[  259.236047][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.249038][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.258694][   T29] audit: type=1326 audit(1785795589.257:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x50000
[  259.264490][ T8521] team0: Port device team_slave_1 added
[  259.283575][   T29] audit: type=1326 audit(1785795589.257:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x50000
[  259.318008][   T29] audit: type=1326 audit(1785795589.257:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x50000
[  259.344636][   T29] audit: type=1326 audit(1785795589.257:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.6.753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x50000
[  259.403441][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.419727][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.471445][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.489911][   T80] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.516511][   T34] IPVS: stop unused estimator thread 0...
[  259.523229][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.534472][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.654726][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.932262][ T8521] hsr_slave_0: entered promiscuous mode
[  259.947429][ T8521] hsr_slave_1: entered promiscuous mode
[  259.962020][ T8521] debugfs: 'hsr0' already exists in 'hsr'
[  259.976904][ T8521] Cannot create hsr debugfs directory
[  260.102894][ T5635] Bluetooth: hci4: command tx timeout
[  260.180101][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.095655][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11
[  261.195653][ T8636] picdev_write: 1 callbacks suppressed
[  261.195672][ T8636] kvm: pic: non byte write
[  261.227168][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.460221][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.843198][ T5699] IPVS: starting estimator thread 0...
[  261.854132][ T8654] netlink: 164 bytes leftover after parsing attributes in process `syz.6.762'.
[  261.880557][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.6.762'.
[  261.919758][ T5685] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  261.949973][ T8655] IPVS: using max 40 ests per chain, 96000 per kthread
[  262.109745][ T5685] usb 2-1: Using ep0 maxpacket: 32
[  262.156260][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  262.179751][ T5635] Bluetooth: hci4: command tx timeout
[  262.188406][ T5685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  262.255198][ T5685] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  262.264978][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.377841][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  262.410778][ T5685] usb 2-1: Product: syz
[  262.431440][ T5685] usb 2-1: Manufacturer: syz
[  262.457063][ T5685] usb 2-1: SerialNumber: syz
[  262.489382][ T5685] usb 2-1: config 0 descriptor??
[  262.510925][ T5685] hub 2-1:0.0: bad descriptor, ignoring hub
[  262.564717][ T5685] hub 2-1:0.0: probe with driver hub failed with error -5
[  262.828688][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.869092][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.040772][   T46] usb 2-1: USB disconnect, device number 16
[  263.301858][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.333909][ T8521] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  263.353242][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  263.386998][ T8521] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  263.454969][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  263.475923][ T8521] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  263.529484][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  263.571536][ T8521] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  263.702878][ T8521] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  263.929709][   T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  264.100649][   T46] usb 2-1: Using ep0 maxpacket: 32
[  264.125505][   T46] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  264.203114][   T46] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  264.237049][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.342135][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.358856][   T46] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  264.414048][ T8521] 8021q: adding VLAN 0 to HW filter on device team0
[  264.452281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  264.461544][   T46] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  264.505724][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.512938][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.533025][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.571902][   T46] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  264.623721][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.631133][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.676536][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.727553][   T46] usb 2-1: Product: syz
[  264.746283][   T46] usb 2-1: Manufacturer: syz
[  264.794876][   T46] usb 2-1: SerialNumber: syz
[  264.932387][ T8707] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.949371][    C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  265.033908][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.169517][   T46] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input17
[  265.262430][ T8521] veth0_vlan: entered promiscuous mode
[  265.369340][ T8521] veth1_vlan: entered promiscuous mode
[  265.379961][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.531551][   T46] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  265.565707][   T46]  (id 0x00)
[  265.719656][   T46] rc_core: IR keymap rc-imon-pad not found
[  265.750898][   T46] Registered IR keymap rc-empty
[  265.772247][   T46] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  265.810139][   T46] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  265.844858][ T8521] veth0_macvtap: entered promiscuous mode
[  265.900864][ T8521] veth1_macvtap: entered promiscuous mode
[  265.996894][   T46] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[  266.011943][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.063803][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.087563][   T46] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input18
[  266.150383][   T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.186000][   T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.203600][   T46] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:17> initialized
[  266.250366][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.301214][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.423902][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.789698][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.836765][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.174910][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.205437][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.460754][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.540158][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.179037][ T8772] netlink: 'syz.5.778': attribute type 1 has an invalid length.
[  268.293478][ T8772] 8021q: adding VLAN 0 to HW filter on device bond1
[  268.415448][ T8775] veth3: entered allmulticast mode
[  268.482401][ T8775] bond1: (slave veth3): Enslaving as an active interface with a down link
[  268.500633][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.508815][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.585577][ T8778] bond1: (slave veth0_to_bond): making interface the new active one
[  268.621141][ T8778] veth0_to_bond: entered promiscuous mode
[  268.629429][ T8778] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  268.669517][ T8772] macvlan2: entered promiscuous mode
[  268.675598][ T8772] macvlan2: entered allmulticast mode
[  268.689022][  T188] usb 2-1: USB disconnect, device number 17
[  268.703591][ T8772] bond1: entered promiscuous mode
[  268.728757][ T8772] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  268.772151][ T8772] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  268.884601][ T8772] bond1: left promiscuous mode
[  269.097015][ T8795] syzkaller0: entered promiscuous mode
[  269.127252][ T8795] syzkaller0: entered allmulticast mode
[  269.437629][  T188] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  269.449869][ T5715] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  269.550736][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.609793][ T5715] usb 6-1: Using ep0 maxpacket: 16
[  269.615078][  T188] usb 7-1: Using ep0 maxpacket: 8
[  269.626592][ T5715] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  269.646060][  T188] usb 7-1: unable to get BOS descriptor or descriptor too short
[  269.657892][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.666488][  T188] usb 7-1: config 6 has an invalid interface number: 212 but max is 0
[  269.681219][ T5715] usb 6-1: config 0 descriptor??
[  269.692482][  T188] usb 7-1: config 6 has no interface number 0
[  269.708115][  T188] usb 7-1: config 6 interface 212 has no altsetting 0
[  269.714374][ T5715] gspca_main: sonixj-2.14.0 probing 0471:0327
[  269.727679][  T188] usb 7-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51
[  269.747780][  T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.768862][  T188] usb 7-1: Product: syz
[  269.775587][  T188] usb 7-1: Manufacturer: syz
[  269.788145][  T188] usb 7-1: SerialNumber: syz
[  269.852917][ T8820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.863697][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.893736][ T8820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.902157][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.402948][  T188] gspca_main: konica-2.14.0 probing 04c8:0720
[  270.580942][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.592854][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.619975][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.660634][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.781696][ T5715] gspca_sonixj: reg_w1 err -71
[  272.787533][ T5715] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  272.824357][ T5715] usb 6-1: USB disconnect, device number 13
[  273.580103][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.788'.
[  273.642019][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.754647][ T5685] net_ratelimit: 1 callbacks suppressed
[  274.754664][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.833010][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.100859][ T5699] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  275.142164][ T8868] team0: Port device vxlan0 added
[  275.170142][ T1161] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.213184][ T1161] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.261977][ T1161] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.284287][ T5699] usb 4-1: Using ep0 maxpacket: 8
[  275.314987][ T5699] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  275.327303][ T1161] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.377594][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.428415][ T5699] usb 4-1: Product: syz
[  275.456724][ T5699] usb 4-1: Manufacturer: syz
[  275.493186][ T5699] usb 4-1: SerialNumber: syz
[  275.552300][ T5699] usb 4-1: config 0 descriptor??
[  275.823749][ T5699] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  275.876621][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.405523][ T8892] syzkaller0: entered promiscuous mode
[  276.425319][ T8892] syzkaller0: entered allmulticast mode
[  276.463163][ T8892] netlink: 44 bytes leftover after parsing attributes in process `syz.5.802'.
[  276.662727][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.827853][  T188] gspca_konica: reg_r err -71
[  276.903489][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.267650][ T5699] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  277.327655][ T5699] usb 4-1: USB disconnect, device number 26
[  277.951977][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.102826][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.261392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.271873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.427698][ T8920] syzkaller0: entered promiscuous mode
[  278.458509][ T8920] syzkaller0: entered allmulticast mode
[  278.497809][ T8923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.541203][ T8920] tipc: Resetting bearer <eth:syzkaller0>
[  278.560160][ T8919] tipc: Resetting bearer <eth:syzkaller0>
[  278.603690][ T8919] tipc: Disabling bearer <eth:syzkaller0>
[  278.816715][   T29] audit: type=1800 audit(1785795609.007:305): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.815" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  278.979907][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.060079][  T188] konica 7-1:6.212: probe with driver konica failed with error -71
[  279.107836][  T188] usb 7-1: USB disconnect, device number 5
[  279.175319][ T8937] syzkaller0: entered promiscuous mode
[  279.213400][ T8937] syzkaller0: entered allmulticast mode
[  279.574050][ T8942] binder_alloc: 8941: binder_alloc_buf size 4096 failed, no address space
[  279.610145][ T8942] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[  279.701322][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.033602][ T5715] net_ratelimit: 3 callbacks suppressed
[  280.033616][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.071518][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.343260][ T5692] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  281.360571][ T5692] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  281.394012][ T5692] usb 1-1: USB disconnect, device number 12
[  282.110740][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.739872][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.152696][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.764262][ T5715] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  283.942863][ T5715] usb 6-1: Using ep0 maxpacket: 8
[  283.950214][ T5715] usb 6-1: config 0 has an invalid interface number: 186 but max is 0
[  283.958716][ T5715] usb 6-1: config 0 has no interface number 0
[  283.966142][ T5715] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  283.977147][ T5715] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  283.987469][ T5715] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  283.999272][ T5715] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  284.010607][ T5715] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  284.020949][ T5715] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  284.037961][ T5715] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  284.047285][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.055587][ T5715] usb 6-1: Product: syz
[  284.062932][ T5715] usb 6-1: Manufacturer: syz
[  284.067568][ T5715] usb 6-1: SerialNumber: syz
[  284.080890][ T5715] usb 6-1: config 0 descriptor??
[  284.184686][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.369803][ T5715] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  284.392136][ T5715] usb 6-1: USB disconnect, device number 14
[  284.526967][ T8980] ���d7����o: renamed from lo (while UP)
[  284.629790][ T8985] warning: `syz.0.830' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  284.676637][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'.
[  284.751121][ T1151] veth0_to_bond: left promiscuous mode
[  284.830276][ T8988] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  285.231673][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.269502][ T9004] netlink: 'syz.1.835': attribute type 1 has an invalid length.
[  285.399470][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  285.482978][ T9009] xt_NFQUEUE: number of queues (65535) out of range (got 98302)
[  285.492875][ T9007] 8021q: adding VLAN 0 to HW filter on device bond1
[  285.610995][ T9004] 8021q: adding VLAN 0 to HW filter on device bond1
[  285.694809][ T9004] bond1: (slave geneve2): making interface the new active one
[  285.739438][ T5685] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  285.764934][ T9004] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  285.781157][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.822960][ T5685] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  285.830276][   T34] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  285.842898][   T34] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  285.920648][   T34] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  285.969973][   T34] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  286.269982][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.298066][ T9024] kvm_intel: kvm [9023]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1
[  287.312106][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.646246][ T9029] syzkaller0: entered promiscuous mode
[  287.666890][ T9029] syzkaller0: entered allmulticast mode
[  287.702629][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.790789][ T9031] syzkaller0: entered promiscuous mode
[  287.825457][ T9031] syzkaller0: entered allmulticast mode
[  287.957319][ T9034] netlink: 'syz.5.843': attribute type 1 has an invalid length.
[  288.343576][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.362887][ T9034] bond2: entered promiscuous mode
[  288.395836][ T9034] 8021q: adding VLAN 0 to HW filter on device bond2
[  288.480291][ T9035] macvtap1: entered allmulticast mode
[  288.532758][ T9036] macvtap2: entered allmulticast mode
[  288.610791][ T9037] bond2: (slave bridge2): making interface the new active one
[  288.618306][ T9037] bridge2: entered promiscuous mode
[  288.657981][ T9037] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  288.821799][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.846418][   T29] audit: type=1326 audit(1785795619.037:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  288.902607][   T29] audit: type=1326 audit(1785795619.037:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  288.948478][   T29] audit: type=1326 audit(1785795619.037:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  288.975899][   T29] audit: type=1326 audit(1785795619.037:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.038244][   T29] audit: type=1326 audit(1785795619.037:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.076788][   T29] audit: type=1326 audit(1785795619.037:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.103742][   T29] audit: type=1326 audit(1785795619.077:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.171711][   T29] audit: type=1326 audit(1785795619.077:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.214965][   T29] audit: type=1326 audit(1785795619.077:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.253776][   T29] audit: type=1326 audit(1785795619.097:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2bd79e019 code=0x7ffc0000
[  289.379942][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.388468][ T9048] 
: renamed from bond0 (while UP)
[  289.418300][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'.
[  289.468400][ T9059] veth1_macvtap: left promiscuous mode
[  289.527724][ T9064] overlayfs: missing 'lowerdir'
[  289.866233][ T9079] syzkaller0: entered promiscuous mode
[  289.884322][ T9079] syzkaller0: entered allmulticast mode
[  289.943784][ T9070] syzkaller0: entered promiscuous mode
[  289.974490][ T9070] syzkaller0: entered allmulticast mode
[  290.389861][ T5699] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  290.420361][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.561627][ T5699] usb 4-1: Using ep0 maxpacket: 8
[  290.584750][ T5699] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  290.611252][ T5699] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  290.699907][ T5699] usb 4-1: config 0 has no interface number 0
[  290.771228][ T5699] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  290.827302][ T5699] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  290.885502][ T5699] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  290.985137][ T5699] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[  291.032354][ T5699] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[  291.048481][ T9107] ipvlan1: Caught tx_queue_len zero misconfig
[  291.055759][ T5699] usb 4-1: Product: syz
[  291.059995][ T5699] usb 4-1: Manufacturer: syz
[  291.075763][ T5699] usb 4-1: config 0 descriptor??
[  291.099970][ T9085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  291.319651][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  291.470016][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.503778][   T10] usb 1-1: Using ep0 maxpacket: 32
[  291.526334][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  291.579662][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  291.593848][   T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  291.656314][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  291.676446][   T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  291.691026][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.699479][   T10] usb 1-1: Product: syz
[  291.706829][   T10] usb 1-1: Manufacturer: syz
[  291.755285][   T10] usb 1-1: SerialNumber: syz
[  291.806814][   T10] usb 1-1: config 0 descriptor??
[  291.820709][ T5699] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input19
[  291.860071][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.269598][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  292.289599][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  292.323546][   T10] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[  292.345272][   T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[  292.499856][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.538099][ T9111] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.868' sets config #0
[  292.552394][ T9107] netlink: 'syz.0.866': attribute type 9 has an invalid length.
[  292.585323][ T9116] syzkaller0: entered promiscuous mode
[  292.600591][   T10] usb 1-1: USB disconnect, device number 13
[  292.606590][ T9116] syzkaller0: entered allmulticast mode
[  292.614331][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.869'.
[  292.626733][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.869'.
[  292.782910][ T9122] syzkaller0: entered promiscuous mode
[  292.788639][ T9122] syzkaller0: entered allmulticast mode
[  292.807190][ T5724] usb 4-1: USB disconnect, device number 27
[  292.813268][    C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  292.989246][ T9124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  293.032893][ T9128] syzkaller0: entered promiscuous mode
[  293.038856][ T9128] syzkaller0: entered allmulticast mode
[  293.431915][ T9142] syzkaller0: entered promiscuous mode
[  293.437468][ T9142] syzkaller0: entered allmulticast mode
[  293.449166][ T9142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.459357][ T9142] tipc: Resetting bearer <eth:syzkaller0>
[  293.489825][ T9141] tipc: Resetting bearer <eth:syzkaller0>
[  293.541733][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.556458][ T9141] tipc: Disabling bearer <eth:syzkaller0>
[  293.681117][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'.
[  293.899990][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'.
[  293.915855][ T9154] veth1_macvtap: left promiscuous mode
[  294.057152][   T29] kauditd_printk_skb: 184 callbacks suppressed
[  294.057168][   T29] audit: type=1326 audit(1785795624.247:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.185454][   T29] audit: type=1326 audit(1785795624.247:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.286495][   T29] audit: type=1326 audit(1785795624.307:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.345363][   T29] audit: type=1326 audit(1785795624.307:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.369673][ T5685] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  294.378748][   T29] audit: type=1326 audit(1785795624.307:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.405409][   T29] audit: type=1326 audit(1785795624.317:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.462963][   T29] audit: type=1326 audit(1785795624.317:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.515122][   T29] audit: type=1326 audit(1785795624.317:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3899e019 code=0x7ffc0000
[  294.533136][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.580013][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.594218][   T29] audit: type=1326 audit(1785795624.327:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec3895e84e code=0x7ffc0000
[  294.632828][ T5715] IPVS: starting estimator thread 0...
[  294.632830][   T29] audit: type=1326 audit(1785795624.327:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9158 comm="syz.6.883" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec3899dcab code=0x7ffc0000
[  294.676488][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.806556][ T5685] usb 7-1: unable to get BOS descriptor or descriptor too short
[  294.821015][ T9169] IPVS: using max 54 ests per chain, 129600 per kthread
[  294.821855][ T5685] usb 7-1: unable to read config index 0 descriptor/start: -71
[  294.858529][ T5685] usb 7-1: can't read configurations, error -71
[  294.902029][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.999721][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  295.182038][   T10] usb 2-1: Using ep0 maxpacket: 32
[  295.191070][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.211172][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.236403][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  295.252641][   T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  295.274315][   T10] usb 2-1: Product: syz
[  295.284796][   T10] usb 2-1: Manufacturer: syz
[  295.325838][   T10] hub 2-1:4.0: USB hub found
[  295.522346][   T10] hub 2-1:4.0: 2 ports detected
[  295.620078][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.713968][ T9188] netlink: 172 bytes leftover after parsing attributes in process `syz.3.893'.
[  295.730561][ T9189] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  295.747859][   T10] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  295.767403][   T10] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  295.821730][   T10] usb 2-1: USB disconnect, device number 18
[  295.890339][ T9189] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  295.919985][ T9189] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  295.940396][ T5685] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  295.991206][ T9189] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  295.997334][ T9189] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  296.018015][ T9189] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  296.031855][ T9189] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  296.041394][ T9189] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  296.053009][ T9189] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  296.122270][ T5685] usb 7-1: Using ep0 maxpacket: 32
[  296.138238][ T5685] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.158783][ T5685] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  296.192340][ T5685] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  296.218240][ T5685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.247860][ T5685] usb 7-1: config 0 descriptor??
[  296.663360][   T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.672278][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.683975][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.774148][ T5685] usb 7-1: USB disconnect, device number 7
[  296.858356][ T9213] syzkaller0: entered promiscuous mode
[  296.874586][ T9213] syzkaller0: entered allmulticast mode
[  297.160543][ T5635] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  297.302871][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.315600][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.324536][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.419844][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  297.420462][ T5685] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  297.597191][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  297.600622][ T5685] usb 1-1: Using ep0 maxpacket: 32
[  297.633068][   T10] usb 6-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  297.670287][ T5685] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  297.679400][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  297.681649][   T10] usb 6-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40
[  297.701286][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.755211][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.764358][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.786727][ T5685] usb 1-1: Product: syz
[  297.801967][ T5685] usb 1-1: Manufacturer: syz
[  297.804511][   T10] usb 6-1: Manufacturer: ј
[  297.820379][ T5685] usb 1-1: SerialNumber: syz
[  297.851649][ T5685] usb 1-1: config 0 descriptor??
[  297.899757][   T10] usb 6-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟
[  297.919409][ T5685] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  297.940823][ T5635] Bluetooth: hci1: command 0x0406 tx timeout
[  297.951900][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.962401][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.029912][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  298.099665][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[  298.200730][ T9225] netlink: 260 bytes leftover after parsing attributes in process `syz.5.907'.
[  298.234204][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'.
[  298.371556][   T10] usbhid 6-1:1.0: can't add hid device: -71
[  298.396598][   T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  298.446890][   T10] usb 6-1: USB disconnect, device number 15
[  298.613491][ T9250] netlink: 84 bytes leftover after parsing attributes in process `syz.1.916'.
[  298.625774][ T9250] netlink: 'syz.1.916': attribute type 1 has an invalid length.
[  298.789749][ T5699] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  298.950102][ T5699] usb 4-1: Using ep0 maxpacket: 8
[  298.971659][ T5699] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  299.005171][ T5699] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  299.046951][ T5699] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  299.106090][ T5699] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  299.150447][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.228803][ T5699] usbtmc 4-1:16.0: bulk endpoints not found
[  299.266671][ T9260] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  299.276564][ T9257] syzkaller0: entered promiscuous mode
[  299.288827][ T9259] IPVS: stopping backup sync thread 9260 ...
[  299.297419][ T9257] syzkaller0: entered allmulticast mode
[  299.579725][  T809] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  299.650141][ T5685] gspca_topro: reg_r err -110
[  299.678763][ T5685] gspca_topro: Sensor soi763a
[  299.770645][  T809] usb 7-1: Using ep0 maxpacket: 16
[  299.795878][  T809] usb 7-1: unable to get BOS descriptor or descriptor too short
[  299.825202][  T809] usb 7-1: config 174 has an invalid interface number: 197 but max is 0
[  299.856226][  T809] usb 7-1: config 174 has no interface number 0
[  299.875936][  T809] usb 7-1: config 174 interface 197 has no altsetting 0
[  299.899814][  T809] usb 7-1: New USB device found, idVendor=0572, idProduct=0000, bcdDevice= 0.00
[  299.949080][  T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.020002][ T5635] Bluetooth: hci1: command 0x0406 tx timeout
[  300.062740][ T5358] usb 1-1: USB disconnect, device number 14
[  300.099738][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  300.148762][ T9267] syzkaller0: entered promiscuous mode
[  300.170526][ T9267] syzkaller0: entered allmulticast mode
[  300.179801][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[  300.314802][  T809] usb 7-1: string descriptor 0 read error: -71
[  300.357387][  T809] usb 7-1: USB disconnect, device number 8
[  300.819973][  T809] net_ratelimit: 4 callbacks suppressed
[  300.819994][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.061197][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.315448][ T9294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.333864][ T9294] syzkaller0: entered promiscuous mode
[  301.352077][ T9294] syzkaller0: entered allmulticast mode
[  301.408572][ T9297] capability: warning: `syz.0.930' uses deprecated v2 capabilities in a way that may be insecure
[  301.492253][ T9299] syzkaller0: entered promiscuous mode
[  301.505055][ T9299] syzkaller0: entered allmulticast mode
[  301.645631][ T5358] usb 4-1: USB disconnect, device number 28
[  301.732124][  T809] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  301.779793][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  301.861071][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.889646][  T809] usb 6-1: Using ep0 maxpacket: 8
[  301.902866][  T809] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.920782][  T809] usb 6-1: config 0 has no interfaces?
[  301.934769][  T809] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  301.952627][  T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.973418][  T809] usb 6-1: Product: syz
[  301.987330][  T809] usb 6-1: Manufacturer: syz
[  302.003558][  T809] usb 6-1: SerialNumber: syz
[  302.037462][  T809] usb 6-1: config 0 descriptor??
[  302.189782][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  302.259742][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[  302.293758][ T9294] tipc: Resetting bearer <eth:syzkaller0>
[  302.317909][  T809] usb 6-1: USB disconnect, device number 16
[  302.338753][ T9292] tipc: Resetting bearer <eth:syzkaller0>
[  302.401739][ T9292] tipc: Disabling bearer <eth:syzkaller0>
[  302.420785][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.436135][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.454259][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.574824][ T9306] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.606298][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  302.641328][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'.
[  302.668175][ T9310] netlink: 'syz.3.934': attribute type 4 has an invalid length.
[  302.697023][ T9310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.934'.
[  302.739482][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.782097][ T9306] bond1: (slave bond0): making interface the new active one
[  302.805619][ T9306] bond1: (slave bond0): Enslaving as an active interface with an up link
[  302.841435][ T9310] .`: renamed from bond0 (while UP)
[  303.064450][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.073453][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.101243][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.459794][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.296890][ T9339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  304.360350][ T9339] kvm: pic: level sensitive irq not supported
[  304.410617][ T9347] syzkaller0: entered promiscuous mode
[  304.463601][ T9347] syzkaller0: entered allmulticast mode
[  304.519354][ T9348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.554096][ T9347] tipc: Resetting bearer <eth:syzkaller0>
[  304.577349][ T9342] tipc: Resetting bearer <eth:syzkaller0>
[  304.670192][ T9342] tipc: Disabling bearer <eth:syzkaller0>
[  305.131308][ T5699] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  305.310209][ T5699] usb 4-1: Using ep0 maxpacket: 8
[  305.336219][ T5699] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  305.363010][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.374304][ T5699] usb 4-1: Product: syz
[  305.378557][ T5699] usb 4-1: Manufacturer: syz
[  305.391257][ T5699] usb 4-1: SerialNumber: syz
[  305.445411][ T5699] usb 4-1: config 0 descriptor??
[  305.549709][ T5715] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  305.695285][ T5699] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  305.737587][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  305.776663][ T5715] usb 1-1: not running at top speed; connect to a high speed hub
[  305.822917][ T5715] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[  305.856531][ T5715] usb 1-1: config 0 has no interface number 0
[  305.881235][ T5715] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  305.922673][ T5715] usb 1-1: config 0 interface 88 has no altsetting 0
[  305.964337][ T5715] usb 1-1: language id specifier not provided by device, defaulting to English
[  306.000979][ T5715] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  306.001967][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'.
[  306.048664][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  306.069612][ T5715] usb 1-1: Product: syz
[  306.078196][ T5715] usb 1-1: SerialNumber: Љ
[  306.088236][ T5715] usb 1-1: config 0 descriptor??
[  306.096739][ T9362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  306.192864][ T9371] syzkaller0: entered promiscuous mode
[  306.198907][ T9371] syzkaller0: entered allmulticast mode
[  306.416262][ T9362] vlan2: entered promiscuous mode
[  306.462280][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[  306.471595][ T9362] hsr0: entered promiscuous mode
[  306.480139][ T9362] vlan2: entered allmulticast mode
[  306.485685][ T9362] hsr0: entered allmulticast mode
[  306.491985][ T9362] hsr_slave_0: entered allmulticast mode
[  306.498029][ T9362] hsr_slave_1: entered allmulticast mode
[  306.543668][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.572432][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.580000][  T809] net_ratelimit: 3 callbacks suppressed
[  306.580019][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.623154][ T9376] hsr_slave_0: left promiscuous mode
[  306.652023][ T9376] hsr_slave_1: left promiscuous mode
[  307.031917][ T5715] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input20
[  307.062685][ T9390] syzkaller0: entered promiscuous mode
[  307.082676][ T9390] syzkaller0: entered allmulticast mode
[  307.106635][ T5715] usb 1-1: USB disconnect, device number 15
[  307.142741][ T5699] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  307.186203][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.208152][ T5699] usb 4-1: USB disconnect, device number 29
[  307.541394][   T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.550411][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.559198][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.625936][ T9404] syzkaller0: entered promiscuous mode
[  307.632529][ T9404] syzkaller0: entered allmulticast mode
[  308.056907][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'.
[  308.590366][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.811281][ T9423] syzkaller0: entered promiscuous mode
[  308.820577][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.829354][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.852757][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.912272][ T9423] syzkaller0: entered allmulticast mode
[  309.166436][ T9428] binder: 9426:9428 ioctl 8903 0 returned -22
[  309.331223][ T9430] syzkaller0: entered promiscuous mode
[  309.339505][ T9430] syzkaller0: entered allmulticast mode
[  309.453061][ T9432] syzkaller0: entered promiscuous mode
[  309.467985][ T9432] syzkaller0: entered allmulticast mode
[  309.619838][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.662072][ T9438] syzkaller0: entered promiscuous mode
[  309.668951][ T9438] syzkaller0: entered allmulticast mode
[  309.890714][ T9444] syzkaller0: entered promiscuous mode
[  309.896623][ T9444] syzkaller0: entered allmulticast mode
[  310.369665][ T5699] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  310.384061][ T5635] Bluetooth: hci4: unexpected event for opcode 0x1009
[  310.539632][ T5699] usb 7-1: Using ep0 maxpacket: 8
[  310.555700][ T5699] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  310.587953][ T5699] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  310.615684][ T5699] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  310.626850][ T5699] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  310.642525][ T5699] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  310.652972][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.892158][ T5699] usb 7-1: GET_CAPABILITIES returned 0
[  310.906724][ T5699] usbtmc 7-1:16.0: can't read capabilities
[  311.069373][ T9481] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  311.113818][    C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  311.130888][ T5699] usb 7-1: USB disconnect, device number 9
[  311.154474][ T9485] syzkaller0: entered promiscuous mode
[  311.173046][ T9485] syzkaller0: entered allmulticast mode
[  311.429688][  T809] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  311.456063][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  311.456078][   T29] audit: type=1326 audit(1785795641.647:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.5.993" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f3a0d197d97 code=0x0
[  311.603877][  T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.633957][  T809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  311.670594][  T809] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  311.698074][  T809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  311.707484][ T5358] net_ratelimit: 2 callbacks suppressed
[  311.707502][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.730927][  T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.755476][  T809] usb 1-1: Product: syz
[  311.769025][  T809] usb 1-1: Manufacturer: syz
[  311.788319][  T809] usb 1-1: SerialNumber: syz
[  311.826633][  T809] usb 1-1: selecting invalid altsetting 1
[  312.555926][  T809] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  312.567176][  T809] cdc_ncm 1-1:1.0: bind() failure
[  312.664902][  T809] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  312.676337][  T809] cdc_ncm 1-1:1.1: bind() failure
[  312.739774][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.776967][  T809] usb 1-1: USB disconnect, device number 16
[  312.799111][ T9507] kvm: kvm [9506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000001
[  312.827855][ T9507] kvm: kvm [9506]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800000008
[  313.312937][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.324307][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.334049][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.436369][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.829668][  T809] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  313.994626][  T809] usb 2-1: Using ep0 maxpacket: 16
[  314.021610][  T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  314.042812][  T809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.119503][  T809] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  314.128950][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.141187][  T809] usb 2-1: Product: syz
[  314.148483][  T809] usb 2-1: Manufacturer: syz
[  314.156447][  T809] usb 2-1: SerialNumber: syz
[  314.201438][  T809] usb 2-1: 0:2 : does not exist
[  314.289670][ T5358] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  314.446501][  T809] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  314.467506][ T5358] usb 6-1: Using ep0 maxpacket: 32
[  314.508227][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.581560][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.590342][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.604610][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.816507][  T809] usb 2-1: USB disconnect, device number 19
[  315.013919][ T5358] usb 6-1: unable to get BOS descriptor or descriptor too short
[  315.021800][ T5358] usb 6-1: too many configurations: 80, using maximum allowed: 8
[  315.092131][ T5358] usb 6-1: unable to read config index 0 descriptor/start: -71
[  315.107198][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  315.132975][ T5358] usb 6-1: can't read configurations, error -71
[  316.595086][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'.
[  316.756173][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.763923][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.959745][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  317.022251][ T9551] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.084241][ T9561] raw_sendmsg: syz.3.1013 forgot to set AF_INET. Fix it!
[  317.119726][   T10] usb 1-1: Using ep0 maxpacket: 16
[  317.137753][   T10] usb 1-1: config 3 has an invalid interface number: 20 but max is 0
[  317.143615][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.152843][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  317.167153][   T10] usb 1-1: config 3 has no interface number 0
[  317.198786][   T10] usb 1-1: config 3 interface 20 has no altsetting 0
[  317.221286][ T9551] vlan1: left allmulticast mode
[  317.226288][ T9551] veth0_vlan: left allmulticast mode
[  317.231265][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  317.275296][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.322704][   T10] usb 1-1: Product: syz
[  317.349145][   T10] usb 1-1: Manufacturer: syz
[  317.374392][   T10] usb 1-1: SerialNumber: syz
[  317.498641][ T9551] tipc: Resetting bearer <eth:syzkaller0>
[  317.537551][ T9551] syzkaller0: left promiscuous mode
[  317.555034][ T9551] syzkaller0: left allmulticast mode
[  317.621365][  T809] net_ratelimit: 3 callbacks suppressed
[  317.621382][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.661236][ T9556] tls_set_device_offload: netdev not found
[  317.881821][ T9553] 8021q: adding VLAN 0 to HW filter on device 

[  317.913954][ T9553] 8021q: adding VLAN 0 to HW filter on device team0
[  317.972264][ T9553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.007755][ T9565] xt_hashlimit: size too large, truncated to 1048576
[  318.111213][ T9500] Set syz1 is full, maxelem 65536 reached
[  318.190812][ T9553] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.198127][ T9553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.306329][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.313669][ T9553] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.390546][ T9553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.444534][ T9553] veth1_vlan: left promiscuous mode
[  318.451477][ T9553] veth0_vlan: left promiscuous mode
[  318.463057][ T9553] veth0_vlan: entered promiscuous mode
[  318.476157][ T9553] veth1_vlan: entered promiscuous mode
[  318.507430][ T9553] veth0_macvtap: left promiscuous mode
[  318.515509][ T9553] veth0_macvtap: entered promiscuous mode
[  318.534314][ T9553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  318.543683][ T9553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  318.552656][ T9553] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  318.561595][ T9553] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  318.572844][ T9553] syz_tun: entered promiscuous mode
[  318.578645][ T9575] program syz.3.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  318.585745][ T9553] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.656316][ T9572] syzkaller1: entered promiscuous mode
[  318.660359][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.671757][ T9572] syzkaller1: entered allmulticast mode
[  318.679081][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'.
[  319.021301][ T9585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  319.076626][ T9585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  319.107539][   T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input21
[  319.172388][ T4977] bcm5974 1-1:3.20: could not read from device
[  319.202544][ T4977] bcm5974 1-1:3.20: could not read from device
[  319.221170][   T10] usb 1-1: USB disconnect, device number 17
[  319.247367][ T4977] bcm5974 1-1:3.20: could not read from device
[  319.352960][ T9594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.380454][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.397643][ T9594] syzkaller0: entered promiscuous mode
[  319.408554][ T9594] syzkaller0: entered allmulticast mode
[  319.418029][ T9594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  319.492394][ T9594] syzkaller0: mtu less than device minimum
[  319.708058][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.718160][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.726318][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.744559][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.079657][  T809] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  320.261618][  T809] usb 4-1: Using ep0 maxpacket: 32
[  320.322399][  T809] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  320.337542][  T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.365248][ T9622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.369795][  T809] usb 4-1: config 0 has no interface number 0
[  320.399713][  T809] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  320.420394][ T9622] syzkaller0: mtu less than device minimum
[  320.433610][  T809] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  320.480871][  T809] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  320.519735][  T809] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  320.526393][ T9621] kvm: pic: non byte write
[  320.567026][  T809] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  320.613082][  T809] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  320.658837][  T809] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 252, changing to 11
[  320.736112][ T5685] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  320.752933][  T809] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  320.801695][  T809] usb 4-1: config 0 interface 239 has no altsetting 0
[  320.826722][ T5685] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  320.866220][  T809] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  320.892282][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.930726][  T809] usb 4-1: Product: syz
[  320.940971][  T809] usb 4-1: Manufacturer: syz
[  320.954820][  T809] usb 4-1: SerialNumber: syz
[  320.977534][  T809] usb 4-1: config 0 descriptor??
[  321.006296][ T9603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  321.026733][ T9603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  321.286326][ T5635] Bluetooth: hci5: urb ffff88802ab98c00 submission failed (90)
[  321.314332][ T9603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1023'.
[  321.340463][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.372507][ T9603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.811198][ T9635] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  321.938849][   T29] audit: type=1800 audit(1785795652.127:553): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1030" name="bus" dev="ramfs" ino=38037 res=0 errno=0
[  322.179704][ T5724] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  322.463459][ T9664] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  322.560075][ T5358] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  322.714922][ T5724] usb 6-1: no configurations
[  322.751133][ T5358] usb 2-1: Using ep0 maxpacket: 32
[  322.796962][ T5358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.797553][ T5724] usb 6-1: can't read configurations, error -22
[  322.833062][    T9] usb 4-1: USB disconnect, device number 30
[  322.843760][  T809] net_ratelimit: 4 callbacks suppressed
[  322.843779][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.893210][ T5358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.904525][ T5358] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  323.015991][ T5358] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  323.107512][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.191522][ T5358] usb 2-1: config 0 descriptor??
[  323.580731][    T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  323.756173][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.783665][    T9] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  323.799135][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.821899][    T9] usb 4-1: Product: syz
[  323.849080][    T9] usb 4-1: Manufacturer: syz
[  323.860253][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.884130][    T9] usb 4-1: SerialNumber: syz
[  323.915536][    T9] usb 4-1: config 0 descriptor??
[  324.054600][    T9] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5
[  324.142839][ T5358] usbhid 2-1:0.0: can't add hid device: -71
[  324.191874][ T5358] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  324.222052][ T9728] syzkaller0: entered promiscuous mode
[  324.238147][ T5358] usb 2-1: USB disconnect, device number 20
[  324.260042][ T9728] syzkaller0: entered allmulticast mode
[  324.289054][ T9729] TC_ACT_REPEAT abuse ?
[  324.822894][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.901985][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.946020][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.958915][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.460993][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.867054][ T5358] usb 4-1: USB disconnect, device number 31
[  325.940562][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.149646][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  326.349785][    T9] usb 1-1: Using ep0 maxpacket: 8
[  326.361068][    T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  326.376637][    T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  326.413399][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  326.459335][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  326.480216][ T5358] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  326.502558][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.543815][    T9] usbtmc 1-1:16.0: bulk endpoints not found
[  326.655795][ T5358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.696270][ T5358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  326.749433][ T5358] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  326.808481][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  326.860607][ T5358] usb 2-1: SerialNumber: syz
[  326.980796][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.125407][ T5358] usb 2-1: 0:2 : does not exist
[  327.188626][ T5358] usb 2-1: USB disconnect, device number 21
[  327.230256][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  328.019879][ T5358] net_ratelimit: 3 callbacks suppressed
[  328.019901][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.499823][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.872202][ T5358] usb 1-1: USB disconnect, device number 18
[  329.061032][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.321038][ T9777] kvm: kvm [9776]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080
[  329.367856][ T9777] kvm: kvm [9776]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[  329.390506][ T9777] kvm: kvm [9776]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  330.099938][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.233388][ T9783] kvm: kvm [9782]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  330.286110][ T9783] kvm: kvm [9782]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  330.360016][ T5715] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  330.526414][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.548662][ T5715] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  330.576602][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.633717][ T5715] usb 1-1: config 0 descriptor??
[  330.673476][ T5715] pwc: Askey VC010 type 2 USB webcam detected.
[  330.809684][ T5724] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  330.898889][ T5715] pwc: send_video_command error -71
[  330.923851][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  330.954760][ T5715] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  330.990685][ T5724] usb 6-1: Using ep0 maxpacket: 32
[  331.006379][ T5715] usb 1-1: USB disconnect, device number 19
[  331.008831][ T5724] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  331.048333][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.095238][ T5724] usb 6-1: config 0 descriptor??
[  331.131891][ T5724] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  331.140384][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.141513][ T9794] syzkaller0: entered promiscuous mode
[  331.160681][ T9794] syzkaller0: entered allmulticast mode
[  331.479645][ T5715] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  331.549920][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.654709][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.669949][  T809] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  331.685151][ T5715] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  331.708592][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.737453][ T5715] usb 1-1: config 0 descriptor??
[  331.761779][ T5715] pwc: Askey VC010 type 2 USB webcam detected.
[  331.774501][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  331.845578][  T809] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  331.866140][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.887850][  T809] usb 4-1: Product: syz
[  331.897883][  T809] usb 4-1: Manufacturer: syz
[  331.911474][  T809] usb 4-1: SerialNumber: syz
[  331.939699][    T9] usb 7-1: Using ep0 maxpacket: 16
[  331.940361][  T809] usb 4-1: UAS is ignored for this device, using usb-storage instead
[  331.966053][    T9] usb 7-1: config 0 has an invalid interface number: 107 but max is 0
[  331.980879][  T809] usb 4-1: UAS is ignored for this device, using usb-storage instead
[  331.992138][    T9] usb 7-1: config 0 has no interface number 0
[  332.004755][    T9] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9
[  332.016500][  T809] usb-storage 4-1:1.0: USB Mass Storage device detected
[  332.036807][    T9] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024
[  332.057395][    T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  332.068591][    T9] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  332.077700][    T9] usb 7-1: Product: syz
[  332.084526][    T9] usb 7-1: Manufacturer: syz
[  332.089928][    T9] usb 7-1: SerialNumber: syz
[  332.097769][  T809] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  332.124082][    T9] usb 7-1: config 0 descriptor??
[  332.129745][  T809] scsi host1: usb-storage 4-1:1.0
[  332.138198][    T9] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected
[  332.148554][    T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81
[  332.166388][    T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1
[  332.179247][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00
[  332.186234][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.203188][    T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  332.219317][ T5715] pwc: recv_control_msg error -32 req 02 val 2700
[  332.220524][    T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2
[  332.240991][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00
[  332.261888][ T5715] pwc: recv_control_msg error -32 req 04 val 1000
[  332.281909][ T5715] pwc: recv_control_msg error -32 req 04 val 1300
[  332.283718][    T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  332.315991][    T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4
[  332.326378][    T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  332.328621][ T5715] pwc: recv_control_msg error -32 req 04 val 1400
[  332.361275][    T9] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6
[  332.361326][ T5715] pwc: recv_control_msg error -32 req 02 val 2000
[  332.387108][ T5715] pwc: recv_control_msg error -32 req 02 val 2100
[  332.387192][    T9] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  332.396269][ T5715] pwc: recv_control_msg error -32 req 04 val 1500
[  332.413142][ T5715] pwc: recv_control_msg error -32 req 02 val 2500
[  332.426601][ T5715] pwc: recv_control_msg error -32 req 02 val 2400
[  332.436525][ T5715] pwc: recv_control_msg error -32 req 02 val 2600
[  332.647571][ T5715] pwc: recv_control_msg error -71 req 02 val 2800
[  332.662711][ T5715] pwc: recv_control_msg error -71 req 04 val 1100
[  332.671705][ T5715] pwc: recv_control_msg error -71 req 04 val 1200
[  332.684305][  T809] usb 4-1: USB disconnect, device number 32
[  332.704105][ T5715] pwc: Registered as video103.
[  332.733558][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  332.808903][ T5715] usb 1-1: USB disconnect, device number 20
[  333.231871][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.447039][  T809] usb 7-1: USB disconnect, device number 10
[  333.539533][  T809] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  333.626937][  T809] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  333.696289][  T809] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  333.843264][  T809] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  333.878454][  T809] keyspan 7-1:0.107: device disconnected
[  334.259902][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.425120][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.587822][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.644428][ T5724] gspca_vc032x: reg_w err -71
[  334.650077][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.657553][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.695232][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.744786][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.759299][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.798780][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.821890][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.861407][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.890534][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  334.936138][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.002430][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.013194][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.135856][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.230391][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.262036][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.284083][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.300220][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.312682][ T5724] gspca_vc032x: I2c Bus Busy Wait 00
[  335.339084][ T5724] gspca_vc032x: Unknown sensor...
[  335.354506][ T5724] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  335.412337][ T5724] usb 6-1: USB disconnect, device number 21
[  336.187838][ T9848] syzkaller0: entered promiscuous mode
[  336.205789][ T9848] syzkaller0: entered allmulticast mode
[  336.247631][ T9848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.293666][ T9848] tipc: Resetting bearer <eth:syzkaller0>
[  336.328386][ T9847] tipc: Resetting bearer <eth:syzkaller0>
[  336.339832][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.400164][ T9847] tipc: Disabling bearer <eth:syzkaller0>
[  337.380187][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.621626][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.879493][ T5699] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  338.079627][ T5699] usb 2-1: Using ep0 maxpacket: 32
[  338.145209][ T5699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.267746][ T5699] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  338.342443][ T5699] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  338.424021][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.443056][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.555161][ T5699] usb 2-1: config 0 descriptor??
[  338.781604][ T9886] netlink: 'syz.6.1086': attribute type 13 has an invalid length.
[  338.907010][ T9886] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1086'.
[  339.174745][  T809] usb 2-1: USB disconnect, device number 22
[  339.461404][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.500267][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.659955][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.827834][ T5699] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  340.901811][ T9935] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1092'.
[  341.033553][ T5699] usb 7-1: Using ep0 maxpacket: 32
[  341.093602][ T5699] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  341.155643][ T5699] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  341.178798][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.213488][ T5699] usb 7-1: config 0 descriptor??
[  341.542775][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.666919][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x7
[  341.698457][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.726265][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.744882][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.765038][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.785130][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.796543][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.809136][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.824704][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.838974][ T5699] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0
[  341.930062][ T5699] hid-picolcd 0003:04D8:C002.0012: No report with id 0x11 found
[  342.579960][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.254312][   T29] audit: type=1800 audit(1785795673.447:554): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1103" name="/" dev="fuse" ino=1 res=0 errno=0
[  343.620186][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.675243][ T5715] usb 7-1: USB disconnect, device number 11
[  343.710338][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.948694][ T9987] syz.3.1105 (9987): drop_caches: 2
[  344.026102][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.309727][ T5715] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  344.530813][ T5715] usb 7-1: Using ep0 maxpacket: 8
[  344.565344][ T5715] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.628506][ T5715] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  344.664801][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.685004][ T5715] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  344.725687][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.764110][ T5715] usb 7-1: config 0 descriptor??
[  345.035487][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'.
[  345.226772][ T5715] ryos 0003:1E7D:3138.0013: unexpected long global item
[  345.277856][ T5715] ryos 0003:1E7D:3138.0013: parse failed
[  345.294742][ T5715] ryos 0003:1E7D:3138.0013: probe with driver ryos failed with error -22
[  345.344057][T10009] syzkaller0: left promiscuous mode
[  345.364466][T10009] syzkaller0: left allmulticast mode
[  345.476884][ T5715] usb 7-1: USB disconnect, device number 12
[  345.555312][T10016] sch_tbf: burst 2 is lower than device syzkaller0 mtu (65589) !
[  345.662188][T10016] syzkaller0: entered promiscuous mode
[  345.681925][T10016] syzkaller0: entered allmulticast mode
[  345.701405][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.847696][T10021] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  346.170411][ T5724] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  346.378258][ T5724] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  346.399482][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.418959][ T5724] usb 2-1: Product: syz
[  346.431619][ T5724] usb 2-1: Manufacturer: syz
[  346.444182][ T5724] usb 2-1: SerialNumber: syz
[  346.452115][ T5724] usb 2-1: config 0 descriptor??
[  346.471856][ T5724] hub 2-1:0.0: bad descriptor, ignoring hub
[  346.486521][ T5724] hub 2-1:0.0: probe with driver hub failed with error -5
[  346.510482][ T5724] f81232 2-1:0.0: f81534a converter detected
[  346.681102][ T5724] f81534a ttyUSB0: f81232_set_register failed status: -71
[  346.704864][ T5724] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  346.739917][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.752308][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.789679][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  346.949677][    T9] usb 4-1: Using ep0 maxpacket: 32
[  346.970927][    T9] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  346.995687][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.007217][ T5724] usb 2-1: reset high-speed USB device number 23 using dummy_hcd
[  347.032200][    T9] usb 4-1: Product: syz
[  347.045724][    T9] usb 4-1: Manufacturer: syz
[  347.066117][    T9] usb 4-1: SerialNumber: syz
[  347.152981][    T9] usb 4-1: config 0 descriptor??
[  347.229346][    T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  347.261641][ T5724] usb 2-1: device firmware changed
[  347.337285][ T5724] usb 2-1: USB disconnect, device number 23
[  347.369876][ T5724] f81232 2-1:0.0: device disconnected
[  347.719735][ T5724] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  347.781739][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.893651][ T5724] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  347.903243][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.911403][ T5724] usb 2-1: Product: ࠌ
[  347.915776][ T5724] usb 2-1: Manufacturer: 
[  347.920271][ T5724] usb 2-1: SerialNumber: 충黍စfi䉮ۣ騸໑椈埯᧎㿔ꤧ﬇凣ꝸቋ䌎㵬孲裟桮컙ꡄ碋ꑽ␣퀹㜗㤯轀灧耑
[  347.937014][ T5724] usb 2-1: config 0 descriptor??
[  347.946563][ T5724] hub 2-1:0.0: bad descriptor, ignoring hub
[  347.953452][ T5724] hub 2-1:0.0: probe with driver hub failed with error -5
[  347.961672][ T5724] f81232 2-1:0.0: f81534a converter detected
[  348.179346][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.204777][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.229465][ T5724] usb 2-1: f81534a converter now attached to ttyUSB0
[  348.439655][ T5715] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  348.519685][ T5685] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  348.569976][  T809] usb 2-1: USB disconnect, device number 24
[  348.585510][  T809] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  348.595049][  T809] f81232 2-1:0.0: device disconnected
[  348.600650][ T5715] usb 7-1: Using ep0 maxpacket: 32
[  348.671925][ T5685] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  348.701587][ T5685] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  348.724978][ T5685] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  348.745923][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.821630][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.888670][ T5715] usb 7-1: unable to get BOS descriptor or descriptor too short
[  348.912398][ T5715] usb 7-1: too many configurations: 80, using maximum allowed: 8
[  348.923260][ T5715] usb 7-1: unable to read config index 0 descriptor/start: -71
[  348.935581][ T5715] usb 7-1: can't read configurations, error -71
[  348.960473][    T9] gspca_topro: reg_r err -110
[  348.968944][    T9] gspca_topro: Sensor soi763a
[  349.154120][ T5724] usb 4-1: USB disconnect, device number 33
[  349.342601][  T809] hid_parser_main: 31 callbacks suppressed
[  349.342654][  T809] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  349.410069][  T809] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  349.780878][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.879739][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.689731][  T809] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  350.889765][  T809] usb 4-1: Using ep0 maxpacket: 16
[  350.924334][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.959435][  T809] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  351.034629][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.112851][  T809] usb 4-1: Product: syz
[  351.130887][  T809] usb 4-1: Manufacturer: syz
[  351.176305][  T809] usb 4-1: SerialNumber: syz
[  351.225426][  T809] usb 4-1: config 0 descriptor??
[  351.276395][  T809] usb 4-1: selecting invalid altsetting 1
[  351.308323][  T809] technisat-usb2: could not set alternate setting to 0
[  351.436093][ T5685] usb 6-1: USB disconnect, device number 22
[  351.486632][  T809] technisat-usb2: firmware version: 0.0
[  351.538550][  T809] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  351.941116][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.988658][  T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  352.057817][  T809] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  352.090339][T10082] syzkaller0: entered promiscuous mode
[  352.102171][  T809] usb 4-1: media controller created
[  352.115549][T10082] syzkaller0: entered allmulticast mode
[  352.123730][  T809] technisat-usb2: i2c-error: out failed 53 = -22
[  352.161475][T10083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.176854][  T809] dvb-usb: MAC address reading failed.
[  352.319200][  T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  352.461889][T10087] technisat-usb2: i2c-error: out failed 00 = -22
[  352.534220][  T809] DVB: Unable to find symbol stv090x_attach()
[  352.573483][  T809] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  352.794198][  T809] rc_core: IR keymap rc-technisat-usb2 not found
[  352.803968][  T809] Registered IR keymap rc-empty
[  352.821326][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.838840][  T809] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  352.843463][T10083] tipc: Resetting bearer <eth:syzkaller0>
[  352.895378][T10094] binder: 10093:10094 ioctl c018620b 0 returned -14
[  352.905307][T10081] tipc: Resetting bearer <eth:syzkaller0>
[  352.906164][  T809] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23
[  352.953914][  T809] dvb-usb: schedule remote query interval to 100 msecs.
[  352.973817][  T809] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  352.988748][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.996997][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.007992][T10081] tipc: Disabling bearer <eth:syzkaller0>
[  353.015499][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.090470][  T809] usb 4-1: USB disconnect, device number 34
[  353.105579][ T5358] dvb-usb: error -71 while querying for an remote control event.
[  353.386045][T10104] netlink: 'syz.6.1139': attribute type 11 has an invalid length.
[  353.456751][  T809] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  353.581382][T10107] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.600772][T10107] 8021q: adding VLAN 0 to HW filter on device team0
[  353.617616][T10107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.685786][T10107] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.693720][ T5358] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  353.711250][T10107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  353.722235][T10107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.798115][T10107] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  353.819946][T10107] veth1_vlan: left promiscuous mode
[  353.835319][T10107] veth0_vlan: left promiscuous mode
[  353.866756][T10107] veth0_vlan: entered promiscuous mode
[  353.872493][ T5358] usb 6-1: Using ep0 maxpacket: 16
[  353.902926][ T5358] usb 6-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config
[  353.920874][T10107] veth1_vlan: entered promiscuous mode
[  353.949459][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  353.978459][T10107] veth1_macvtap: left promiscuous mode
[  354.006300][ T5358] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3
[  354.018782][T10107] veth0_macvtap: left promiscuous mode
[  354.025332][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.050378][T10107] veth0_macvtap: entered promiscuous mode
[  354.061583][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10
[  354.088370][T10107] veth1_macvtap: entered promiscuous mode
[  354.099649][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33881, setting to 1024
[  354.129806][T10107] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  354.139163][ T5358] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.161144][T10107] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  354.181029][T10107] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  354.193807][ T5358] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  354.209670][ T5358] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  354.241501][ T5358] usb 6-1: Manufacturer: syz
[  354.250089][T10107] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  354.268333][ T5358] usb 6-1: config 0 descriptor??
[  354.403413][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.410648][ T9707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.477873][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.485118][ T9707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.662827][ T5358] rc_core: IR keymap rc-hauppauge not found
[  354.680624][ T5358] Registered IR keymap rc-empty
[  354.695440][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  354.736545][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  354.813980][ T5358] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  354.837834][ T5358] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24
[  354.907425][ T9708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.909808][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  354.937546][ T9708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.981968][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.007188][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1145'.
[  355.017252][ T9704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.030472][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.034194][ T9704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.062061][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.090419][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.110116][  T809] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  355.121447][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.160299][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.191033][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.221209][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.250084][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.270044][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  355.282998][  T809] usb 2-1: Using ep0 maxpacket: 32
[  355.297249][  T809] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  355.312719][ T5358] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  355.324641][  T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.333969][ T5358] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  355.342903][  T809] usb 2-1: Product: syz
[  355.347816][  T809] usb 2-1: Manufacturer: syz
[  355.354448][  T809] usb 2-1: SerialNumber: syz
[  355.368099][ T5358] usb 6-1: USB disconnect, device number 23
[  355.403535][  T809] usb 2-1: config 0 descriptor??
[  355.439280][  T809] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  355.900079][ T5724] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  356.019847][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.069743][ T5724] usb 4-1: Using ep0 maxpacket: 8
[  356.086689][ T5724] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  356.102293][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.102442][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.131422][ T5724] usb 4-1: Product: syz
[  356.137304][ T5724] usb 4-1: Manufacturer: syz
[  356.145469][ T5724] usb 4-1: SerialNumber: syz
[  356.164134][ T5724] usb 4-1: config 0 descriptor??
[  356.180284][ T5358] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  356.197964][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  356.339880][ T5358] usb 6-1: Using ep0 maxpacket: 16
[  356.348676][ T5358] usb 6-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config
[  356.359509][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  356.370794][ T5358] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3
[  356.384749][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10
[  356.400418][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33881, setting to 1024
[  356.411815][ T5358] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  356.427701][ T5358] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  356.444033][ T5358] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  356.453396][ T5358] usb 6-1: Manufacturer: syz
[  356.464818][ T5358] usb 6-1: config 0 descriptor??
[  356.742679][ T5358] rc_core: IR keymap rc-hauppauge not found
[  356.748765][ T5358] Registered IR keymap rc-empty
[  356.754558][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.780667][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.801159][ T5358] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  356.816553][ T5358] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25
[  356.832931][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.860029][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.900803][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.909900][   T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  356.930076][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.969855][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  356.990013][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  357.030018][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  357.060929][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  357.076340][  T809] gspca_topro: reg_r err -71
[  357.081347][  T809] gspca_topro: Sensor soi763a
[  357.105033][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  357.112161][   T24] usb 7-1: not running at top speed; connect to a high speed hub
[  357.125316][  T809] usb 2-1: USB disconnect, device number 25
[  357.137899][   T24] usb 7-1: config 127 has an invalid interface number: 136 but max is 0
[  357.150076][ T5358] mceusb 6-1:0.0: Error: mce write urb status = -71
[  357.157542][   T24] usb 7-1: config 127 has no interface number 0
[  357.164143][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.187538][   T24] usb 7-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4
[  357.209002][ T5358] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  357.222046][ T5358] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  357.232816][   T24] usb 7-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c
[  357.243952][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.265543][ T5358] usb 6-1: USB disconnect, device number 24
[  357.277774][   T24] usb 7-1: Product: syz
[  357.295134][   T24] usb 7-1: Manufacturer: syz
[  357.315948][ T5724] gspca_sonixj: reg_r err -110
[  357.316250][   T24] usb 7-1: SerialNumber: syz
[  357.338469][ T5724] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  357.585099][   T24] kaweth 7-1:127.136: couldn't find required endpoints
[  357.601295][   T24] usb 7-1: USB disconnect, device number 15
[  358.203174][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.420830][T10165] tc action pedit 'at' offset 4 out of bounds
[  358.916398][T10182] syzkaller0: entered promiscuous mode
[  358.929800][T10182] syzkaller0: entered allmulticast mode
[  359.029653][  T809] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  359.038090][ T5358] usb 4-1: USB disconnect, device number 35
[  359.060493][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.209631][  T809] usb 7-1: Using ep0 maxpacket: 32
[  359.220865][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.234366][  T809] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  359.249703][  T809] usb 7-1: config 0 has no interface number 0
[  359.264814][  T809] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  359.284377][  T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.299652][  T809] usb 7-1: Product: syz
[  359.314790][  T809] usb 7-1: Manufacturer: syz
[  359.325069][  T809] usb 7-1: SerialNumber: syz
[  359.345714][  T809] usb 7-1: config 0 descriptor??
[  359.784625][  T809] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  359.826172][  T809] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  360.220294][ T5358] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  360.262659][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.393579][ T5358] usb 6-1: Using ep0 maxpacket: 32
[  360.410495][ T5358] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  360.424470][ T5358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.517954][ T5358] usb 6-1: Product: syz
[  360.556373][ T5358] usb 6-1: Manufacturer: syz
[  360.568911][ T5358] usb 6-1: SerialNumber: syz
[  360.598295][T10203] x_tables: ip6_tables: mh match: only valid for protocol 135
[  360.635384][ T5358] usb 6-1: config 0 descriptor??
[  360.683509][ T5358] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  361.310000][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.479704][  T188] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  361.639733][  T188] usb 1-1: Using ep0 maxpacket: 32
[  361.654916][  T188] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  361.673051][  T188] usb 1-1: config 0 has no interface number 0
[  361.685930][  T188] usb 1-1: config 0 interface 184 has no altsetting 0
[  361.711795][  T188] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  361.731218][  T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.748844][  T188] usb 1-1: Product: syz
[  361.758194][  T188] usb 1-1: Manufacturer: syz
[  361.768249][  T188] usb 1-1: SerialNumber: syz
[  361.794330][  T188] usb 1-1: config 0 descriptor??
[  362.100021][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.239669][ T5724] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  362.341870][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.404286][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  362.424296][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  362.435582][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  362.449139][  T188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  362.464473][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  362.478564][  T188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  362.488049][ T5724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  362.497741][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.534940][ T5724] usb 2-1: config 0 descriptor??
[  362.580063][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.654693][ T5358] gspca_topro: reg_r err -71
[  362.667354][ T5358] gspca_topro: Sensor soi763a
[  362.699975][ T5358] usb 6-1: USB disconnect, device number 25
[  362.728614][  T809] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71
[  362.768428][T10211] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in;
[  362.768428][T10211]    program syz.1.1169 not setting count and/or reply_len properly
[  362.769129][  T809] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  362.813042][  T809] usb 7-1: USB disconnect, device number 16
[  363.068070][ T5724] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  363.230367][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.382478][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.676327][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  363.791372][T10236] tc action pedit offset 132 out of bounds
[  363.797771][T10236] tc action pedit offset 132 out of bounds
[  363.805842][T10236] tc action pedit offset 132 out of bounds
[  363.811702][T10236] tc action pedit offset 132 out of bounds
[  363.817510][T10236] tc action pedit offset 132 out of bounds
[  363.823357][T10236] tc action pedit offset 132 out of bounds
[  363.829158][T10236] tc action pedit offset 132 out of bounds
[  363.834994][T10236] tc action pedit offset 132 out of bounds
[  363.840834][T10236] tc action pedit offset 132 out of bounds
[  363.846644][T10236] tc action pedit offset 132 out of bounds
[  363.852485][T10236] 0: reclassify loop, rule prio 0, protocol 800
[  363.946072][ T5724] usb 2-1: USB disconnect, device number 26
[  364.127813][T10242] tipc: Started in network mode
[  364.133244][T10242] tipc: Node identity f26a87969344, cluster identity 4711
[  364.141373][T10242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.156822][T10242] syzkaller0: entered promiscuous mode
[  364.164594][T10242] syzkaller0: entered allmulticast mode
[  364.182037][T10242] tipc: Resetting bearer <eth:syzkaller0>
[  364.193477][T10241] tipc: Resetting bearer <eth:syzkaller0>
[  364.235031][T10241] tipc: Disabling bearer <eth:syzkaller0>
[  364.420171][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.145155][  T188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  365.186657][  T188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  365.233610][  T188] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  365.272207][  T188] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  365.356832][  T188] usb 1-1: USB disconnect, device number 21
[  365.459965][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.659670][ T5699] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  365.839636][ T5699] usb 6-1: Using ep0 maxpacket: 16
[  365.866335][ T5699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.900027][ T5699] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  365.945671][ T5699] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  365.987890][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.013077][ T5699] usb 6-1: Product: syz
[  366.026799][ T5699] usb 6-1: Manufacturer: syz
[  366.043815][ T5699] usb 6-1: SerialNumber: syz
[  366.075773][ T5699] r8152-cfgselector 6-1: Unknown version 0x0000
[  366.089787][  T188] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  366.101592][ T5699] r8152-cfgselector 6-1: config 0 descriptor??
[  366.260972][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.270661][  T188] usb 1-1: Using ep0 maxpacket: 8
[  366.286890][  T188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.312601][  T188] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  366.338086][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  366.362396][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  366.379656][  T188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  366.420529][  T188] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  366.441889][  T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  366.459611][  T188] usb 1-1: Product: syz
[  366.470678][  T188] usb 1-1: Manufacturer: syz
[  366.479623][  T188] usb 1-1: SerialNumber: syz
[  366.493320][  T188] usb 1-1: config 0 descriptor??
[  366.500925][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.725820][  T188] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  366.736376][T10277] netlink: 'syz.1.1189': attribute type 13 has an invalid length.
[  366.741173][  T188] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  367.134891][T10281] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1189'.
[  367.310896][  T188] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110
[  367.349087][  T188] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -110
[  367.398111][  T188] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  367.540139][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.690419][  T188] usb 1-1: USB disconnect, device number 22
[  367.963820][T10297] netlink: 'syz.3.1194': attribute type 13 has an invalid length.
[  368.002586][   T29] audit: type=1800 audit(1785795698.197:555): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1193" name="/" dev="fuse" ino=1 res=0 errno=0
[  368.343413][  T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.581257][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.730082][ T5358] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  368.920058][ T5358] usb 1-1: Using ep0 maxpacket: 16
[  368.931618][ T5358] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  368.962468][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  368.999302][ T5358] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  369.008770][ T5358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.017696][ T5358] usb 1-1: Product: syz
[  369.022880][ T5358] usb 1-1: Manufacturer: syz
[  369.027779][ T5358] usb 1-1: SerialNumber: syz
[  369.045202][ T5358] usb 1-1: config 0 descriptor??
[  369.050468][  T809] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  369.074356][ T5358] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  369.084081][ T5358] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  369.209629][  T809] usb 2-1: Using ep0 maxpacket: 32
[  369.219219][  T809] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  369.229267][  T809] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  369.239402][  T809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  369.249446][  T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  369.260932][  T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  369.278538][  T809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  369.300460][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.316402][  T809] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  369.335490][  T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.338024][ T5699] r8152-cfgselector 6-1: USB disconnect, device number 26
[  369.356951][  T809] usb 2-1: config 0 descriptor??
[  369.626871][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.644625][  T809] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  369.681220][ T5358] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  369.696146][ T5358] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  369.789686][ T5699] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  369.959721][ T5699] usb 6-1: Using ep0 maxpacket: 32
[  369.981611][ T5699] usb 6-1: config 123 interface 0 has no altsetting 0
[  369.995511][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'.
[  370.012491][ T5699] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[  370.038718][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.069433][ T5724] usb 2-1: USB disconnect, device number 27
[  370.081392][ T5699] usb 6-1: Product: syz
[  370.104035][ T5724] usblp0: removed
[  370.108373][ T5699] usb 6-1: Manufacturer: syz
[  370.132489][ T5699] usb 6-1: SerialNumber: syz
[  370.561901][ T5724] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  370.660873][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.686113][T10313] syz.5.1199 (10313): drop_caches: 2
[  370.732368][ T5358] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  370.751359][ T5724] usb 4-1: Using ep0 maxpacket: 8
[  370.758098][ T5358] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  370.758977][ T5699] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[  370.795987][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short
[  370.798012][ T5358] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  370.853301][ T5724] usb 4-1: config 4 interface 0 has no altsetting 0
[  370.857916][ T5358] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  370.902111][ T5358] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  370.941719][ T5724] usb 4-1: string descriptor 0 read error: -22
[  370.950728][ T5699] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  370.973574][ T5724] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  371.008794][ T5699] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[  371.027807][ T5724] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  371.048460][ T5699] usb 6-1: media controller created
[  371.117841][ T5724] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  371.165751][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  371.194107][ T5724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  371.305391][ T5724] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  371.344975][ T5724] usb 4-1: media controller created
[  371.346651][ T5358] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  371.405378][T10317] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI
[  371.417519][T10317] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[  371.426060][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.3.1200 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.437032][T10317] Tainted: [L]=SOFTLOCKUP
[  371.441452][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.451507][T10317] RIP: 0010:__mutex_lock+0x149/0x1550
[  371.457145][T10317] Code: c0 80 a5 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 75 f5 a5 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 6c fb 61 f6 4d 39 64 24 58 0f 85 48 11 00 00
[  371.476907][T10317] RSP: 0018:ffffc90005757220 EFLAGS: 00010206
[  371.483102][T10317] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a78a503
[  371.491094][T10317] RDX: 0000000000000000 RSI: ffffffff8e4b420d RDI: 00000000000000c0
[  371.499090][T10317] RBP: ffffc900057573b8 R08: ffffc90005757327 R09: 0000000000000000
[  371.507187][T10317] R10: ffffc90005757300 R11: fffff52000aeae65 R12: 0000000000000068
[  371.515233][T10317] R13: 0000000000000000 R14: 1ffff92000aeae58 R15: 0000000000000000
[  371.523204][T10317] FS:  00007f899367b6c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000
[  371.532243][T10317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  371.539032][T10317] CR2: 00007fd027e63a90 CR3: 0000000055e6a000 CR4: 00000000003526f0
[  371.547016][T10317] Call Trace:
[  371.550389][T10317]  <TASK>
[  371.553386][T10317]  ? __mutex_lock+0x321/0x1550
[  371.558207][T10317]  ? dvb_usbv2_generic_write+0x26/0x60
[  371.563717][T10317]  ? __pfx___mutex_lock+0x10/0x10
[  371.568739][T10317]  ? __pfx___mutex_lock+0x10/0x10
[  371.573855][T10317]  ? __mutex_lock+0x321/0x1550
[  371.578612][T10317]  dvb_usbv2_generic_write+0x26/0x60
[  371.583894][T10317]  mxl111sf_ctrl_msg+0x160/0x2f0
[  371.588910][T10317]  mxl111sf_write_reg+0xa9/0x1b0
[  371.593896][T10317]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[  371.599505][T10317]  ? mxl111sf_i2c_xfer+0x44c/0x5060
[  371.604776][T10317]  mxl111sf_i2c_xfer+0x463/0x5060
[  371.609795][T10317]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  371.615997][T10317]  ? ktime_get+0x1f5/0x220
[  371.620417][T10317]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[  371.625958][T10317]  ? __lock_acquire+0x683/0x2cf0
[  371.630916][T10317]  ? is_bpf_text_address+0x26/0x2b0
[  371.636124][T10317]  ? is_bpf_text_address+0x292/0x2b0
[  371.641403][T10317]  ? is_bpf_text_address+0x26/0x2b0
[  371.646625][T10317]  ? kernel_text_address+0xa5/0xe0
[  371.651748][T10317]  ? __kernel_text_address+0xd/0x30
[  371.656954][T10317]  ? do_raw_spin_lock+0x12b/0x2f0
[  371.661975][T10317]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  371.667848][T10317]  ? look_up_lock_class+0x57/0x110
[  371.672962][T10317]  ? register_lock_class+0x31/0x2e0
[  371.678166][T10317]  ? __lock_acquire+0x683/0x2cf0
[  371.683110][T10317]  ? __kmalloc_node_track_caller_noprof+0x4c3/0x730
[  371.689733][T10317]  ? memdup_user+0x2b/0xd0
[  371.694167][T10317]  ? i2cdev_write+0xea/0x1e0
[  371.698862][T10317]  ? vfs_writev+0x4bb/0x990
[  371.703368][T10317]  ? do_writev+0x154/0x2e0
[  371.707785][T10317]  ? do_syscall_64+0x174/0x580
[  371.712601][T10317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.718682][T10317]  ? __lock_acquire+0x683/0x2cf0
[  371.723608][T10317]  ? do_raw_spin_lock+0x12b/0x2f0
[  371.728631][T10317]  __i2c_transfer+0x7be/0x1fe0
[  371.733448][T10317]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  371.739247][T10317]  ? lockdep_hardirqs_on+0x7a/0x110
[  371.744443][T10317]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  371.750256][T10317]  ? rt_mutex_lock_nested+0x156/0x1c0
[  371.755628][T10317]  ? i2c_transfer+0xc8/0x2d0
[  371.760217][T10317]  i2c_transfer+0x1cc/0x2d0
[  371.764719][T10317]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  371.770345][T10317]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  371.776526][T10317]  ? _copy_from_user+0x94/0xb0
[  371.781413][T10317]  i2cdev_write+0x113/0x1e0
[  371.786066][T10317]  vfs_writev+0x4bb/0x990
[  371.790427][T10317]  ? __pfx_i2cdev_write+0x10/0x10
[  371.795463][T10317]  ? __pfx_vfs_writev+0x10/0x10
[  371.800316][T10317]  ? __fget_files+0x2a/0x420
[  371.804936][T10317]  ? __fget_files+0x3a2/0x420
[  371.809617][T10317]  ? __fget_files+0x2a/0x420
[  371.814217][T10317]  do_writev+0x154/0x2e0
[  371.818497][T10317]  ? __pfx_do_writev+0x10/0x10
[  371.823255][T10317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.829312][T10317]  do_syscall_64+0x174/0x580
[  371.833925][T10317]  ? clear_bhb_loop+0x40/0x90
[  371.838620][T10317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.844504][T10317] RIP: 0033:0x7f899279e019
[  371.848917][T10317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.868514][T10317] RSP: 002b:00007f899367b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  371.876973][T10317] RAX: ffffffffffffffda RBX: 00007f8992a25fa0 RCX: 00007f899279e019
[  371.884991][T10317] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000007
[  371.892989][T10317] RBP: 00007f899283500c R08: 0000000000000000 R09: 0000000000000000
[  371.900958][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.909013][T10317] R13: 00007f8992a26038 R14: 00007f8992a25fa0 R15: 00007f8992b4fa48
[  371.917013][T10317]  </TASK>
[  371.920034][T10317] Modules linked in:
[  371.924797][T10317] ---[ end trace 0000000000000000 ]---
[  371.945544][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.000526][ T5358] usb 1-1: USB disconnect, device number 23
[  372.024815][T10317] RIP: 0010:__mutex_lock+0x149/0x1550
[  372.032962][T10317] Code: c0 80 a5 78 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d 75 f5 a5 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 6c fb 61 f6 4d 39 64 24 58 0f 85 48 11 00 00
[  372.034128][ T5699] set interface failed
[  372.084906][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  372.101174][T10317] RSP: 0018:ffffc90005757220 EFLAGS: 00010206
[  372.107655][T10317] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a78a503
[  372.117439][T10317] RDX: 0000000000000000 RSI: ffffffff8e4b420d RDI: 00000000000000c0
[  372.133531][T10317] RBP: ffffc900057573b8 R08: ffffc90005757327 R09: 0000000000000000
[  372.146381][T10317] R10: ffffc90005757300 R11: fffff52000aeae65 R12: 0000000000000068
[  372.155087][T10317] R13: 0000000000000000 R14: 1ffff92000aeae58 R15: 0000000000000000
[  372.188934][T10317] FS:  00007f899367b6c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000
[  372.209139][T10317] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.217571][T10317] CR2: 00007f3a0d3ef2f8 CR3: 0000000055e6a000 CR4: 00000000003526f0
[  372.226018][T10317] Kernel panic - not syncing: Fatal exception
[  372.232389][T10317] Kernel Offset: disabled
[  372.236826][T10317] Rebooting in 86400 seconds..