last executing test programs:

4m1.193878187s ago: executing program 1 (id=2088):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x9})
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7})
fcntl$lock(r0, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x10000000003, 0x4})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
syz_usb_connect$midi(0x5, 0x43, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000020392ab03f4000010203010902310001011800040904000002010300060905040f10000209f10725fe6309050303080006029c062501"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

3m59.814359873s ago: executing program 1 (id=2097):
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0)

3m59.796114095s ago: executing program 1 (id=2098):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
socket$qrtr(0x2a, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={<r4=>r3})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r3, r2})
setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000140)="0df15952bc4d7f87b14c0ced6b3e418f4e9f69516111ce3192ab1acdf0834a4e91ea6dc9917bf0dc5060312507a4813b85179ccf993829f0128204addc003140b3e8b0a09f2b4db2fa62c01bd7482ee10b44464dd9ab435dbb", 0x59)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r5})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@loopback, @mcast1, @private0, 0x0, 0x6, 0x0, 0x800, 0x6, 0x980123, r5})
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m59.265969851s ago: executing program 1 (id=2099):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')
r2 = syz_open_procfs(0x0, 0x0)
fchdir(r2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x141, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x133, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3, "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"}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0xc)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r7, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000ac0)="439f43e278bd", 0x0, 0x3, 0x0, 0x1, 0x0})
socket$netlink(0x10, 0x3, 0x0)
r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r8, &(0x7f0000000040)={0x0, 0x3, 0x1, @thr={0x0, 0x0}})
fchdir(r6)

3m58.894234095s ago: executing program 1 (id=2102):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x8, 0x20000000010)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={0xffffffffffffffff, 0x5, {0x0, 0x0, 0x0, 0x8000, 0xac, 0x0, 0x5, 0xfffffffe, 0x10, "db06d59754085b46eaee9a3edbc8c7cd89307de3f7e24ffab672103556c96ef3117799846b075335e4f7a25bb766f6bb4d9bef3927615de0839068aa46aa1179", "348b9dd345cc6dc93625c032dac13dafe4b191fdc1d42e7fabaa017381ecb2f36570f6170c874050d53c203a7db5afbe6365ad84f31dec7f58734761dcb915df", "76598a6b3f7e89e64e62878a7c098b2a868635b9b77a2c6bcaf20ba6ae47d43a", [0x8, 0xf]}})
mq_notify(r1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xe}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2d, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0xffc, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x7, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x4, 0x9, 0xfffffffb, 0x0, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x9, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x2, 0x10008001, 0xbffffffc, 0xe, 0x80, 0xb, 0x0, 0x1000, 0x5, 0x3, 0x0, 0x1fc, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x3, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0xbff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x7, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0xa, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x76, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x3, 0xa, 0x6, 0x2, 0x10000009, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x9e9, 0x8, 0x101, 0x80000000, 0x6, 0xc]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000000013ea2088a80000fffc0000080000e301932ebef7e5988cefdc090086dd88a888be08000000100800000100000040000001080022eb00000004200000000200000000000000"], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x88}, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

3m58.649404447s ago: executing program 1 (id=2106):
syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001240)={0xf0f041, 0x64})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000200)={0x5}) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='/dev/video#\x00', &(0x7f0000000080)='./file1\x00', r0) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

3m58.306584955s ago: executing program 32 (id=2106):
syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001240)={0xf0f041, 0x64})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000200)={0x5}) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='/dev/video#\x00', &(0x7f0000000080)='./file1\x00', r0) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

9.402226728s ago: executing program 5 (id=3207):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], <r1=>0x0, 0xe7, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000b3000000183c4ef48fc7ab7f6c98487d33d2883b616e34d5f8f8d72b3244cd09440a9ff7acdd639dc9b0e13f1bda8dd938ce62fd6760e0da37cd4a4010395794ee98bc4f23accca2575b6f0de914e6097a344bbc1a320af62f4ccdb8d6f6d2ea481784cec47c5c9f723fa191a93e351cfbb42f627a3aca39ec41a02dc10f2850b03505e11f7ad7a805f0ad1fb3a860f2a2b58162783c197ab22475b1d9eef4aa4ad22fdb0d0d23fdbab0b9096d25a0379f2781a80df519c66d78ca9718343d355d10641a0f69dce5cf87cea8e833e21a8e1b24bd78d4153f21b8b830f54a7c007330c75aa297230ec7bdc45dbf712fabcd2807e30a402c341e54aee10608b61ab0ec36b67e48f198a50c3b3a34f5ddde7757e1bc375abe79eca59a73532ddf945d85d1d7dd0e29aa6c774c189bee466e8d117c1dc926eba6b9bc883ed7ab55da30595271947ba12323a88c7420bfcc7005c48ee551c7b0fab5987b2ff4cc6e9502021553a5897b91751bcf596d3a22ef1df5f69b47901421023ed2746e8f3c7ab5c9a5ac5e46aa37fc0096c99bf42f4b6032ee9d3a589b027c9e7f16da0000"], 0x0}, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
getpeername$packet(r2, &(0x7f0000001980), 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) (async)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, 0x0) (async)
r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000140)={0x3, 0x100, 0x641})

8.521919485s ago: executing program 5 (id=3210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef)

8.312937241s ago: executing program 5 (id=3212):
syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000000)=ANY=[], 0x0)
unshare(0x2c020400)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x0, 0x88be, 'bond_slave_1\x00', 'netdevsim0\x00', 'veth0_to_hsr\x00', 'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x1a6) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x0, 0x88be, 'bond_slave_1\x00', 'netdevsim0\x00', 'veth0_to_hsr\x00', 'dvmrp1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x1a6)
socket$inet(0x2, 0x3, 0x1) (async)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019080)=ANY=[@ANYBLOB="180000006a0005062cbd7000fcdbdf126a9749"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019080)=ANY=[@ANYBLOB="180000006a0005062cbd7000fcdbdf126a9749"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0xc}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2, 0x0, 0x548}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x2, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@empty, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
r3 = msgget$private(0x0, 0x4)
msgsnd(r3, &(0x7f0000001100)={0x3}, 0x8, 0x0) (async)
msgsnd(r3, &(0x7f0000001100)={0x3}, 0x8, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
dup(r5) (async)
r6 = dup(r5)
unshare(0x42000000)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x0, 0x38, "", [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x1, 0x0, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r8, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc02864cf, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

5.173877057s ago: executing program 5 (id=3229):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x15, 0x3, 0xf)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @mcast2, 0x81}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="ff34574c69f533c53db73ed249eccae476afa6618e9541c3b22e67dd3d909e76ae01c03696924d409c5bdf6afba8a37b309b1f7c43ca66717f16d18b151040b7d87c1011ff5b1724506b540b83fb5c155a04bfadff6fe14b0be3564570e5bcf37fed53da348e7d88cd58555dfb143b0f492dbbc13a8c6341054e82bfefc53df602baf65aba9e2cf27b5631edd1e2c105e7b77e8a3dd41647664ff3452910e0ecfbc386d4b2085e76cb38023438b88fdfde85194a58", 0xb5}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e27, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4040844)
r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x4)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2})
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x6af, 0x3, 0x4, 0x80, 0xd, {}, {0x3, 0xc, 0x0, 0x1, 0xfe, 0x0, "12848098"}, 0x4, 0x3, {}, 0x1ff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
r6 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89fe, &(0x7f0000000340)={'pimreg\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0xfffffffa, 0xa1, "ff9b9d3a5bd2"}})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

5.077991614s ago: executing program 4 (id=3232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xf99}], 0x1, 0x10101, 0x0)
r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
fcntl$notify(r3, 0x402, 0x8)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700000000a1cb5b45e7f6626600"}, 0x2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400000000ff00000000000000", @ANYRES32=0x0, @ANYBLOB="9e840100618800001c0012800b00010067656e65766500000c000280080002007f0000011400030070696d367265673000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00')
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002180)={0x0, <r8=>0x0, "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", "7da2eca694dbf2ff99a813b7c5dd347971e9a0a83386ea8c6782e64c42a5a1bb3e3f41b0181184d2509a278b3f45b054e6f978bc763dbfb95e5a6b68ec2eb3ef41db697fdc60da89e68680b2295cc521f2723937a9bf5df506c20ebe92478a57d067233792fa6e386a227ffd12904d825389f2e36b3cb45a1282948006a626997b9fb2f3da8f7bfe4d7efccaba41853e8921721dbd6e7afef8ec2e4029c2a59d7f8c8f39f8b69679b004d084d85371164f91afd3494df2efa856662693f4dd41e6de812af60281d1722ee14f4f6b86a5722f0ab7a370971e4484d7b8868a80300b1a8e84c6f8dbccfcdb4036346c67d759fa71e1033a4ec96b9d2ddbf3d9e275eca53ad6676ff2d36c0b80ed9bbc84c43e5e1b38779924a7c75595bed6a34fc06df5b0423307a9de3b8baa76893a16a27f1b06dbb5ac4edca434a3d9d895bfb3a01d83fa96fde9ac266326fb748d27538f2940dd4bf585f811d20ece189a8dda1c939f3dacb240d6f1533b14414e5a00a8f72bc4f0b6a01501c340da77f4d73d01f034ebe6ba6189a13d99b46c1621888d88bc934f2cf1c853beb698e8f8199747fd805031e8942e04e87b716594f3d1dcac070e3d42ef43481eb7ee679be38e0b50062e07b93375a12c2ab6913c5424f5e3629ec7cef831d049ee2977804fe8a9a5fb20edecf6c89bbd9ee76badf301fb3945663ecce323dd22aa1fd30e417be2181e7f0daaf9165494fada392600368c09fe646f8b9a18ca08e6083f2854006d450aa926644549de307be30f2cdc67204532fa18cf8a68d32ff0d9cb5699383ce7135e4e0f3cb4156156001b7db74434d3bffbf1c8165bb3adaad9c0fa57a4f57ccfd5b93df51fa1248ad3ab4c14ffc4bc3bd3c4973fa758d8a07db9e309993fe9a743d57488f1af294e7f202749be3779adab28a574c0e40ca686e220066363f70799f32ab6d84ed471dff4ad190c0a813529108ede9bf112a60eb9efecc438ffe39a08ab7b5965c71bca7eb51d3618fe33726abc1445f836ac305cb8d6cfc3a8d73c2e42cc46b0cc13a86bfcbfd8091cc2b98e68eaefb4c9fec8a9104a738d8a723d1cd4459327aea782734524910d92eb68ccff99a26dbbbb8ece1667e7140e33f566f05c0c46ac583673c6cec73077fdad19bd8389ceb5e9016d905de881afcaf9f3f39b874413652546332df333adc916989dd8a851433c49d9fef3a4ea6ea9276ae39b8267349b469544be960311b5476edde5bd7436e36077fb0d81f474fe6fda6d757a32034e2ab8cf8689b546c55df024502d2552022615e0dbe9dcba7344a911529a230a081a140973968ca4d4528f7922c7aa5ca2897a8288359fa9bee1dc5065d0ee2c27e85d13ef94bb64c3d450a9c07d1da6a292be56f21e274ce9192ccc46b68291ea19477e406458803b2769200b20046665fca0859407d5896df3a12397eed7303a635d9de2261f9599b0800c178db2df9c0f1d56d330e113c0f32200743bce97714ccb223b5dca77adfbc45f222d5534d6d0b7c3ae786c2b97eb9a10861e476d9d54ae61915822c71508c5d71679a9ee33393488ae100b512cd6c092b42d3d4c1d7570da3480ade8d218b204fb668b4d3dda6fea442bdc0dbadcacb327c4edf01af38d54622ec7276e163e64d649aa23dd1a815108c271c9a4136d2dd8668e7b521ea4cc250fbc9cb5650cbf6c0648cee3c8146bae69125c798e908498c3ec35304ed68f824cf2da7c83781bf8bea88faae0cb66ad2f7e63a89948d99b70a76b26c3ba07142998d5f711bfa08c2ac22818cc394ee1a45b5f192e5120f859f5754659a9b9919e880bb37d8280be88017e3ff35249611b26032fa15bfc667d55cda91bc43a8ceb2e14862bb036456d717ac8ce04a1f2fe05a2b4dc3e91a6d2fa69dc41cd769bb7952ee4265385ff3ae745354665f8d41fe3950532dd0b6a3d275070a67e5819bba2f7b9f9d55a3421e8f8dbec8cd8c1498ee1dd39080f114112e383b1a13eb175a3d9bbd4992f3df579d6f18883ea3ce3dd9121620ad9ec1a5d0f49234dae443c6f3ae03db146d52aa9cac52c1c98710f7e66c32048a742d33ae315790dd202b17ac8a3e76b76410dfacf95a749e31176c0f14956f0ee962bc1f7b962b051f0637643c198bd9906c0c3a9923ba395f0f0e40c19a023123bb034cb432cd6ade46e4830b2a9a773e7a3b697ffc1dc31ef304747ec8fcee850adb528669c0742de1d80e9d7804b1c7a8324f8606771b759b338182eb2f8f6ecc8ff5c94104c45054b7f41c91efc49b1aa395f657dc6617d714102228649ea73d76b22a892e4481ff4b47c45853ef5991c1cc45f8efc5289facf63ebdbf94a9502b95a44a60fc7368cc03cdca2992b3c6776e8b43a744fb71ea03bc455e41f4e8462172b9fe915435faaf39ae7392052950990497dacfcbf508d9c10a0cf65731377c640350651191ef7507e7525440ecd2177be846352fedebf35a4509b923a2ffd14c322fcab12d89e2f0887bbc737404e9f113bb4b913612c1a572ec596ff953c16c73708c8a4ad8c9971255f8f18837f189457988416f6cac2be432d4037d4d9e7e5d5505e7de10ac3ca65aac7a6f93c5f093203b4725d8128831f59e68d21ef4abb1b6f85e1f1882f29ee528521aff11729cd5e2ee961aa996f1a3ef5a3a62080b90f375700067cf480a50607727555aa15fbdc456345f8e31ea182a573eeeac5df24c9893db80f558f9b123fb7077d8228494702c63c2e75181a333ffd37d0522981b110074c4c856118dae35a36ca975e9198be3427f4af2578f2a45e7ae67936c7d6c5b761484796e5fb03875c0b52b3cd0dc89aa800d58a8785368520b1a4285fc215c7a1b87b093e80d888b306ef9c470c388fef6ac0911261a7e2945097c25fe9f8f5839b0c5809749bc1a9600142e4d079d7231350b9b9cda16352669492a12a9a3691bf6ea92ab96e4d31a46e8f2fb962d53ed2541abb5441f268f0f6c2ba84f317e8a142c140b860a750ca82855fb06076c5fea2d04d008e36567a3444ff7a429c32915d42178e25995a3e204195412687484d69844e8d57b4279dbc471c3dbb63e32fcf646abdfc2997e64b2d51db223c76d03e078792ff08b6631193748e4d4d467df8931564e5ea379636cff0e32f81494e6e0bab034ebac658732a42dab8b3e9a43a35646d8bc07a3e4508321a5fc087c53322902f900641b650f8c29543545be4dd7823b2c29dfb0865df9dae7a3367dc7dd0ed5ece5deacb328f865c509739e305a7ca32b43deb2499156e5ba8498320abad286ee7ae3870a1364936e998cf7492c6defddb6f85ca2419f6f32879f5c663be44bdf39d4b4667908bdacb3a736ddbdbd6828b8140070231767397554303f97087d6b8f5e36792b98e27550e035f6fc830dc1811b56f0e8cdc84913966f450a06f57c5fa724124f592f3bf08920c18ce2f153350f187a6ee4ad1af18e40cb2efbd514a1d18e1a2669dd6bc14c5a5fa2c5a0cb3aff9cd8ddff1a278aef8dfed12d10b078c0bb84f450747e335fe3dcf1312b275c310706e6e07883dfeabccc3dbb70ae17aab401e6ad1bb5818d0dc54cf35cfe79883c3de9a40c45b8083d1fdf8ab63b0f96e4e32e690adb6c67fed3e95abd1b805278229c3274591778ce9097e9a6e912e23655b61eb34130a91cab690a82cf643ba8b236e4411d19198a5fe1a4b1583fc212af384db0bbac93171d0a13e1d45a7a43ae2ae9dc369bba533ffed3d7d6520d1d8ca611b6f691bf0505b02e423976155e4aa778907ff782253182995d2406b784a01b0b776bb22f8d49e7a59dea4f69ee1d053aff4c8fddbe626d32370079c40e74a61723ee897b926cdf3a81df89be89b670117fe4d82126875472de942092a2e118d59343eab40552104a1f7a562ca2bfae5872dcf2b8368c11da169679d61ccb88bacc2ec212e7b312d99b4337861f76d6f45f4f8cee80fe4dc6134d79dfc945652298d11a1fd7c64125c904de88fa41e23c9c02fff15eef8e999fa8c7f5e9bac6c9de0f97a1bc61e6dec252f0b6d696d8d7b4bf59ad0c5ed46c0393237f90a84e50388662d76761d22cd0db37f0586099032563e22a6ae41beff0d7a2f72d6c9690bee5ba39eabdbc920f1ba50456bed39bcc4b9ed3c9cfd8370ccd1d0d1f71bf3ad739fcfecb419f7277141c6369d63f7a3dfefb1e95c93e3384c7cf03c06725b2e7a2f3c6bb6c2fc56aef148a34219c0d50a942c9ab29754c96013dc027a54f5286c0c50e18230a52445faf87938bbee11eb6ea59f91f5915b66f118a3ee218cd8463562379b37f133d5b9582508bb035c5cdad02de06aee7fe3d14c59035e0b460208be73e33b3fe815e3d16b897348f5a13c0981ea8f361e641c58a0dfea256badf52d3de4020a9c0fbd9df0cc0ab4f4dbdfa447dea1d677cda0db4c8bd33e49d363c67725942216a7d1b5fbd8a4c4aa5f08eafe736ec8857d0621ce376d9a3de81cbe0fe444ed90b812a2b29c9af1af9d65e88da7297538b11fddb5a0ccd96dcfcf4ab7f32da6af67108c5cf56560057e043874ebce640daa6e62f029213f025ea92122b9fed1007df3202a1fb5101f9736d5706aa3007abbcfc3216da434303e26847cf6b57c7761c269c1acf2defc28e52ea4faabc67765b173427ae97265cd0d667a3e0b4e6f005c90f97442d081a14410495e6f5a613b71fa406f692d4144f494f7fbd3120c777fb9e7c004750993851b26e92b68282b1f0d007d16cd7c344c7d5ea2ee302dc3c7e7849ac471533bd97996ff02a37403ac1f69a857b676e0fd0d1f780c3a8aab4501d2bafb193242a14cd55c01f656ee45ce4a512bcd52bb0106676386cb59d36596c6ed5b375b6ce832ad07cddde71c38703d5f0838d1a81781aeab15159b68bd8c46222e4825636a9f0fa43aede0e29e0a97e0da69e96cac7aae910d9b72c02a73e9fab95495418050cf6377fdde7aad66f6f389c1fe7b3bd4804b34c4f1350c142e0ea660f8e92b62217a7a264849329460dda0a0519cf7d2e3bdf2d337b92be810a6728c52557ef6c30d21439becf099976bcf704bb1deafc70c5bc5085383143d59303e38d6718e478f4f9d731f5482343cb62de216e4669e578f4fae23249846bb6b28b8ead9ec0e54344a961fdc6ad6a6279db7899d1014cdf036782d5cd22724abb31250b12aed8a678b1e5cf79f0430c5411c3b011530119be90c39bfb057be9a206f8fc582f0f699a430762b0675b012c6e4519a2517af126aeca4b9283d4713fc13b04d5f6050828de33b4309181a61771c8929e1c4a4c65095b29899e23ba584c8f157aaee1d5a931979e2f8ab5694f73db2ff8f34145007b6f11c5f0291e5385e6463c87caac06d761113c1b4fbe81430c734e356"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000580)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x1, "bf8b6b0d9dd8e8"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001580)={{r9, 0x6, 0x9, 0x5, 0x4, 0x45d, 0x4, 0x5, 0x3, 0x4, 0x9, 0x401, 0x8000000000000000, 0x7f, 0x8000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
lseek(r7, 0xfffffffffffffffd, 0x1)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x76)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd='])
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000040)={0x1, 0x200, 0xaf7e})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x70400, 0x190)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, &(0x7f00000002c0))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

4.914351166s ago: executing program 4 (id=3233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000900000/0xa000)=nil, 0xa000, 0x17)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
writev(r6, &(0x7f0000000780)=[{&(0x7f0000000440)="e4", 0x1}], 0x1)
connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x89, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86dd, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x1, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x40, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xd, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x2, 0x1, 0x5, 0x8000, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x90, 0xff, 0x80000000, 0xf, 0x7, 0x8, 0x1, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0x7, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x8, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7fe, 0xc7, 0x9, 0x40, 0x0, 0x2, 0x7fff, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x1003, 0x7, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x92, 0x240, {0x7, 0x2, 0x4, 0x80, 0x6572, 0x6}, {0xff, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

4.912812982s ago: executing program 0 (id=3234):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480100001000130727bd700004000000e0000002000000000000000000000000ffffffff000000000000000000000000000000004e240000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000133000000200100400000000000000000000000010000000000000000000000000000000001000000000000000600000000000000000000000000000002000000000000007e7208000000000000000000000000000000000000000000fbfffff7ffdfffff0600000000000000050000000000000001000000090000000800000000000080063500000a00040021000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000c001c"], 0x148}}, 0x0)

4.697819641s ago: executing program 0 (id=3236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0xa, 0x3, 0xff) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 64)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x4, [@const={0x10}, @datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x2, 0x62, 0xf}, {0x5, 0x6, 0x3}, {0x2, 0x1, 0xf}, {0x2, 0x800, 0x6}, {0x3, 0x6, 0x400}, {0x5, 0x9, 0xd7a}], "b94639"}, @fwd={0x3}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xc, 0x5}, {0x9, 0x5}, {0x5, 0x4}, {0x10, 0x3}, {0x0, 0x4}, {0x4, 0x6}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x364e}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000004c0)=""/227, 0xdc, 0xe3, 0x1, 0x9}, 0x28) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000001a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x28, r4, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4000) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}, 0xf8a}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e23, 0xb, @loopback, 0x1ff}, @in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e22, 0x9, @empty, 0x10}], 0x8c)

4.562387032s ago: executing program 4 (id=3237):
readv(0xffffffffffffffff, &(0x7f0000001d40)=[{0x0}], 0x1) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0400000000000000000000008000000000196aeb78e58fb8cd4507e322af9f90d9805a8b110a9ad677335a8487f59d09b12993f874dc3ebe852e71b893ee2de12ffe1e8540b7b587cb7d349e16e06b8b7ee76dd0af7629626c1bae7731605b3e35be7c4f3bd543cf0b160051a00bfefd348bfa50d8d410c32d37c574fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x78, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x64, 0x1, [@m_sample={0x34, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x2c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x8880}, 0x40c4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0, 0xffffff7f}, 0x20)
syz_clone(0x86908200, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000))

4.509699514s ago: executing program 2 (id=3238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4)
r1 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, &(0x7f0000000280), &(0x7f0000000240), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1, 0x1000000}, 0x20) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00')
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0) (async)
ioctl$TCXONC(r5, 0x540a, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000d12d15d03d5c62274c65dd5e7fbb4997036c00d89a1ca2f5c54d4ff168ce356cc5be5421f21ccb90f07f910c21c9e4361e07a9bc11178446efa28a8f92ba5d0a7f1d3af3fc5d1a87bf79", @ANYRES16=r7, @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000855) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004)
socket$l2tp6(0xa, 0x2, 0x73)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x48, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x1, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xe}]}]}}}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

4.494565357s ago: executing program 0 (id=3239):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x6})
ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "2a161d2d71db37f20a8f1597f0"}})

4.361794577s ago: executing program 4 (id=3240):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffeff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x800, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r5 = dup3(r3, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8083)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b, 0x20000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

4.36152315s ago: executing program 2 (id=3241):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1db90a04ddd48c2a10473bc29cc4371d9e17c97ae098786f10fa733bf55376dbf74aa824d9b981a665e77fa3e18d55fa17e3f3e70b3779ea1362a075881f3a6c12116d700d", 0x45}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100001002dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db2f9065cba5891dbf9792054613953f3a102ba8c3ab000140003006e540a54646580f9ff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000005000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

4.312031867s ago: executing program 0 (id=3242):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200))

4.122086549s ago: executing program 0 (id=3243):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
socket$netlink(0x10, 0x3, 0x6) (async)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @in6=@remote, {@in6=@empty, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x89, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x18, 0x0, 0x2, 0x0, 0x2, 0x2}, 0xfffffff9, 0x3}}, 0x128}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0100001000130786a20dffc90a6d64de33625b00000000fcdbdf25640101010000000000000000000000002001000000000000006d735a42d7e1faf30000024e2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000000000000000000002cbd7000003500000a00040050000000000000001c00040007004e244e200000fe8000000000000000000000000000aa60001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a"], 0x16c}}, 0x48080)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x20008840)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x2, {0xa, @pix_mp={0x9, 0x2, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8001}, {0xa64a80ed, 0x7fffffff}, {0x4, 0x3ff}, {0x5, 0x1}, {0x8, 0x8}, {0x7ff, 0x9}, {0x6, 0xfffffffe}], 0x7, 0xff, 0x6, 0x1, 0x5}}, 0x4})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) (async)
ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)})
ptrace$setregset(0x4205, r6, 0x201, &(0x7f0000000240)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509685636", 0x10})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000300)="826360620e823930ce60a5e64b8627db526965fad1b05f1e6f369c4e540ef4c8767b598d1d94", 0x26}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000300)="826360620e823930ce60a5e64b8627db526965fad1b05f1e6f369c4e540ef4c8767b598d1d94", 0x26})
r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0xf5, 0x10000000, 0xa02})
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x400)
ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1) (async)
ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
socket(0x1, 0x803, 0x0)

3.25035014s ago: executing program 5 (id=3244):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022220000009601000601b3c83e25038a39942bb09ea54983ce9abc1600"/40], 0x0}, 0x0)

2.982444377s ago: executing program 2 (id=3245):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000000280)={0x77359400}, 0x0)

2.747324349s ago: executing program 4 (id=3247):
r0 = socket$inet(0x2, 0x4000000000040007, 0x100)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)='08', 0x2}], 0x1)
r2 = socket$inet6(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
io_setup(0x222, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, 0xffffffffffffffff, 0x0, 0x0, 0x1000000000004, 0x0, 0x2}])
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000002c0))
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x2, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xd, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x89, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xc, 0x3, 0x9, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0xa000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0x2}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x104]})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0)
r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)="22fdc9278798a1ccef03c30d56de36ea3765ef4a065623159d774f0eb1171de8d7e29be1e7b9a2a8836e294dcfe31eab1ee8e698c48c6ec8db5477fec70778d94231adc723cb823e74c64a28f66fe1916966a909b1f00e4779722877353494d40876f8c8cb336b489ad91ab035f4a7c9042ecefe1ed0247bfe42ff17", 0x7c}, {&(0x7f00000003c0)="3c6b9070ccef6ffd498f3b433c9f63538bfb2a1e3f9fda8e00b1d9d3a6c326ead5", 0x21}], 0x2)
io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', <r10=>0x0, 0x2f, 0x75, 0xff, 0x58a8, 0x10, @loopback, @private1, 0x7800, 0x20, 0x2, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', r10, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "396e8992ae6b242c", "cb9a00305829cdfd7379abbe2d45403a", "eaa24060", "35d4788b98a4599e"}, 0x28)

2.430939995s ago: executing program 4 (id=3249):
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfeeb"], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000100)={<r7=>0x0}, &(0x7f00000001c0)=0x8)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
splice(r11, 0x0, r9, 0x0, 0xf3a, 0x0)
tee(r8, r13, 0x8f5, 0xb)
write(r10, 0x0, 0x0)
read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1)
keyctl$revoke(0x3, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7fff7ffc}]})
syz_io_uring_setup(0x401374, &(0x7f0000000480)={0x0, 0xa19c, 0x200, 0x1, 0x286, 0x0, r12}, 0x0, 0x0, &(0x7f00000002c0))
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000402505a89241000102fe0009021b00010100c000090400000207010100090501020002", @ANYRESHEX=r7, @ANYBLOB="50bce6efe7f45faff8887ba066823b67b24d0bfc0869d3f3e3f994a61b940f3ab473b0d2329fdd284b4eacc67a10c82d78019c927f3b0c356bdeedeca8c19110cdeb7abade411aa34cfecb62f266f5b31a5499a2b9936e1941e8ab76b10eeacb429f99c65724392fc12bf15581bf2f7742b6f1b3cb2b9b37e68ca8a0b366531953562ab91a45607cb70735f36c269f8137bad373ffc3ce2a90e12c6ee45105d3", @ANYBLOB="99095c3300d0d2c8ae282cef7bb9b21b98630ca23a124bb031ba14eeea158950c911fe8d4742f502a894263388d0618ac51067847a25c235086ef1e73fbd8aa0f0ee19faf49bf718611c208b4de18552cd8888", @ANYRESHEX=r9, @ANYBLOB="9694af9b285cb4e58a2c", @ANYRES8=r8, @ANYRES8=r5], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)

2.250197452s ago: executing program 3 (id=3250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d508000440000000ff080006400000000208000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000008280)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000340)="0bc0f5517161150c4df6d8ac1ee9ba18e595cd68f4d561466d1a0381085d13cdd82bca57c661e3b028b8a185b345a6f5e7b4ea6f8a30b9257b40b89517b934903680953a2d6c38d23e79e30fd743b8727126e043e9e913d7ef337d5b6f8faf1998401e", 0x63}, {&(0x7f0000000840)="09b1c4a557e619a777fc18ef538456b621c181424c093efc12f5395b8cc2b0389388a4c71b9b71aed9b1ec27b23574440c81d48c14fa726f2b6da9ce7f4421518d2c", 0x42}], 0x2, 0x0, 0x0, 0x20008804}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000004a0003002fbd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x440dc}, 0x20000010)

2.109599205s ago: executing program 3 (id=3251):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f000000c2c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x400000000000003, 0xfffffffd, 0x0, {0x0, 0x8, 0x0, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x0, r7, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x9)
write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

2.025938727s ago: executing program 2 (id=3252):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x6})
ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0xd, "2a161d2d71db37f20a8f1597f0"}})

1.942928676s ago: executing program 2 (id=3253):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200))

1.817936221s ago: executing program 2 (id=3254):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000002c0))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x3, 0xa8, {0xa8, 0x30, "f79af47735a18f529da787b9247978b7167e7b5ca31f3eb5854bc986f86e39578bd8f5d776ffe962863e9d197601062c0a2874090e76ae12711abe5797c699e3d2b5327fd6d6ff043e141b0033aeca7e0318280af257940ebc3018bd2a3d3a5b8eacff498e63a768403ceeb7fbdb0c94f0f184f3907c69a4db1f633ca97eb41abe4c862741d4e977535f913ce8f2e34931049d70420f4f2c740a3db4558fae3b5e09fed5294a"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000000440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x66, 0x2, 0x81, 0x4, "71f8f748", "b9f382f4"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x8, 0xe, 0x1, 0x6, 0x8}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000540)={0x40, 0x30, 0x8e, "0ce20761abbdabbcc5fe2861b2a7625f70bbd2eca190b96a02e08a22728ea621a79d65f11ea9a3dc4c7b629abcd9c43562d620e7eae15a3af962107de51dc95ade282f6979a9d96f582e26ed710f49e518d1c84bd7a7adcefd27d252d1f0595b16510631a680de7d6fb60cf19ffe99fc76eb0e2787b3d638be1d8cce9ec3974179752e54a91afbf77d7c062dfc96"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0x0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000780)={0x40, 0xb, 0x2, "63c0"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x480}, &(0x7f0000000800)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "4fc3"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xd}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x7f, r3, 0x4}, 0x38)
setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4)
recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

1.396595215s ago: executing program 5 (id=3255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b6"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x8000000000000000}]})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)={0x38, r6, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300300002100010029bd7000fbdbdf2500000000000000000000000000000001fe880000000000000000fa91d04e210004020080403200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="b66b6e00020000001c00040002004e224e23000000000000000000000000000000000000ef0014006e68706f6c79313330352d6e656f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018050000800100006bb7afe1dc317d61dbafa1bdab6236f633531a73753276682d54e0da67f60f05e80aad359ce584c5dd8b37a27f66107aef37be2eb3a96a938450987a7337b094121a9dc8481394c734ee9f6d5933f36670af337e3906e2d3c3bf0127bd8718422ee29be040ea316d43cc6bd418ff65a87ecb106356e20a15ed5a06fc5e750f020cc22cc5e8f1f9e5cc114c1e25b16832b0f1985c86efcdb8b0e1aef5a5e7a6f8fc410e0008001f0003000000cc011100ac141416000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000ff0200000000000000000000000000012b0100000335000002000a"], 0x330}}, 0x0)

1.221555097s ago: executing program 3 (id=3256):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3")
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000580)={0x80000001, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

933.528493ms ago: executing program 0 (id=3257):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffeff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x800, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r5 = dup3(r3, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8083)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b, 0x20000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

840.46621ms ago: executing program 3 (id=3258):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x3)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24004465}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)

296.755936ms ago: executing program 3 (id=3259):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x1, 0xff, 0xf, 0x4, 0x2e, 0xa, 0x7, 0x7, 0x67, 0x2, 0x9, 0x6, 0x1}, {0x84, 0x1a, 0x2, 0xa, 0xff, 0x58, 0xfe, 0x0, 0x7, 0x6, 0x3, 0xd, 0x5}, {0xfffffffe, 0x4, 0x2f, 0x0, 0x87, 0x4, 0x5, 0xff, 0x3d, 0x2, 0xf, 0x17, 0x80000001}], 0x2}) (async, rerun: 64)
r1 = io_uring_setup(0x2036, &(0x7f0000000080)={0x0, 0x6347, 0x10, 0x0, 0x2e3}) (rerun: 64)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000100)=[0x1a41282, 0x10000], 0x2) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=<r3=>r2, 0x32, 0x1, 0x40000000, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
r4 = syz_io_uring_complete(0x0, 0x0)
ioctl$DVB_DEMUX_DMX_QBUF(r4, 0xc0186f3f, &(0x7f00000002c0)={0x10001, 0x5, 0x3, 0xfffffffd, 0x11, 0x768e437e})
r5 = socket$unix(0x1, 0x8, 0x0)
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000300)={"e51080ed170a6aa8229ab78dd41f4c33811f37d53d3f2575d14ff97b834583c4", r4, <r6=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000340)={0x10, r6, 0x1, {0x3, 0x4}}, 0x1) (async)
pipe2(&(0x7f0000000380)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x800)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000003c0)=""/179, &(0x7f0000000480)=0xb3) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000004c0)={0x1ff, 0x4, 0x2, {0x1, @sliced={0xb79, [0x200, 0x5, 0x200, 0x0, 0x0, 0x72, 0x4, 0x5, 0x32c, 0x4, 0x3, 0xa, 0x4, 0x100, 0x8, 0xd, 0x8, 0x9, 0x9, 0xbd4, 0x9, 0x7, 0x3ff, 0x0, 0x9, 0x4, 0x2, 0x3ff, 0x5, 0x7fff, 0xebd, 0x4, 0x6830, 0x8c, 0x6, 0x1, 0x9, 0x25b6, 0xb029, 0x2, 0x5, 0x81, 0x2, 0x9, 0x3, 0x42, 0x5, 0xf], 0x8}}, 0x70c5272f}) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000005c0)) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000640)={&(0x7f0000000600)="ccd46a2f8db7ceb4a8179abfccdbf7da2dad3eaa62", 0x15, <r9=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, <r10=>0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[r9, r10, 0x0], 0x3, 0x800, 0x0, <r11=>0xffffffffffffffff})
r12 = pidfd_getfd(r7, r3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f00000007c0)={0x1fe, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async)
bind$alg(r11, &(0x7f0000000800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r12, 0x8934, &(0x7f0000000880)={'sit0\x00', 0xdb3})
syz_genetlink_get_family_id$team(&(0x7f00000008c0), r8) (async, rerun: 32)
read$FUSE(r8, &(0x7f0000000900)={0x2020}, 0x2020) (async, rerun: 32)
ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000002940)) (async)
ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r8, 0x4068aea3, &(0x7f0000002980)={0xce, 0x0, r11}) (async)
ioctl$VIDIOC_S_FBUF(r11, 0x4030560b, &(0x7f0000002ac0)={0x42, 0x42, &(0x7f0000002a00)="a82bc3540efa0aa5322afc1b70fa179d6a0fcbce0e0fa3f45f11abf623d8907389a2c0940dcfec2fef6674633bbffe0a157c353046bd774edc042041fa2a30599b9052d62eef2b697878499e77bea7a3a9eb3de29b7b024be46c076757cf434304fc6614b6d131c39ec8ac247360cb7bfa7570b3fdb59a0e2a6791f6ea24a5adb75b2eff993e5e0fefd92486c0517649ba7a78385da82a4dedb8e21be5b9f16a22f67bd7d0c6ef75fa3145fbf0d03b3f5cebbc5514a6e8260e7acf96f949f8", {0x1ff, 0xffffffff, 0x50323234, 0x3, 0x80000001, 0x8000, 0x3, 0x6}}) (async, rerun: 32)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32)
socket$pppoe(0x18, 0x1, 0x0) (async)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000002b00)="70b2a90164455511e84465472b21dd7f7626a962c13b098524d0173bd5896950e1faa23d3af9d9cb8b0470f36fa066dda2e1bf", 0x33)

0s ago: executing program 3 (id=3260):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x8, 0x0, <r1=>r0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r10=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=r10, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0)
r12 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r12, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef)

kernel console output (not intermixed with test programs):


[  610.971228][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.981295][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.015987][ T7725] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  611.145940][ T7725] usb 6-1: device descriptor read/64, error -71
[  611.215607][ T7728] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  611.236757][ T7728] usb 5-1: Invalid ep0 maxpacket: 64
[  611.316630][ T5730] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  611.365635][ T7728] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  611.379305][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  611.388124][ T7725] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  611.395669][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  611.418027][ T7728] usb 5-1: Invalid ep0 maxpacket: 64
[  611.418032][   T24] usb 3-1: USB disconnect, device number 51
[  611.418368][ T7728] usb usb5-port1: unable to enumerate USB device
[  611.465562][    C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  611.478000][ T5730] usb 4-1: Using ep0 maxpacket: 8
[  611.485644][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.500269][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.510471][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  611.524063][ T5730] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  611.534129][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.542425][ T7725] usb 6-1: device descriptor read/64, error -71
[  611.553231][ T5730] usb 4-1: config 0 descriptor??
[  611.657721][ T7725] usb usb6-port1: attempt power cycle
[  611.775277][ T5730] usbhid 4-1:0.0: can't add hid device: -71
[  611.799895][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  611.810512][ T5730] usb 4-1: USB disconnect, device number 44
[  612.005562][ T7725] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  612.027517][   T30] audit: type=1326 audit(1781410007.609:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.3.2852" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8399ce59 code=0x0
[  612.030262][ T7725] usb 6-1: device descriptor read/8, error -71
[  612.305686][ T7725] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  612.336131][ T7725] usb 6-1: device descriptor read/8, error -71
[  612.445745][ T7725] usb usb6-port1: unable to enumerate USB device
[  612.789643][T16286] FAULT_INJECTION: forcing a failure.
[  612.789643][T16286] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.804352][T16286] CPU: 0 UID: 0 PID: 16286 Comm: syz.3.2853 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.804372][T16286] Tainted: [L]=SOFTLOCKUP
[  612.804376][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  612.804382][T16286] Call Trace:
[  612.804386][T16286]  <TASK>
[  612.804391][T16286]  dump_stack_lvl+0xe8/0x150
[  612.804409][T16286]  should_fail_ex+0x40c/0x560
[  612.804423][T16286]  copy_fpstate_to_sigframe+0xa83/0xd20
[  612.804440][T16286]  ? copy_fpstate_to_sigframe+0x188/0xd20
[  612.804456][T16286]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  612.804472][T16286]  ? ktime_get+0x45/0x220
[  612.804487][T16286]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  612.804501][T16286]  ? ktime_get+0x1f5/0x220
[  612.804514][T16286]  ? lapic_next_event+0x11/0x20
[  612.804525][T16286]  ? clockevents_program_event+0x491/0x630
[  612.804540][T16286]  ? fpu__alloc_mathframe+0xac/0x130
[  612.804554][T16286]  get_sigframe+0x603/0x830
[  612.804572][T16286]  ? __pfx_get_sigframe+0x10/0x10
[  612.804584][T16286]  ? irqentry_exit+0x218/0x8e0
[  612.804593][T16286]  ? trace_irq_disable+0x3b/0x140
[  612.804612][T16286]  x64_setup_rt_frame+0x163/0xc50
[  612.804628][T16286]  ? _raw_spin_unlock_irq+0x29/0x50
[  612.804642][T16286]  ? _raw_spin_unlock_irq+0x2e/0x50
[  612.804653][T16286]  ? get_signal+0x10dd/0x12c0
[  612.804672][T16286]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  612.804690][T16286]  arch_do_signal_or_restart+0x456/0x860
[  612.804704][T16286]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  612.804721][T16286]  ? ksys_write+0x242/0x270
[  612.804741][T16286]  exit_to_user_mode_loop+0xa9/0x6b0
[  612.804751][T16286]  ? rcu_is_watching+0x15/0xb0
[  612.804763][T16286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.804773][T16286]  do_syscall_64+0x353/0x580
[  612.804783][T16286]  ? clear_bhb_loop+0x40/0x90
[  612.804795][T16286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.804804][T16286] RIP: 0033:0x7efc8395d68e
[  612.804815][T16286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  612.804823][T16286] RSP: 002b:00007efc8478ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.804835][T16286] RAX: 0000000000000001 RBX: 00007efc847906c0 RCX: 00007efc8395d68e
[  612.804842][T16286] RDX: 0000000000000001 RSI: 00007efc84790090 RDI: 0000000000000003
[  612.804848][T16286] RBP: 00007efc84790090 R08: 0000000000000000 R09: 0000000000000000
[  612.804854][T16286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.804860][T16286] R13: 00007efc83c16038 R14: 00007efc83c15fa0 R15: 00007efc83d3fa48
[  612.804874][T16286]  </TASK>
[  613.285704][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2856'.
[  613.335764][   T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  613.349666][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'.
[  613.487777][   T24] usb 4-1: config index 0 descriptor too short (expected 12336, got 36)
[  613.498099][   T24] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  613.506951][   T24] usb 4-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  613.517925][   T24] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  613.527309][   T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  613.536844][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.545554][ T7725] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  613.626365][T13962] net_ratelimit: 8 callbacks suppressed
[  613.626384][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.697088][ T7725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.708298][ T7725] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  613.718058][ T7725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.728212][ T7725] usb 5-1: config 0 descriptor??
[  613.823869][T16306] binder: 16305:16306 ioctl 80186e84 200000000080 returned -22
[  613.937460][ T7725] usbhid 5-1:0.0: can't add hid device: -71
[  613.948259][ T7725] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  613.960114][ T7725] usb 5-1: USB disconnect, device number 51
[  614.106192][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.114544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.205644][ T7728] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  614.259852][ T7714] usb 4-1: USB disconnect, device number 45
[  614.358119][ T7728] usb 6-1: unable to get BOS descriptor or descriptor too short
[  614.367190][ T7728] usb 6-1: not running at top speed; connect to a high speed hub
[  614.384371][ T7728] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 134, changing to 4
[  614.405430][ T7728] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 4
[  614.426324][ T7728] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  614.441777][ T7728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.465543][ T7725] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  614.473242][ T7728] usb 6-1: Product: syz
[  614.480827][ T7728] usb 6-1: Manufacturer: syz
[  614.495195][ T7728] usb 6-1: SerialNumber: syz
[  614.656046][ T7725] usb 5-1: Using ep0 maxpacket: 32
[  614.664686][ T7725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.684024][ T7725] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  614.695138][ T7714] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  614.715940][ T7725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.739451][ T7728] usb 6-1: 1:1 : bogus bTerminalLink 6
[  614.751811][ T7725] usb 5-1: config 0 descriptor??
[  614.757206][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.774409][ T7728] usb 6-1: unit 4 not found!
[  614.783773][ T7728] usb 6-1: unit 8 not found!
[  614.799710][ T7725] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  614.839644][ T7725] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  614.860437][ T7714] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  614.897888][ T7714] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  614.924415][ T7714] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  614.953480][ T7714] usb 4-1: Manufacturer: syz
[  614.957500][ T7728] usb 6-1: USB disconnect, device number 51
[  614.977723][ T7714] usb 4-1: SerialNumber: syz
[  615.039318][    C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped
[  615.068280][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  615.290735][ T7714] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  615.331383][ T7714] usb 4-1: USB disconnect, device number 46
[  615.389434][    C1] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped
[  615.861827][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.486514][ T7728] usb 5-1: USB disconnect, device number 52
[  616.504747][ T7728] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  616.955658][ T7728] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  617.016556][T13957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.135553][ T7728] usb 5-1: Using ep0 maxpacket: 8
[  617.159789][ T7728] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[  617.185112][ T7728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.203981][ T7728] usb 5-1: Product: syz
[  617.212220][ T7728] usb 5-1: Manufacturer: syz
[  617.212853][T16364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'.
[  617.225446][ T7728] usb 5-1: SerialNumber: syz
[  617.226509][   T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  617.240461][T13957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.248987][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.262199][ T7728] usb 5-1: config 0 descriptor??
[  617.274271][ T7728] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[  617.406364][   T24] usb 4-1: Using ep0 maxpacket: 32
[  617.419463][   T24] usb 4-1: config 0 has no interfaces?
[  617.442714][   T24] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  617.480000][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.508786][   T24] usb 4-1: Product: syz
[  617.525444][ T7714] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  617.534584][   T24] usb 4-1: Manufacturer: syz
[  617.556763][   T24] usb 4-1: SerialNumber: syz
[  617.588672][   T24] usb 4-1: config 0 descriptor??
[  617.697843][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  617.728437][ T7714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  617.761223][ T7714] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  617.789039][ T7714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.822301][ T7714] usb 6-1: config 0 descriptor??
[  617.892111][T16373] pim6reg1: tun_chr_ioctl cmd 1074025677
[  617.906457][T16373] pim6reg1: linktype set to 823
[  618.092088][ T7714] ath6kl: Failed to submit usb control message: -71
[  618.124073][ T7714] ath6kl: unable to send the bmi data to the device: -71
[  618.144370][ T7714] ath6kl: Unable to send get target info: -71
[  618.156013][T13957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.170711][ T7714] ath6kl: Failed to init ath6kl core: -71
[  618.181532][ T7714] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  618.227957][ T7714] usb 6-1: USB disconnect, device number 52
[  619.095756][   T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  619.227538][    C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  619.228031][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.243848][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.280520][   T24] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  619.290921][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.310179][   T24] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  619.322438][   T24] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  619.334925][   T24] usb 6-1: Manufacturer: syz
[  619.339839][   T24] usb 6-1: SerialNumber: syz
[  619.638254][   T24] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  619.683081][   T24] usb 6-1: USB disconnect, device number 53
[  619.797561][ T7728] pwc: send_video_command error -71
[  619.812650][ T7728] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  619.834869][ T7728] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  619.873464][ T7728] usb 5-1: USB disconnect, device number 53
[  620.018178][   T30] audit: type=1326 audit(1781410015.599:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.073556][   T30] audit: type=1326 audit(1781410015.629:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.110909][   T30] audit: type=1326 audit(1781410015.629:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.148980][   T30] audit: type=1326 audit(1781410015.629:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.186342][   T30] audit: type=1326 audit(1781410015.629:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.234056][   T30] audit: type=1326 audit(1781410015.629:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.313147][   T30] audit: type=1326 audit(1781410015.629:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.403406][   T30] audit: type=1326 audit(1781410015.629:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.466674][   T30] audit: type=1326 audit(1781410015.629:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.493327][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.515751][   T30] audit: type=1326 audit(1781410015.629:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347b19ce59 code=0x7ffc0000
[  620.574184][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'.
[  620.627833][ T7728] usb 4-1: USB disconnect, device number 47
[  620.678121][   T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  620.840098][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  620.851914][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  620.861347][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.873622][   T24] usb 5-1: config 0 descriptor??
[  620.880500][T16397] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  621.363807][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.374121][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.425334][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  621.438830][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  621.516518][   T24] usb 5-1: USB disconnect, device number 54
[  621.617412][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.266087][   T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  622.467865][   T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  622.507773][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.552732][   T24] usb 3-1: config 0 descriptor??
[  622.599304][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[  622.747254][T13971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.066228][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.074709][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.326622][   T24] gspca_spca508: reg_read err -110
[  623.343482][   T24] gspca_spca508: reg_read err -32
[  623.359793][   T24] gspca_spca508: reg_read err -32
[  623.380168][   T24] gspca_spca508: reg_read err -32
[  623.398908][   T24] gspca_spca508: reg write: error -32
[  623.419707][   T24] spca508 3-1:0.0: probe with driver spca508 failed with error -32
[  623.515718][ T7725] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  623.675538][ T7725] usb 4-1: Using ep0 maxpacket: 8
[  623.690474][ T7725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.707340][ T7725] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  623.716818][ T7725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.733323][ T7725] usb 4-1: config 0 descriptor??
[  623.751102][ T7725] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  623.829674][T16449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.867692][T16446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.897627][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.011879][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.014007][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.080558][ T7725] usb 3-1: USB disconnect, device number 52
[  624.176878][ T7728] usb 4-1: USB disconnect, device number 48
[  624.347191][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  624.348825][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.361950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.379617][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  624.510487][T16456] loop5: detected capacity change from 0 to 7
[  624.535094][T16456] Dev loop5: unable to read RDB block 7
[  624.563339][T16456]  loop5: unable to read partition table
[  624.575825][T16456] loop5: partition table beyond EOD, truncated
[  624.587288][T16456] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  624.614157][T16461] netlink: 'syz.5.2899': attribute type 1 has an invalid length.
[  624.744613][T16463] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2900'.
[  624.795767][ T7728] usb 3-1: new low-speed USB device number 53 using dummy_hcd
[  624.957135][ T7728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  624.971014][ T7728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  624.983484][ T7728] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  625.005740][ T7728] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  625.015139][ T7728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.028700][ T7728] usb 3-1: config 0 descriptor??
[  625.041810][T16460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  625.055806][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.175571][ T5730] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  625.338168][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short
[  625.377332][ T4999] Dev loop5: unable to read RDB block 7
[  625.383434][ T5730] usb 4-1: not running at top speed; connect to a high speed hub
[  625.391417][ T4999]  loop5: unable to read partition table
[  625.398635][ T5730] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  625.412589][ T4999] loop5: partition table beyond EOD, truncated
[  625.434843][ T5730] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  625.473723][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.502553][ T5730] usb 4-1: Product: syz
[  625.523577][ T5730] usb 4-1: Manufacturer: syz
[  625.534813][ T4999] Dev loop5: unable to read RDB block 7
[  625.543645][ T4999]  loop5: unable to read partition table
[  625.543656][ T5730] usb 4-1: SerialNumber: syz
[  625.562106][ T4999] loop5: partition table beyond EOD, truncated
[  625.666647][T16456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.684890][T16456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.702988][ T7728] usbhid 3-1:0.0: can't add hid device: -71
[  625.719334][ T7728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  625.754233][ T7728] usb 3-1: USB disconnect, device number 53
[  625.821120][ T5730] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input56
[  625.846271][   T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  625.858143][ T4984] bcm5974 4-1:1.0: could not read from device
[  625.875775][ T4984] bcm5974 4-1:1.0: could not read from device
[  625.885145][ T4984] bcm5974 4-1:1.0: could not read from device
[  625.900296][ T5730] usb 4-1: USB disconnect, device number 49
[  626.015592][   T24] usb 6-1: Using ep0 maxpacket: 32
[  626.025208][   T24] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  626.035702][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.048158][   T24] usb 6-1: config 0 descriptor??
[  626.090503][   T24] gspca_main: sq930x-2.14.0 probing 041e:403c
[  626.186003][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.379398][T16479] netlink: 'syz.0.2905': attribute type 3 has an invalid length.
[  626.395453][T16479] netlink: 'syz.0.2905': attribute type 3 has an invalid length.
[  626.403405][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'.
[  626.547061][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'.
[  626.880317][T16502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.911060][T16502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.065798][   T24] gspca_sq930x: reg_w 0105 bf00 failed -71
[  627.126388][   T24] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  627.136151][   T24] usb 6-1: USB disconnect, device number 54
[  627.156056][ T7714] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  627.186911][ T5730] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  627.255668][ T5779] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  627.315781][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.329194][ T7714] usb 4-1: config index 0 descriptor too short (expected 15634, got 18)
[  627.337719][ T7714] usb 4-1: config 18 has too many interfaces: 204, using maximum allowed: 32
[  627.345853][ T5730] usb 3-1: Using ep0 maxpacket: 32
[  627.346600][ T7714] usb 4-1: config 18 has 1 interface, different from the descriptor's value: 204
[  627.354101][ T5730] usb 3-1: config 1 has an invalid interface number: 236 but max is 0
[  627.363454][ T7714] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  627.370193][ T5730] usb 3-1: config 1 has no interface number 0
[  627.380300][ T7714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.385756][ T5730] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  627.393355][ T7714] usb 4-1: Product: syz
[  627.403770][ T5730] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  627.408174][ T7714] usb 4-1: Manufacturer: syz
[  627.417673][ T5730] usb 3-1: config 1 interface 236 has no altsetting 0
[  627.421807][ T7714] usb 4-1: SerialNumber: syz
[  627.430758][ T5730] usb 3-1: config 1 has an invalid interface number: 236 but max is 0
[  627.436639][ T5779] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  627.442427][ T5730] usb 3-1: config 1 has no interface number 0
[  627.458382][ T5730] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  627.462275][ T5779] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  627.472753][ T5730] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  627.488045][ T5779] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  627.488937][ T5730] usb 3-1: config 1 interface 236 has no altsetting 0
[  627.498439][ T5779] usb 5-1: Manufacturer: syz
[  627.507418][ T5730] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  627.508721][ T5779] usb 5-1: SerialNumber: syz
[  627.517533][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.531196][ T5730] usb 3-1: Product: syz
[  627.535442][ T5730] usb 3-1: Manufacturer: syz
[  627.540050][ T5730] usb 3-1: SerialNumber: syz
[  627.554704][ T5730] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected
[  627.692851][T16513] sctp: [Deprecated]: syz.5.2916 (pid 16513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  627.692851][T16513] Use struct sctp_sack_info instead
[  627.714381][ T7714] usb 4-1: Firmware version (0.0) predates our first public release.
[  627.723173][ T7714] usb 4-1: Please update to version 0.2 or newer
[  627.764480][ T5779] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  627.776605][ T7714] usb 4-1: USB disconnect, device number 50
[  627.809739][ T5779] usb 5-1: USB disconnect, device number 55
[  627.924894][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2912'.
[  627.943776][T16500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'.
[  628.265321][T16521] kvm: kvm [16520]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd
[  628.415708][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.504320][ T5730] usb 3-1: USB disconnect, device number 54
[  628.826407][T13957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.837128][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.874388][T16540] fuse: Bad value for 'fd'
[  628.895528][ T7728] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  628.909592][T16540] binder: 16535:16540 ioctl 4018620d 0 returned -22
[  628.942104][T16540] Timeout policy `syz1' can only be used by L3 protocol number 25944
[  629.045445][ T7728] usb 4-1: device descriptor read/64, error -71
[  629.305555][ T7728] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  629.435466][ T7728] usb 4-1: device descriptor read/64, error -71
[  629.536205][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.546105][ T7728] usb usb4-port1: attempt power cycle
[  629.638483][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'.
[  629.652588][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'.
[  629.667467][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'.
[  629.689386][T16547] gretap0: entered promiscuous mode
[  629.699202][T16547] gretap0: left promiscuous mode
[  629.803521][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'.
[  629.897186][ T7728] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  629.936345][ T7728] usb 4-1: device descriptor read/8, error -71
[  630.107566][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.116037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.195595][ T7725] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  630.203243][ T7728] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  630.240265][ T7728] usb 4-1: device descriptor read/8, error -71
[  630.262493][T16565] bond4: Removing last ns target with arp_interval on
[  630.367359][ T7728] usb usb4-port1: unable to enumerate USB device
[  630.382216][ T7725] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  630.404651][ T7725] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  630.414048][ T7725] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  630.434429][ T7725] usb 6-1: Manufacturer: syz
[  630.439566][ T7725] usb 6-1: SerialNumber: syz
[  630.665650][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.729312][ T7725] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  630.774211][ T7725] usb 6-1: USB disconnect, device number 55
[  631.697437][ T7714] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  631.836510][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.895666][ T7714] usb 6-1: Using ep0 maxpacket: 32
[  631.909651][ T7714] usb 6-1: unable to get BOS descriptor or descriptor too short
[  631.926966][ T7714] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  631.949725][ T7714] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  631.971633][ T7714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.989248][ T7714] usb 6-1: Product: syz
[  631.998858][ T7714] usb 6-1: Manufacturer: syz
[  632.008987][ T7714] usb 6-1: SerialNumber: syz
[  632.045541][ T5779] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  632.208333][ T5779] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  632.232469][ T5779] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  632.255269][T16581] Cannot find del_set index 8192 as target
[  632.266536][ T5779] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  632.287809][ T7714] usb 6-1: Cannot retrieve CPort count: 0
[  632.299472][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.312423][ T7714] usb 6-1: Cannot retrieve CPort count: -5
[  632.326474][ T7714] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -5
[  632.340800][T16594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  632.366865][ T5779] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  632.523833][ T7714] usb 6-1: USB disconnect, device number 56
[  632.958132][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.065803][ T7725] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  633.227928][ T7725] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  633.235911][ T7714] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  633.241044][ T7725] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  633.255310][ T7725] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  633.263701][ T7725] usb 5-1: Manufacturer: syz
[  633.268703][ T7725] usb 5-1: SerialNumber: syz
[  633.388757][ T7714] usb 3-1: unable to get BOS descriptor or descriptor too short
[  633.399028][ T7714] usb 3-1: config 1 has an invalid interface number: 123 but max is 2
[  633.407784][ T7714] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[  633.415118][ T7714] usb 3-1: config 1 has no interface number 2
[  633.421905][ T7714] usb 3-1: too many endpoints for config 1 interface 123 altsetting 248: 43, using maximum allowed: 30
[  633.433213][ T7714] usb 3-1: config 1 interface 123 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 43
[  633.447307][ T7714] usb 3-1: config 1 interface 123 has no altsetting 0
[  633.461445][ T7714] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  633.471034][ T7714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.485544][ T7714] usb 3-1: Manufacturer: ᕷ낙�Ძᠣ홙糑嘰涺�⤩ꋓ
[  633.511189][ T7725] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  633.524527][ T7725] usb 5-1: USB disconnect, device number 56
[  633.714801][ T7714] usb 3-1: low speed audio streaming not supported
[  633.722650][ T7714] usb 3-1: 0:2 : does not exist
[  633.757648][ T7714] usb 3-1: USB disconnect, device number 55
[  633.794626][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  634.085880][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.101794][T16630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2951'.
[  634.235553][ T7725] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[  634.345500][ T7728] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  634.387851][ T7725] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.405742][ T7725] usb 6-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  634.431280][ T7725] usb 6-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0
[  634.451811][ T7725] usb 6-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  634.475141][ T7725] usb 6-1: config 0 interface 0 has no altsetting 0
[  634.490866][ T7725] usb 6-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00
[  634.508342][ T7725] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  634.525477][ T7728] usb 5-1: not running at top speed; connect to a high speed hub
[  634.533465][ T7725] usb 6-1: Manufacturer: syz
[  634.541353][ T7728] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[  634.554965][ T7725] usb 6-1: config 0 descriptor??
[  634.565407][ T7728] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  634.586477][    C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  634.586766][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.609870][ T7728] usb 5-1: config 11 has no interface number 0
[  634.610369][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.624565][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.634083][ T7728] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  634.665152][ T7728] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x8 has invalid wMaxPacketSize 0
[  634.686542][ T7728] usb 5-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  634.721420][ T7728] usb 5-1: config 11 interface 95 has no altsetting 0
[  634.736749][ T7728] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[  634.756103][ T7728] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  634.774024][ T7728] usb 5-1: Manufacturer: syz
[  634.799961][T16630] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  634.811823][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.826530][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.851574][ T7725] usb 6-1: USB disconnect, device number 57
[  634.881337][ T7714] usb 4-1: USB disconnect, device number 55
[  635.035458][ T7728] usb 5-1: USB disconnect, device number 57
[  635.100548][T16642] cgroup: fork rejected by pids controller in /syz3
[  635.146212][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.154665][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.206262][T13962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.306718][ T6276] tipc: Resetting bearer <eth:syzkaller0>
[  635.360690][ T6276] tipc: Disabling bearer <eth:syzkaller0>
[  635.521695][T16651] trusted_key: encrypted_key: master key parameter '00000000000000003724' is invalid
[  635.694723][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2959'.
[  635.798830][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'.
[  635.815217][T13957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.828326][T13957] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.940722][T16656] 8021q: adding VLAN 0 to HW filter on device bond4
[  635.991013][T16659] bond4: entered promiscuous mode
[  636.011374][T16659] bond4: entered allmulticast mode
[  636.047918][T16659] 8021q: adding VLAN 0 to HW filter on device bond4
[  636.084860][T16659] team0: Port device bond4 added
[  636.130418][T16663] team0: Port device bond4 removed
[  636.158275][T16663] bond4 (unregistering): Released all slaves
[  636.328703][T13957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  636.362646][T13957] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.373679][T13971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.395762][ T7714] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  636.512373][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  636.522481][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  636.560196][ T7714] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  636.583649][ T7714] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  636.608983][ T7714] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  636.637235][ T7714] usb 5-1: Manufacturer: syz
[  636.676344][ T7714] usb 5-1: SerialNumber: syz
[  636.720682][T13957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  636.745869][T13957] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.004469][T13957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  637.030135][T13957] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.242329][ T7714] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  637.256316][ T7714] usb 5-1: USB disconnect, device number 58
[  637.327183][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  637.341864][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  637.358633][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  637.390500][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  637.400655][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  637.545832][T13960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.688283][T13957] pimreg3: left allmulticast mode
[  637.703861][T13957] batman_adv: batadv0: Interface deactivated: gretap1
[  638.076075][ T5779] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  638.256792][ T5779] usb 3-1: Using ep0 maxpacket: 8
[  638.274969][ T5779] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  638.304427][ T5779] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  638.324729][ T5779] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  638.341901][ T5779] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  638.358868][ T5779] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  638.375281][ T5779] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  638.384795][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.611930][ T5779] usb 3-1: usb_control_msg returned -32
[  638.627356][T13957] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  638.628361][ T5779] usbtmc 3-1:16.0: can't read capabilities
[  638.709454][ T5779] usb 3-1: USB disconnect, device number 56
[  639.183911][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  639.183928][   T30] audit: type=1326 audit(1781410034.769:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16725 comm="syz.2.2974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f079ce59 code=0x0
[  639.509318][ T4949] Bluetooth: hci1: command tx timeout
[  639.605481][ T5779] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  639.747571][ T5779] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  639.756657][ T5779] usb 3-1: config 5 has no interface number 0
[  639.764597][ T5779] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  639.779543][ T5779] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  639.798206][ T5779] usb 3-1: config 5 interface 123 has no altsetting 0
[  639.830557][ T5779] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  639.842520][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.852083][ T5779] usb 3-1: Product: syz
[  639.857513][ T5779] usb 3-1: Manufacturer: syz
[  639.862439][ T5779] usb 3-1: SerialNumber: syz
[  639.912204][T16729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  641.556299][ T4949] Bluetooth: hci1: command tx timeout
[  643.633805][ T4949] Bluetooth: hci1: command tx timeout
[  645.074183][ T5779] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  645.705685][ T4949] Bluetooth: hci1: command tx timeout
[  647.798188][T13957] batman_adv: batadv0: Removing interface: gretap1
[  647.819310][T13957] bond4 (unregistering): (slave geneve2): Releasing active interface
[  647.970508][T13957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  647.980626][T13957] bond0 (unregistering): Released all slaves
[  647.991682][T13957] bond1 (unregistering): Released all slaves
[  648.005205][T13957] bond2 (unregistering): Released all slaves
[  648.029221][T13957] bond3 (unregistering): Released all slaves
[  648.042549][T13957] bond4 (unregistering): Released all slaves
[  648.073175][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[  648.230094][T13957] tipc: Disabling bearer <eth:hsr0>
[  648.250693][T13957] tipc: Disabling bearer <udp:syz2>
[  648.263038][T13957] tipc: Left network mode
[  649.206671][ T5779] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  649.316427][ T5729] usb 3-1: USB disconnect, device number 57
[  649.394525][ T5779] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  649.447724][ T5779] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  649.469853][ T5779] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  649.485444][ T5779] usb 5-1: Manufacturer: syz
[  649.493695][ T5779] usb 5-1: SerialNumber: syz
[  649.604649][T16697] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.614868][T16697] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.627755][T16697] bridge_slave_0: entered allmulticast mode
[  649.636000][T16697] bridge_slave_0: entered promiscuous mode
[  649.694535][T13957] hsr_slave_0: left promiscuous mode
[  649.710609][T13957] hsr_slave_1: left promiscuous mode
[  649.711702][T16793] netlink: 'syz.5.2985': attribute type 15 has an invalid length.
[  649.724516][T13957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.743711][T13957] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.766487][T13957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.782512][T13957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  649.808603][T16793] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2985'.
[  649.820918][ T5779] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  649.842272][T16793] netlink: 'syz.5.2985': attribute type 1 has an invalid length.
[  649.842913][ T5779] usb 5-1: USB disconnect, device number 59
[  649.858721][T13957] veth1_macvtap: left promiscuous mode
[  649.871791][T13957] veth0_macvtap: left promiscuous mode
[  650.702239][T16697] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.719871][T16697] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.736125][T16697] bridge_slave_1: entered allmulticast mode
[  650.749370][T16697] bridge_slave_1: entered promiscuous mode
[  650.821112][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6
[  650.873291][T16697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  650.893285][T16697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.002450][T16697] team0: Port device team_slave_0 added
[  651.037964][T16697] team0: Port device team_slave_1 added
[  651.212592][T13957] IPVS: stop unused estimator thread 0...
[  651.221532][T16697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.251527][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.300750][T16697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.330974][T16697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.375311][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.418703][T16697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.631203][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'.
[  651.852922][T16697] hsr_slave_0: entered promiscuous mode
[  651.859818][ T7726] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  651.866480][T16697] hsr_slave_1: entered promiscuous mode
[  651.898576][T16697] debugfs: 'hsr0' already exists in 'hsr'
[  651.929343][T16697] Cannot create hsr debugfs directory
[  652.047925][ T7726] usb 3-1: Using ep0 maxpacket: 16
[  652.060358][ T7726] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  652.073343][ T7726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  652.088773][ T7726] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  652.106187][ T7726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.114435][ T7726] usb 3-1: Product: syz
[  652.119304][ T7726] usb 3-1: Manufacturer: syz
[  652.126429][ T7726] usb 3-1: SerialNumber: syz
[  652.144171][ T7726] usb 3-1: config 0 descriptor??
[  652.169886][ T7726] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  652.194661][ T7726] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  652.692042][T16854] 0ªî{X¹¦: left allmulticast mode
[  652.700649][T16854] bridge0: left promiscuous mode
[  652.706369][T16854] bridge0: left allmulticast mode
[  652.721369][T16854] team_slave_1: left promiscuous mode
[  652.729339][T16854] team_slave_1: left allmulticast mode
[  652.744505][T16854] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  652.759390][T16854] vlan2: left allmulticast mode
[  652.764292][T16854] team_slave_0: left allmulticast mode
[  652.786091][T16854] sit1: left promiscuous mode
[  652.791310][T16854] bond2: left promiscuous mode
[  652.796467][T16854] veth3: left promiscuous mode
[  652.802366][T16854] bond3: left promiscuous mode
[  652.859657][ T7726] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  652.878184][ T7726] em28xx 3-1:0.0: Config register raw data: 0x41
[  653.337426][T16697] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  653.350590][T16697] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  653.360498][T16697] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  653.371082][T16697] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  653.379597][T16697] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  653.393281][T16697] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  653.404307][T16697] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  653.415306][T16697] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  653.669551][T16697] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.713089][T16697] 8021q: adding VLAN 0 to HW filter on device team0
[  653.733452][T13962] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.740658][T13962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.758404][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.765624][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.959448][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.014044][T16697] veth0_vlan: entered promiscuous mode
[  654.032644][T16697] veth1_vlan: entered promiscuous mode
[  654.067380][   T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  654.079159][T16697] veth0_macvtap: entered promiscuous mode
[  654.099534][T16697] veth1_macvtap: entered promiscuous mode
[  654.124164][T16697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.143300][T16697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.177781][T13971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.189682][T13971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.200756][T13971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.211169][T13971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.250402][   T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  654.262985][   T24] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  654.273560][   T24] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  654.297410][   T24] usb 5-1: Manufacturer: syz
[  654.302259][   T24] usb 5-1: SerialNumber: syz
[  654.383725][ T7994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.412519][ T7994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.504897][T13962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.532574][T13962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.609200][ T7714] usb 3-1: USB disconnect, device number 58
[  654.633796][   T24] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  654.648280][ T7714] em28xx 3-1:0.0: Disconnecting em28xx
[  654.657486][T16904] xt_NFQUEUE: number of total queues is 0
[  654.671910][ T7714] em28xx 3-1:0.0: Freeing device
[  654.691523][   T24] usb 5-1: USB disconnect, device number 60
[  654.814445][T16911] syzkaller0: entered promiscuous mode
[  654.833381][T16911] syzkaller0: entered allmulticast mode
[  655.508814][T16939] sg_write: data in/out 422877/370 bytes for SCSI command 0x0-- guessing data in;
[  655.508814][T16939]    program syz.5.3008 not setting count and/or reply_len properly
[  655.553061][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  655.573259][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  655.584009][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  655.599712][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  655.609514][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  657.308960][T16950] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.316474][T16950] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.323874][T16950] bridge_slave_0: entered allmulticast mode
[  657.333924][T16950] bridge_slave_0: entered promiscuous mode
[  657.343053][T16950] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.350764][T16950] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.359517][T16950] bridge_slave_1: entered allmulticast mode
[  657.367826][T16950] bridge_slave_1: entered promiscuous mode
[  657.444433][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.482774][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.542719][T16950] team0: Port device team_slave_0 added
[  657.561545][T16950] team0: Port device team_slave_1 added
[  657.636061][ T7725] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  657.651117][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.658686][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.685877][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.698571][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.706087][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  657.706384][ T5646] Bluetooth: hci5: command tx timeout
[  657.732074][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.771965][T16950] hsr_slave_0: entered promiscuous mode
[  657.778596][T16950] hsr_slave_1: entered promiscuous mode
[  657.784815][T16950] debugfs: 'hsr0' already exists in 'hsr'
[  657.791125][T16950] Cannot create hsr debugfs directory
[  657.837513][ T7725] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  657.850084][ T7725] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  657.860026][ T7725] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  657.869265][ T7725] usb 5-1: Manufacturer: syz
[  657.874249][ T7725] usb 5-1: SerialNumber: syz
[  657.905654][ T5779] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  658.065522][ T5779] usb 6-1: Using ep0 maxpacket: 8
[  658.072932][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  658.084520][ T5779] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  658.098861][ T5779] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  658.116456][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.128771][ T7725] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  658.158558][ T7725] usb 5-1: USB disconnect, device number 61
[  658.161723][ T5779] usb 6-1: config 0 descriptor??
[  658.525691][T16950] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  658.541438][T16950] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  658.549663][T16950] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  658.560265][T16950] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  658.569609][T16950] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  658.583029][T16950] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  658.595066][T16950] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  658.608234][T16950] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  658.746813][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.801222][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.815488][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.836930][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.857399][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.880101][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.921120][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  658.976592][ T5779] lenovo 0003:17EF:6047.0037: unknown main item tag 0x0
[  659.012803][T16950] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.013124][ T5779] lenovo 0003:17EF:6047.0037: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  659.134914][T16950] 8021q: adding VLAN 0 to HW filter on device team0
[  659.178081][T13971] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.185421][T13971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.209778][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.217023][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.293467][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.315553][ T5730] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  659.342103][T16950] veth0_vlan: entered promiscuous mode
[  659.358160][T16950] veth1_vlan: entered promiscuous mode
[  659.393708][T16950] veth0_macvtap: entered promiscuous mode
[  659.403487][T16950] veth1_macvtap: entered promiscuous mode
[  659.422532][T16950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  659.438890][T16950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  659.453739][T13967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  659.464721][T13967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  659.475038][T13967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  659.485143][ T5730] usb 4-1: Using ep0 maxpacket: 16
[  659.492129][T13967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  659.505575][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short
[  659.515776][ T5730] usb 4-1: config 16 has an invalid interface number: 44 but max is 0
[  659.525314][ T5730] usb 4-1: config 16 has no interface number 0
[  659.541480][ T5730] usb 4-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32
[  659.569841][ T5730] usb 4-1: config 16 interface 44 has no altsetting 0
[  659.615240][ T5730] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64
[  659.658216][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.682106][ T5730] usb 4-1: Product: syz
[  659.706506][ T5730] usb 4-1: Manufacturer: syz
[  659.714860][ T5730] usb 4-1: SerialNumber: syz
[  659.742360][T17024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  659.761148][T13967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.770759][T13967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.787242][ T5646] Bluetooth: hci5: command tx timeout
[  659.844554][T13967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.852901][T13967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.924430][ T7723] usb 6-1: USB disconnect, device number 58
[  660.119483][T17024] bond1 (unregistering): Released all slaves
[  660.158640][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.197201][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.211945][T17041] netlink: 'syz.2.3026': attribute type 63 has an invalid length.
[  660.223934][T17041] netlink: 'syz.2.3026': attribute type 62 has an invalid length.
[  660.315875][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3026'.
[  660.342301][ T5730] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now attached
[  660.374276][ T5730] usb 4-1: USB disconnect, device number 56
[  660.390970][ T5730] cypress_cy7c63 4-1:16.44: Cypress CY7C63xxx device now disconnected
[  660.425689][ T7726] usb 5-1: new low-speed USB device number 62 using dummy_hcd
[  660.556638][ T7726] usb 5-1: device descriptor read/64, error -71
[  660.576478][T17045] bridge3: entered promiscuous mode
[  660.583224][T17045] bridge3: entered allmulticast mode
[  660.805942][ T7726] usb 5-1: new low-speed USB device number 63 using dummy_hcd
[  660.945797][ T7726] usb 5-1: device descriptor read/64, error -71
[  661.077234][ T7726] usb usb5-port1: attempt power cycle
[  661.446352][ T7726] usb 5-1: new low-speed USB device number 64 using dummy_hcd
[  661.486977][ T7726] usb 5-1: device descriptor read/8, error -71
[  661.746473][ T7726] usb 5-1: new low-speed USB device number 65 using dummy_hcd
[  661.788155][ T7726] usb 5-1: device descriptor read/8, error -71
[  661.804340][   T30] audit: type=1326 audit(1781410057.379:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17065 comm="syz.2.3034" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687979ce59 code=0x0
[  661.866528][ T5646] Bluetooth: hci5: command tx timeout
[  661.906025][ T7726] usb usb5-port1: unable to enumerate USB device
[  662.358458][T17077] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  662.607813][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'.
[  662.626934][T17080] input: syz1 as /devices/virtual/input/input57
[  662.683770][T17083] usb usb7: usbfs: process 17083 (syz.2.3039) did not claim interface 0 before use
[  662.917769][T17089] fuse: Bad value for 'fd'
[  663.073180][T13967] bond3 (unregistering): (slave geneve2): Releasing active interface
[  663.191297][T13967] bond1 (unregistering): Released all slaves
[  663.223092][T13967] bond2 (unregistering): Released all slaves
[  663.244728][T13967] bond3 (unregistering): Released all slaves
[  663.357618][T13967] m>e5
: left promiscuous mode
[  663.521626][T13967] tipc: Left network mode
[  663.562513][ T7725] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  663.635658][ T7726] usb 3-1: new low-speed USB device number 59 using dummy_hcd
[  663.738608][ T7725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.761401][ T7725] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11
[  663.785847][ T7725] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  663.805059][ T7725] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  663.824402][ T7726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  663.836723][ T7725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.844883][ T7726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.857750][ T7725] usb 5-1: Product: syz
[  663.862019][ T7726] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  663.876871][ T7725] usb 5-1: Manufacturer: syz
[  663.882328][ T7725] usb 5-1: SerialNumber: syz
[  663.888613][ T7726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.896790][ T7723] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  663.935067][ T7726] usb 3-1: config 0 descriptor??
[  663.946062][ T5646] Bluetooth: hci5: command tx timeout
[  663.971287][T13967] hsr_slave_1: left promiscuous mode
[  664.075547][ T7723] usb 4-1: Using ep0 maxpacket: 32
[  664.082399][ T7723] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  664.115461][ T7723] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  664.134032][ T7723] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  664.165707][ T7723] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  664.199602][ T7723] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  664.237332][ T7723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.246031][ T7723] usb 4-1: Product: syz
[  664.250252][ T7723] usb 4-1: Manufacturer: syz
[  664.254940][ T7723] usb 4-1: SerialNumber: syz
[  664.293020][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  664.304111][ T7723] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input58
[  664.370119][ T7726] aquacomputer_d5next 0003:0C70:F0B6.0038: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0
[  664.509828][ T7723] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  664.550555][ T7723]  (id 0x00)
[  664.593023][T17108] gre1: entered promiscuous mode
[  664.607722][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.608130][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'.
[  664.619824][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.625984][ T7723] rc_core: IR keymap rc-imon-pad not found
[  664.637638][ T5729] usb 3-1: USB disconnect, device number 59
[  664.669171][ T7723] Registered IR keymap rc-empty
[  664.674287][ T7723] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  664.685208][ T7723] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  664.735831][ T7723] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  664.874559][ T7723] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input59
[  664.948165][ T7723] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:57> initialized
[  665.136615][T13967] IPVS: stop unused estimator thread 0...
[  665.169333][ T7723] usb 4-1: USB disconnect, device number 57
[  665.315583][    C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  665.338369][ T7725] cdc_ncm 5-1:1.0: bind() failure
[  665.368077][ T7725] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  665.417760][ T7725] usb 5-1: USB disconnect, device number 66
[  665.431897][T17130] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  665.552363][T17130] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3049'.
[  665.925575][ T7714] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  666.113482][ T7714] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024
[  666.138716][ T7714] usb 3-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  666.183449][ T7714] usb 3-1: config 1 interface 0 has no altsetting 0
[  666.205545][ T7725] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  666.224546][ T7714] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  666.248591][ T7714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.278235][ T7714] usb 3-1: Product: �
[  666.292436][ T7714] usb 3-1: Manufacturer: ꫻䔺䫕㑃풰Ｕ䡇�앑냒貜ꈫ쉜㔭礃脧妾呫狋墜㢬첗垿繱룖逥蒣츀�䮸렦ᡬ�䮼猋孜화⌣㯭霘볊囎膻᪬�ŕἰ礰焞�줗뜣㰸釶躜倗ﲻ拽ร쟛췋�헰娣型帧豳�䶱횹ឤŒ걫ꥄ셽ﾕఄ悪᱈硈鼴୯㽼℆齌ﰺ�ﺬ疌롔䠕筓젹�ꓪᢜ꼢쎽�밡�ﳎⴢ��੉☽좙
[  666.375514][ T7725] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  666.410794][ T7725] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  666.413561][ T7714] usb 3-1: SerialNumber: �꠮àȫ퇲⋢簑瓺�诳苽ᶆ⻯�괿춫�稙ﭒ췼룋蒯⦰盂﬽�ⶼ�藗᷋�ⳮ葔�礨煰覨䷌굥溿��讇㉑�◜䵀塽䎞쥌㈚놣凜緼഻�騀䴢ଲ魋樂匿鲶埮ᾴ䄦�
[  666.476115][ T7725] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  666.495579][ T7725] usb 4-1: Manufacturer: syz
[  666.506625][ T7725] usb 4-1: SerialNumber: syz
[  666.523476][T17140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  666.561565][T17140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  666.587071][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.594430][    C1] bridge0: topology change detected, propagating
[  666.601125][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.608392][    C1] bridge0: topology change detected, propagating
[  666.635360][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  666.806554][ T7725] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  666.841219][ T7725] usb 4-1: USB disconnect, device number 58
[  666.979520][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'.
[  667.026748][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'.
[  667.036898][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.050112][ T4949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  667.063401][ T4949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  667.079265][ T4949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  667.079268][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.080996][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.148854][ T4949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  667.159660][ T4949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  667.160127][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.331194][T17181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.416122][T17181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.560032][ T7714] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8
[  667.608451][ T7714] usb 3-1: USB disconnect, device number 60
[  667.663730][ T7714] usblp0: removed
[  667.828328][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'.
[  668.105210][T17195] Context (ID=0x1) not attached to queue pair (handle=0x0:0xae)
[  668.115454][ T7723] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  668.262768][T17178] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.270347][T17178] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.278288][T17178] bridge_slave_0: entered allmulticast mode
[  668.287235][T17178] bridge_slave_0: entered promiscuous mode
[  668.294821][T17178] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.297590][ T7723] usb 4-1: unable to get BOS descriptor or descriptor too short
[  668.302651][T17178] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.311299][ T7723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 15624, setting to 1024
[  668.317774][T17178] bridge_slave_1: entered allmulticast mode
[  668.328254][ T7723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  668.337737][T17178] bridge_slave_1: entered promiscuous mode
[  668.348321][ T7723] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice= 0.40
[  668.360957][ T7723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.369330][ T7723] usb 4-1: Product: syz
[  668.373614][ T7723] usb 4-1: Manufacturer: syz
[  668.378417][ T7723] usb 4-1: SerialNumber: syz
[  668.389759][T17184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  668.404947][T17178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.406446][ T5730] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  668.421432][T17178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.454701][T17178] team0: Port device team_slave_0 added
[  668.463584][T17178] team0: Port device team_slave_1 added
[  668.494497][T17178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.501764][T17178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.531637][T17178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.544144][T17178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.551295][T17178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.565591][ T5730] usb 6-1: Using ep0 maxpacket: 16
[  668.578108][T17178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.603199][ T5730] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  668.629811][ T7723] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  668.638262][ T5730] usb 6-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  668.645001][T17178] hsr_slave_0: entered promiscuous mode
[  668.654379][ T5730] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  668.659535][T17178] hsr_slave_1: entered promiscuous mode
[  668.670060][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.740022][ T7723] usb 4-1: USB disconnect, device number 59
[  668.826565][ T6292] udevd[6292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.012163][T17178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.141871][T17178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.245902][ T4949] Bluetooth: hci3: command tx timeout
[  669.253148][T17178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.361944][T17178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.415500][ T5729] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  669.577251][ T5729] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  669.595113][ T5729] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  669.619822][ T5729] usb 3-1: config 0 has no interface number 0
[  669.637846][T17178] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  669.645633][ T5729] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  669.663587][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.672225][ T5729] usb 3-1: Product: syz
[  669.677479][ T5729] usb 3-1: Manufacturer: syz
[  669.678501][T17178] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.683136][ T5729] usb 3-1: SerialNumber: syz
[  669.696613][T17178] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  669.717521][ T5729] usb 3-1: config 0 descriptor??
[  669.717537][T17178] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.719239][T17178] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  669.751355][T17178] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.760336][T17178] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  669.772809][T17178] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  669.931035][T17178] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.974165][T17178] 8021q: adding VLAN 0 to HW filter on device team0
[  669.990798][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.998049][ T7994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.012402][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.019701][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.121572][T17178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.146671][ T5729] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  670.156936][ T5729] uvcvideo 3-1:0.64: No valid video chain found.
[  670.191952][T17178] veth0_vlan: entered promiscuous mode
[  670.208725][T17178] veth1_vlan: entered promiscuous mode
[  670.249820][T17178] veth0_macvtap: entered promiscuous mode
[  670.260464][T17178] veth1_macvtap: entered promiscuous mode
[  670.282482][T17178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.300430][T17178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.319514][T13960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.328695][T13960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.341252][T13960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.353383][T13960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.377989][ T7723] usb 3-1: USB disconnect, device number 61
[  670.555138][T13960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.571180][T13960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.642933][T13954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.651235][T13954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.762924][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'.
[  670.772545][T17229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  670.780222][T17229] batman_adv: batadv0: Removing interface: batadv_slave_0
[  670.789042][T17229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  670.796691][T17229] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.995839][ T7714] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  671.148217][ T7714] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  671.183479][ T7714] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  671.217919][ T7714] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  671.247432][ T7714] usb 4-1: Manufacturer: syz
[  671.270364][ T7714] usb 4-1: SerialNumber: syz
[  671.300418][ T5730] usbhid 6-1:2.0: can't add hid device: -71
[  671.310746][ T5730] usbhid 6-1:2.0: probe with driver usbhid failed with error -71
[  671.316258][ T4949] Bluetooth: hci3: command tx timeout
[  671.368381][ T5730] usb 6-1: USB disconnect, device number 59
[  671.640917][ T7714] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  671.670692][ T7714] usb 4-1: USB disconnect, device number 60
[  671.883123][T17249] netlink: zone id is out of range
[  671.920939][T17249] netlink: zone id is out of range
[  671.982605][T17249] netlink: zone id is out of range
[  671.991484][T17249] netlink: zone id is out of range
[  671.999846][T17249] netlink: set zone limit has 4 unknown bytes
[  672.855828][ T5730] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  672.925740][ T5729] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  672.940300][T17262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3083'.
[  673.035459][ T5730] usb 4-1: Using ep0 maxpacket: 32
[  673.042563][ T5730] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  673.073683][ T5730] usb 4-1: config 0 has no interface number 0
[  673.087944][ T5730] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  673.098865][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.108296][ T5730] usb 4-1: Product: syz
[  673.112635][ T5730] usb 4-1: Manufacturer: syz
[  673.115559][ T5729] usb 6-1: Using ep0 maxpacket: 16
[  673.119943][ T5730] usb 4-1: SerialNumber: syz
[  673.127610][ T5729] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.133945][ T5730] usb 4-1: config 0 descriptor??
[  673.157831][ T5729] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  673.180064][ T5729] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  673.195570][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.220092][ T5729] usb 6-1: Product: syz
[  673.230506][ T5729] usb 6-1: Manufacturer: syz
[  673.239046][ T5729] usb 6-1: SerialNumber: syz
[  673.247740][T17273] fuse: Bad value for 'fd'
[  673.273579][ T5729] usb 6-1: 0:2 : does not exist
[  673.309964][T17273] binder: 17267:17273 ioctl 4018620d 0 returned -22
[  673.342256][T17273] No such timeout policy "syz1"
[  673.395844][ T4949] Bluetooth: hci3: command tx timeout
[  673.471673][ T5729] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  673.557812][ T5730] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  673.579594][ T5730] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  673.612414][ T5729] usb 6-1: USB disconnect, device number 60
[  673.656326][ T7714] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  673.679275][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  673.823888][ T7714] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  673.851496][ T7714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.873511][ T7714] usb 3-1: Product: syz
[  673.887253][ T7714] usb 3-1: Manufacturer: syz
[  673.902456][ T7714] usb 3-1: SerialNumber: syz
[  673.921496][ T7714] usb 3-1: config 0 descriptor??
[  673.985601][ T5730] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  674.020202][ T5730] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  674.250490][ T7726] usb 4-1: USB disconnect, device number 61
[  674.360494][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.386667][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.417758][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.428011][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.445467][ T5729] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  674.458932][ T7714] usb 3-1: Firmware version (0.0) predates our first public release.
[  674.469880][ T7714] usb 3-1: Please update to version 0.2 or newer
[  674.539446][ T7714] usb 3-1: USB disconnect, device number 62
[  674.635633][ T5729] usb 6-1: Using ep0 maxpacket: 16
[  674.646665][ T5729] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  674.661055][ T5729] usb 6-1: config 66 has 2 interfaces, different from the descriptor's value: 3
[  674.672159][ T5729] usb 6-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  674.686511][ T5729] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  674.700576][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.710342][ T5729] usb 6-1: Product: syz
[  674.714628][ T5729] usb 6-1: Manufacturer: syz
[  674.721728][ T5729] usb 6-1: SerialNumber: syz
[  674.940358][ T5729] usb 6-1: Fast Track Pro config OK
[  674.948216][ T5729] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  675.000457][ T5729] usb 6-1: USB disconnect, device number 61
[  675.029363][ T5699] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  675.067079][ T5730] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  675.227967][ T5699] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  675.239340][ T5730] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  675.249777][ T5699] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  675.249801][ T5730] usb 4-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  675.260278][ T5699] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  675.269297][ T5730] usb 4-1: Product: syz
[  675.276496][ T5699] usb 5-1: Manufacturer: syz
[  675.284540][ T5699] usb 5-1: SerialNumber: syz
[  675.289251][ T5730] usb 4-1: Manufacturer: syz
[  675.299291][ T5730] usb 4-1: config 0 descriptor??
[  675.310870][ T5730] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  675.320194][ T5730] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  675.466841][ T4949] Bluetooth: hci3: command tx timeout
[  675.514636][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  675.527825][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.539228][ T5730] usb 4-1: USB disconnect, device number 62
[  675.540055][ T5699] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  675.570860][ T5730] ftdi_sio 4-1:0.0: device disconnected
[  675.572377][ T5699] usb 5-1: USB disconnect, device number 67
[  675.975559][ T7723] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  676.084821][   T30] audit: type=1326 audit(1781410071.659:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.3.3099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fafd9ce59 code=0x0
[  676.136048][ T7723] usb 3-1: unable to get BOS descriptor or descriptor too short
[  676.159025][ T7723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  676.181050][ T7723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  676.231029][ T7723] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  676.250592][ T7723] usb 3-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40
[  676.260200][ T7723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.268992][ T7723] usb 3-1: Product: syz
[  676.280580][ T7723] usb 3-1: Manufacturer: syz
[  676.286688][ T7723] usb 3-1: SerialNumber: syz
[  676.620895][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.634595][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.673933][ T7723] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  676.698492][ T7723] usb 3-1: MIDIStreaming interface descriptor not found
[  676.800236][ T7723] usb 3-1: USB disconnect, device number 63
[  676.913510][ T6292] udevd[6292]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  677.160290][T17330] fuse: Bad value for 'fd'
[  677.323885][T17330] binder: 17327:17330 ioctl 4018620d 0 returned -22
[  677.431678][T17330] No such timeout policy "syz1"
[  677.771572][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.818480][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.008386][T17351] netlink: 'syz.4.3109': attribute type 1 has an invalid length.
[  678.031074][T17351] netlink: 'syz.4.3109': attribute type 3 has an invalid length.
[  678.058030][T17351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3109'.
[  678.415771][ T5779] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  678.593139][ T5779] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  678.624356][ T5779] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  678.650862][ T5779] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  678.680601][ T5779] usb 6-1: Manufacturer: syz
[  678.690286][ T5779] usb 6-1: SerialNumber: syz
[  678.759066][T17364] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3115'.
[  678.959984][ T5779] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  678.972108][ T5779] usb 6-1: USB disconnect, device number 62
[  679.075470][ T7723] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  679.245537][ T7723] usb 4-1: Using ep0 maxpacket: 16
[  679.259299][ T7723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  679.276844][ T7723] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  679.295179][ T7723] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  679.324785][ T7723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.339409][ T7723] usb 4-1: Product: syz
[  679.385581][ T7723] usb 4-1: Manufacturer: syz
[  679.395409][ T7723] usb 4-1: SerialNumber: syz
[  679.418089][ T7723] usb 4-1: 0:2 : does not exist
[  679.694428][ T7723] usb 4-1: USB disconnect, device number 63
[  679.811520][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  679.880893][T17375] tipc: Started in network mode
[  679.895892][T17375] tipc: Node identity d2a54032283d, cluster identity 4711
[  679.909373][T17375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.929724][T17376] syzkaller0: entered promiscuous mode
[  679.958845][T17376] syzkaller0: entered allmulticast mode
[  680.094822][T17374] tipc: Resetting bearer <eth:syzkaller0>
[  680.130060][T17374] tipc: Disabling bearer <eth:syzkaller0>
[  680.345645][ T5729] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  680.353382][ T5779] usb 3-1: new low-speed USB device number 64 using dummy_hcd
[  680.475750][ T5699] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  680.495738][ T5779] usb 3-1: device descriptor read/64, error -71
[  680.515491][ T5729] usb 5-1: Using ep0 maxpacket: 8
[  680.524316][ T5729] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  680.534374][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.542619][ T5729] usb 5-1: Product: syz
[  680.547594][ T5729] usb 5-1: Manufacturer: syz
[  680.552223][ T5729] usb 5-1: SerialNumber: syz
[  680.563447][ T5729] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  680.596960][ T5729] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  680.622413][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  680.638510][ T7723] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  680.647236][ T5699] usb 6-1: Using ep0 maxpacket: 8
[  680.654233][ T5699] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  680.663466][ T5699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  680.680216][ T5699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  680.690453][ T5699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  680.702272][ T5699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  680.712694][ T5699] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  680.727333][ T5699] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  680.736601][ T5779] usb 3-1: new low-speed USB device number 65 using dummy_hcd
[  680.744868][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.765091][ T7714] usb 5-1: USB disconnect, device number 68
[  680.805824][ T7723] usb 4-1: Using ep0 maxpacket: 16
[  680.815053][ T7723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.841788][ T7723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  680.853701][ T7723] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  680.868237][ T7723] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  680.883038][ T7723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.895154][ T7723] usb 4-1: config 0 descriptor??
[  680.905603][ T5779] usb 3-1: device descriptor read/64, error -71
[  680.975258][ T5699] usb 6-1: GET_CAPABILITIES returned 0
[  680.981865][ T5699] usbtmc 6-1:16.0: can't read capabilities
[  681.015709][ T5779] usb usb3-port1: attempt power cycle
[  681.185000][ T7726] usb 6-1: USB disconnect, device number 63
[  681.314121][ T7723] microsoft 0003:045E:07DA.0039: ignoring exceeding usage max
[  681.341729][ T7723] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0039/input/input63
[  681.355512][ T5779] usb 3-1: new low-speed USB device number 66 using dummy_hcd
[  681.393375][ T5779] usb 3-1: device descriptor read/8, error -71
[  681.423975][ T7723] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  681.635537][ T5779] usb 3-1: new low-speed USB device number 67 using dummy_hcd
[  681.658221][ T5779] usb 3-1: device descriptor read/8, error -71
[  681.754419][T17399] netlink: 'syz.4.3126': attribute type 63 has an invalid length.
[  681.765626][T17399] netlink: 'syz.4.3126': attribute type 62 has an invalid length.
[  681.775124][ T5779] usb usb3-port1: unable to enumerate USB device
[  682.048497][ T7723] usb 4-1: USB disconnect, device number 64
[  682.465482][ T7723] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  682.605546][ T7723] usb 4-1: device descriptor read/64, error -71
[  682.856659][ T7723] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  682.996218][ T7723] usb 4-1: device descriptor read/64, error -71
[  683.057025][ T5730] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  683.123364][ T7723] usb usb4-port1: attempt power cycle
[  683.234023][ T5730] usb 5-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config
[  683.245574][ T5730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  683.258087][ T5730] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  683.270066][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.278504][ T5730] usb 5-1: Product: syz
[  683.282792][ T5730] usb 5-1: Manufacturer: syz
[  683.288098][ T5730] usb 5-1: SerialNumber: syz
[  683.311130][T17421] macsec1: entered promiscuous mode
[  683.317344][T17421] macsec1: entered allmulticast mode
[  683.434089][T17427] fuse: Bad value for 'fd'
[  683.454671][T17427] binder: 17422:17427 ioctl 4018620d 0 returned -22
[  683.475495][ T7723] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  683.489545][T17427] No such timeout policy "syz1"
[  683.506406][ T7723] usb 4-1: device descriptor read/8, error -71
[  683.642295][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3138'.
[  683.747028][ T7723] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  683.776192][ T7723] usb 4-1: device descriptor read/8, error -71
[  683.885950][ T7723] usb usb4-port1: unable to enumerate USB device
[  684.188350][T17435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  684.463373][T17440] netlink: 'syz.5.3141': attribute type 63 has an invalid length.
[  684.503659][T17440] netlink: 'syz.5.3141': attribute type 62 has an invalid length.
[  684.541711][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'.
[  684.704852][ T5730] usb 5-1: unit 47 not found!
[  684.724957][ T5730] usb 5-1: unit 102 not found!
[  684.879092][ T5730] usb 5-1: USB disconnect, device number 69
[  685.123195][T17454] netlink: 'syz.0.3148': attribute type 10 has an invalid length.
[  685.149682][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3148'.
[  685.221923][T17454] team0: Failed to send options change via netlink (err -105)
[  685.231329][T17460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3150'.
[  685.242564][T17454] team0: Port device geneve1 added
[  685.250232][T17460] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3150'.
[  685.420284][T17472] netlink: 'syz.4.3153': attribute type 63 has an invalid length.
[  685.438861][T17472] netlink: 'syz.4.3153': attribute type 62 has an invalid length.
[  685.565766][ T5779] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  685.736001][ T5779] usb 6-1: Using ep0 maxpacket: 16
[  685.756615][ T5779] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  685.796572][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  685.804151][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  685.807903][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  685.824259][ T5779] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  685.839804][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.854639][ T5779] usb 6-1: Product: syz
[  685.885540][ T5779] usb 6-1: Manufacturer: syz
[  685.890748][ T5779] usb 6-1: SerialNumber: syz
[  685.899474][ T5779] usb 6-1: config 0 descriptor??
[  685.916653][ T5779] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  685.939814][ T5779] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  686.517340][ T5779] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  686.536327][ T5779] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  686.575583][ T7714] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  686.713192][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'.
[  686.725516][ T7714] usb 4-1: device descriptor read/64, error -71
[  686.746018][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.760022][T17493] ipvlan2: entered allmulticast mode
[  686.769691][T17493] syz_tun: entered allmulticast mode
[  686.975761][ T7714] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  687.101731][T17503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.125512][ T7714] usb 4-1: device descriptor read/64, error -71
[  687.168078][ T5779] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  687.212703][T17463] netlink: 'syz.5.3151': attribute type 20 has an invalid length.
[  687.235385][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'.
[  687.247060][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  687.256827][ T7714] usb usb4-port1: attempt power cycle
[  687.269413][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  687.285304][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  687.340569][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  687.362773][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  687.375670][ T5730] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  687.397356][T17463] netlink: 'syz.5.3151': attribute type 20 has an invalid length.
[  687.416099][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'.
[  687.438576][T13967] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  687.450239][T13967] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  687.505733][T13967] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  687.516004][ T5730] usb 5-1: device descriptor read/64, error -71
[  687.530856][T13967] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  687.590125][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  687.600000][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  687.610191][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  687.622162][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  687.630487][ T7714] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  687.646258][ T5779] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  687.668490][ T5779] usb 6-1: USB disconnect, device number 64
[  687.687641][ T7714] usb 4-1: device descriptor read/8, error -71
[  687.720111][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.766577][ T5730] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  687.787228][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.910502][ T5730] usb 5-1: device descriptor read/64, error -71
[  687.965718][ T7714] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  687.986504][ T7714] usb 4-1: device descriptor read/8, error -71
[  688.025744][ T5730] usb usb5-port1: attempt power cycle
[  688.097978][ T7714] usb usb4-port1: unable to enumerate USB device
[  688.229254][ T7723] IPVS: starting estimator thread 0...
[  688.246935][T17522] input: syz0 as /devices/virtual/input/input64
[  688.325589][T17523] IPVS: using max 47 ests per chain, 112800 per kthread
[  688.365480][ T5730] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  688.396203][ T5730] usb 5-1: device descriptor read/8, error -71
[  688.485506][ T7714] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  688.636359][T17528] bond0: (slave bond_slave_1): Releasing backup interface
[  688.649469][ T7714] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  688.657625][ T5730] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  688.680652][ T5730] usb 5-1: device descriptor read/8, error -71
[  688.690516][ T7714] usb 6-1: config 0 has no interface number 0
[  688.707291][ T7714] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  688.723393][ T7714] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  688.737677][ T7714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.748039][ T7714] usb 6-1: Product: syz
[  688.760754][ T7714] usb 6-1: Manufacturer: syz
[  688.768928][ T7714] usb 6-1: SerialNumber: syz
[  688.796825][ T5730] usb usb5-port1: unable to enumerate USB device
[  688.798858][ T7714] usb 6-1: config 0 descriptor??
[  688.827229][ T7714] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  688.836464][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.936698][T17531] netlink: 'syz.0.3168': attribute type 1 has an invalid length.
[  688.995173][T17531] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  689.054103][T17531] veth5: entered promiscuous mode
[  689.084084][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3168'.
[  689.107403][T17531] bond4: (slave veth5): Enslaving as a backup interface with a down link
[  689.131694][T13960] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  689.150003][T17533] 8021q: adding VLAN 0 to HW filter on device bond4
[  689.282609][ T7723] usb 6-1: USB disconnect, device number 65
[  689.299898][T17521] yurex 6-1:0.50: yurex_write - failed to send bulk msg, error -19
[  689.309277][ T7723] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  689.309322][ T7994] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  689.466215][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.537946][T17521] fuse: Bad value for 'user_id'
[  689.554134][T17521] fuse: Bad value for 'user_id'
[  689.627158][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.866368][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.515636][ T5779] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  690.645461][ T5779] usb 5-1: device descriptor read/64, error -71
[  690.688357][T17562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'.
[  690.699336][T17562] pim6reg1: entered promiscuous mode
[  690.704630][T17562] pim6reg1: entered allmulticast mode
[  690.895811][ T5779] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  691.025517][ T5779] usb 5-1: device descriptor read/64, error -71
[  691.147257][ T5779] usb usb5-port1: attempt power cycle
[  691.323988][T17577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.335245][T17577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.445509][ T5730] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  691.495574][ T5779] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  691.527351][ T5779] usb 5-1: device descriptor read/8, error -71
[  691.575586][ T5730] usb 4-1: device descriptor read/64, error -71
[  691.705847][ T7723] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  691.748140][T17586] program syz.2.3184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  691.787271][ T5779] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  691.816674][ T5730] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  691.817173][ T5779] usb 5-1: device descriptor read/8, error -71
[  691.855584][ T7723] usb 6-1: Using ep0 maxpacket: 16
[  691.862996][ T7723] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  691.886187][ T7723] usb 6-1: config 0 interface 0 has no altsetting 0
[  691.897243][ T7723] usb 6-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[  691.906439][ T7723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.917767][ T7723] usb 6-1: config 0 descriptor??
[  691.946182][ T5699] net_ratelimit: 4 callbacks suppressed
[  691.946201][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.955584][ T5730] usb 4-1: device descriptor read/64, error -71
[  691.960603][ T5779] usb usb5-port1: unable to enumerate USB device
[  692.086300][ T5730] usb usb4-port1: attempt power cycle
[  692.185803][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.333608][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.341114][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.348585][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.357651][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.364649][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.372092][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.379587][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.386940][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.394054][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.401239][ T7723] lenovo 0003:17EF:61AE.003A: unknown main item tag 0x0
[  692.408381][ T7723] lenovo 0003:17EF:61AE.003A: unbalanced collection at end of report description
[  692.418185][ T7723] lenovo 0003:17EF:61AE.003A: hid_parse failed
[  692.424406][ T7723] lenovo 0003:17EF:61AE.003A: probe with driver lenovo failed with error -22
[  692.435474][ T5730] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  692.466258][ T5730] usb 4-1: device descriptor read/8, error -71
[  692.667341][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.705829][ T5730] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  692.727958][ T5730] usb 4-1: device descriptor read/8, error -71
[  692.836816][ T5730] usb usb4-port1: unable to enumerate USB device
[  692.971003][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.996876][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.008434][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.525671][ T5779] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  693.566814][ T5699] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  693.655459][ T5779] usb 3-1: device descriptor read/64, error -71
[  693.725535][ T5699] usb 5-1: Using ep0 maxpacket: 32
[  693.732311][ T5699] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  693.740522][ T5699] usb 5-1: config 0 has no interface number 0
[  693.748793][ T5699] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  693.757981][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.766651][ T5699] usb 5-1: Product: syz
[  693.770834][ T5699] usb 5-1: Manufacturer: syz
[  693.775527][ T5699] usb 5-1: SerialNumber: syz
[  693.781782][ T5699] usb 5-1: config 0 descriptor??
[  693.793201][ T5699] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  693.905506][ T5779] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  693.999783][ T5699] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  694.013467][ T5699] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  694.035868][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.055667][ T5779] usb 3-1: device descriptor read/64, error -71
[  694.176033][ T5779] usb usb3-port1: attempt power cycle
[  694.401767][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  694.415275][   T24] usb 6-1: USB disconnect, device number 66
[  694.421361][ T5699] usb 5-1: USB disconnect, device number 78
[  694.467561][ T5699] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  694.503085][ T5699] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  694.528367][ T5779] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  694.538524][ T5699] quatech2 5-1:0.51: device disconnected
[  694.568388][ T5779] usb 3-1: device descriptor read/8, error -71
[  694.835505][ T5779] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  694.867818][ T5779] usb 3-1: device descriptor read/8, error -71
[  694.878222][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'.
[  694.900616][T17648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.913323][T17648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.974226][T17651] netlink: 'syz.4.3205': attribute type 13 has an invalid length.
[  694.982564][ T5779] usb usb3-port1: unable to enumerate USB device
[  695.066443][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.107451][T17651] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.115153][T17651] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.387280][T17660] fuse: Bad value for 'fd'
[  695.417039][T13954] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  695.422001][T17660] binder: 17657:17660 ioctl 4018620d 0 returned -22
[  695.450453][ T5730] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  695.469259][T13954] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  695.492831][T13954] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  695.515192][T13954] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  695.528056][T17660] No such timeout policy "syz1"
[  695.627601][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.638908][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.649318][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  695.662802][ T5730] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  695.673302][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.698527][ T5730] usb 6-1: config 0 descriptor??
[  695.706407][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.923786][ T5730] plantronics 0003:047F:FFFF.003B: unknown global tag 0xc
[  695.947856][ T5730] plantronics 0003:047F:FFFF.003B: item 0 4 1 12 parsing failed
[  695.973874][ T5730] plantronics 0003:047F:FFFF.003B: parse failed
[  696.002981][ T5730] plantronics 0003:047F:FFFF.003B: probe with driver plantronics failed with error -22
[  696.049800][ T5730] usb 6-1: USB disconnect, device number 67
[  696.107427][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.489525][T17676] bond1 (unregistering): Released all slaves
[  696.586229][ T5779] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  696.618936][T17679] macsec1: entered allmulticast mode
[  696.624535][T17679] dummy0: entered allmulticast mode
[  696.636308][T17679] dummy0: left allmulticast mode
[  696.755835][ T5779] usb 6-1: device descriptor read/64, error -71
[  696.839979][T17689] netlink: 'syz.3.3216': attribute type 2 has an invalid length.
[  696.848060][T17689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3216'.
[  696.996098][ T5779] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  697.135419][ T5779] usb 6-1: device descriptor read/64, error -71
[  697.158721][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.265858][ T5779] usb usb6-port1: attempt power cycle
[  697.617881][ T5779] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  697.661499][ T5779] usb 6-1: device descriptor read/8, error -71
[  697.808066][T17703] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  697.915544][ T5779] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  697.938172][ T5779] usb 6-1: device descriptor read/8, error -71
[  698.059979][ T5779] usb usb6-port1: unable to enumerate USB device
[  698.145636][ T5699] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  698.186374][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.315898][ T5699] usb 4-1: Using ep0 maxpacket: 16
[  698.322915][ T5699] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.335422][ T5699] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  698.360836][ T5699] usb 4-1: config 0 interface 0 has no altsetting 0
[  698.376804][ T5699] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  698.397915][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.414519][ T5699] usb 4-1: config 0 descriptor??
[  698.434950][ T5699] usbhid 4-1:0.0: can't add hid device: -22
[  698.443004][ T5699] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  698.589075][T17724] fuse: Bad value for 'fd'
[  698.598935][T17724] binder: 17717:17724 ioctl 4018620d 0 returned -22
[  698.608370][T17724] No such timeout policy "syz1"
[  698.706955][ T7723] usb 4-1: USB disconnect, device number 77
[  698.747003][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.775438][ T5730] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  698.937040][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  698.951814][ T5730] usb 3-1: config 0 has no interfaces?
[  698.964217][ T5730] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  698.975159][ T5730] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  698.989254][ T5730] usb 3-1: Product: syz
[  698.997246][ T5730] usb 3-1: Manufacturer: syz
[  699.005282][ T5730] usb 3-1: SerialNumber: syz
[  699.019777][ T5730] usb 3-1: config 0 descriptor??
[  699.227080][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.237064][ T5730] usb 3-1: USB disconnect, device number 72
[  699.505469][ T7723] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  699.552321][T17740] fuse: Bad value for 'fd'
[  699.665844][ T7723] usb 4-1: Using ep0 maxpacket: 8
[  699.686758][ T7723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  699.710743][ T7723] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  699.733215][ T7723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.761047][ T7723] usb 4-1: config 0 descriptor??
[  699.867376][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.981893][T17760] netlink: 'syz.4.3237': attribute type 7 has an invalid length.
[  700.007222][ T7723] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  700.027528][T17760] netlink: 'syz.4.3237': attribute type 8 has an invalid length.
[  700.265870][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.354373][T17779] fuse: Bad value for 'fd'
[  700.490065][T17782] No such timeout policy "syz1"
[  700.517758][ T7726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.253379][ T7723] usb 4-1: USB disconnect, device number 78
[  701.330232][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.621762][T17789] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3245'.
[  701.665455][ T5730] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  701.828343][ T5730] usb 6-1: Using ep0 maxpacket: 16
[  701.841430][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.863130][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.886481][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  701.915539][ T5730] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  701.942333][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.973765][ T5730] usb 6-1: config 0 descriptor??
[  702.094205][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'.
[  702.135830][T17797] ipvlan2: entered allmulticast mode
[  702.141770][T17797] syz_tun: entered allmulticast mode
[  702.265823][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.355807][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.409148][ T5730] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max
[  702.427843][ T5730] hid_parser_main: 7 callbacks suppressed
[  702.427866][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.447057][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.458809][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.472643][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.481104][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.489338][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.497343][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.505055][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.512903][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.543183][ T5730] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0
[  702.562255][ T5730] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  702.575019][ T5730] microsoft 0003:045E:07DA.003C: no inputs found
[  702.581471][ T5730] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway
[  702.616444][ T5730] usb 6-1: USB disconnect, device number 72
[  702.676201][T17810] fido_id[17810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  702.705661][ T5729] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  702.876037][ T5729] usb 5-1: no configurations
[  702.880677][ T5729] usb 5-1: can't read configurations, error -22
[  702.906108][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.965550][ T7726] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  703.025609][ T5729] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  703.066930][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.116844][ T7726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.128254][ T7726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.139492][ T7726] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  703.149006][ T7726] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  703.158278][ T7726] usb 3-1: Manufacturer: syz
[  703.174093][ T7726] usb 3-1: config 0 descriptor??
[  703.187935][ T5729] usb 5-1: no configurations
[  703.198918][ T5729] usb 5-1: can't read configurations, error -22
[  703.211434][ T5729] usb usb5-port1: attempt power cycle
[  703.306484][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.385975][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.445530][ T5730] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  703.555478][ T5729] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  703.588818][ T5729] usb 5-1: no configurations
[  703.603822][ T5729] usb 5-1: can't read configurations, error -22
[  703.605491][ T5730] usb 6-1: Using ep0 maxpacket: 8
[  703.623433][ T7726] pyra 0003:1E7D:2CF6.003D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  703.648381][ T5730] usb 6-1: unable to get BOS descriptor or descriptor too short
[  703.685843][ T5730] usb 6-1: config 140 has an invalid interface number: 182 but max is 1
[  703.694831][ T5730] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config
[  703.718030][ T7723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.736809][ T5730] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2
[  703.754925][ T5729] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  703.754985][ T5730] usb 6-1: config 140 has no interface number 0
[  703.774842][ T5730] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[  703.789721][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.799015][ T5730] usb 6-1: Product: syz
[  703.825233][ T5730] usb 6-1: Manufacturer: syz
[  703.831445][ T5730] usb 6-1: SerialNumber: syz
[  703.839348][ T5729] usb 5-1: no configurations
[  703.846113][T17828] fuse: Bad value for 'fd'
[  703.850631][ T5729] usb 5-1: can't read configurations, error -22
[  703.850958][ T5729] usb usb5-port1: unable to enumerate USB device
[  703.889760][T17830] bond1: Unable to set up delay as MII monitoring is disabled
[  703.913912][T17830] bond1 (unregistering): Released all slaves
[  703.930228][T17828] No such timeout policy "syz1"
[  704.124266][ T5730] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I
[  704.257407][ T7726] pyra 0003:1E7D:2CF6.003D: couldn't init struct pyra_device
[  704.265153][ T7726] pyra 0003:1E7D:2CF6.003D: couldn't install mouse
[  704.297280][ T7726] pyra 0003:1E7D:2CF6.003D: probe with driver pyra failed with error -32
[  704.356121][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.426882][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.647499][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'.
[  704.679424][T17842] ipvlan2: entered allmulticast mode
[  704.688681][ T5730] usb 6-1: reset high-speed USB device number 73 using dummy_hcd
[  704.723148][ T5730] usb 6-1: device reset changed ep0 maxpacket size!
[  704.807446][ T5730] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[  704.822328][ T7723] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  704.831786][ T5730] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  704.844613][ T7723] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  704.862638][ T5730] usb 6-1: USB disconnect, device number 73
[  704.895604][ T7723] ------------[ cut here ]------------
[  704.903453][ T7723] !atomic_read(&kn->count)
[  704.903478][ T7723] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:9/7723
[  704.917543][ T7723] Modules linked in:
[  704.923479][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: kworker/0:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  704.934490][ T7723] Tainted: [L]=SOFTLOCKUP
[  704.938830][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  704.949085][ T7723] Workqueue: events request_firmware_work_func
[  704.955647][ T7723] RIP: 0010:kernfs_get+0x72/0x90
[  704.960663][ T7723] Code: e8 43 f8 55 ff 48 89 df be 04 00 00 00 e8 86 38 c1 ff f0 ff 03 eb 05 e8 2c f8 55 ff 5b 5d e9 95 f8 35 09 cc e8 1f f8 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 85
[  704.980494][ T7723] RSP: 0018:ffffc900051976b0 EFLAGS: 00010293
[  704.986697][ T7723] RAX: ffffffff826f4811 RBX: ffff888035449b40 RCX: ffff8880329e0000
[  704.994668][ T7723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  705.002765][ T7723] RBP: 0000000000000000 R08: ffff888035449b43 R09: 1ffff11006a89368
[  705.010905][ T7723] R10: dffffc0000000000 R11: ffffed1006a89369 R12: 1ffff1100550b8c5
[  705.018913][ T7723] R13: 1ffff1100550b8c6 R14: ffff88802a85c630 R15: ffff88802a85c628
[  705.026940][ T7723] FS:  0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000
[  705.035894][ T7723] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  705.042473][ T7723] CR2: 00007ffee9a94ef8 CR3: 0000000029d30000 CR4: 00000000003526f0
[  705.050629][ T7723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  705.058933][ T7723] DR3: fffffffffffffffc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  705.067123][ T7723] Call Trace:
[  705.070443][ T7723]  <TASK>
[  705.073393][ T7723]  kobject_add_internal+0x6b9/0xcd0
[  705.078780][ T7723]  kobject_add+0x163/0x240
[  705.083222][ T7723]  ? rcu_is_watching+0x15/0xb0
[  705.088093][ T7723]  ? __pfx_kobject_add+0x10/0x10
[  705.093052][ T7723]  ? __kasan_kmalloc+0x93/0xb0
[  705.097930][ T7723]  ? __kmalloc_cache_noprof+0x318/0x660
[  705.103677][ T7723]  ? kobject_init+0x7f/0x1e0
[  705.108328][ T7723]  get_device_parent+0x316/0x3a0
[  705.113289][ T7723]  device_add+0x2d4/0xb90
[  705.117717][ T7723]  firmware_fallback_sysfs+0x2dd/0xa40
[  705.123203][ T7723]  ? kfree+0x1c5/0x640
[  705.127356][ T7723]  ? __kmalloc_cache_noprof+0x157/0x660
[  705.132918][ T7723]  _request_firmware+0x1049/0x1780
[  705.138498][ T7723]  ? __pfx__request_firmware+0x10/0x10
[  705.143991][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.150000][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.155992][ T7723]  request_firmware_work_func+0x9d/0x1a0
[  705.161660][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.167559][ T7723]  process_scheduled_works+0xa8e/0x14e0
[  705.173152][ T7723]  ? __pfx_process_scheduled_works+0x10/0x10
[  705.179252][ T7723]  ? assign_work+0x3cf/0x5d0
[  705.183883][ T7723]  worker_thread+0xa47/0xfb0
[  705.188532][ T7723]  kthread+0x389/0x470
[  705.192616][ T7723]  ? __pfx_worker_thread+0x10/0x10
[  705.197766][ T7723]  ? __pfx_kthread+0x10/0x10
[  705.202361][ T7723]  ret_from_fork+0x514/0xb70
[  705.206986][ T7723]  ? __pfx_ret_from_fork+0x10/0x10
[  705.212097][ T7723]  ? __switch_to+0xc89/0x1420
[  705.216826][ T7723]  ? __pfx_kthread+0x10/0x10
[  705.221438][ T7723]  ret_from_fork_asm+0x1a/0x30
[  705.226303][ T7723]  </TASK>
[  705.229352][ T7723] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  705.236622][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: kworker/0:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  705.247559][ T7723] Tainted: [L]=SOFTLOCKUP
[  705.251875][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.261938][ T7723] Workqueue: events request_firmware_work_func
[  705.268105][ T7723] Call Trace:
[  705.271374][ T7723]  <TASK>
[  705.274296][ T7723]  vpanic+0x56c/0xa60
[  705.278305][ T7723]  ? __pfx__printk+0x10/0x10
[  705.282908][ T7723]  ? __pfx_vpanic+0x10/0x10
[  705.287403][ T7723]  ? is_bpf_text_address+0x292/0x2b0
[  705.292696][ T7723]  ? is_bpf_text_address+0x26/0x2b0
[  705.297896][ T7723]  panic+0xc5/0xd0
[  705.301644][ T7723]  ? __pfx_panic+0x10/0x10
[  705.306107][ T7723]  ? ret_from_fork_asm+0x1a/0x30
[  705.311060][ T7723]  __warn+0x315/0x4c0
[  705.315047][ T7723]  ? kernfs_get+0x72/0x90
[  705.319375][ T7723]  ? kernfs_get+0x72/0x90
[  705.323708][ T7723]  __report_bug+0x28e/0x530
[  705.328402][ T7723]  ? kernfs_root+0x1c/0x230
[  705.332921][ T7723]  ? kernfs_get+0x72/0x90
[  705.337270][ T7723]  ? __pfx___report_bug+0x10/0x10
[  705.342364][ T7723]  ? kernfs_add_one+0x480/0x5d0
[  705.347243][ T7723]  ? up_write+0x1a6/0x410
[  705.351580][ T7723]  ? kernfs_get+0x72/0x90
[  705.355904][ T7723]  report_bug+0x16a/0x220
[  705.360241][ T7723]  ? kernfs_get+0x72/0x90
[  705.364736][ T7723]  ? kernfs_get+0x74/0x90
[  705.369060][ T7723]  handle_bug+0x9c/0x200
[  705.373322][ T7723]  exc_invalid_op+0x1a/0x50
[  705.377817][ T7723]  asm_exc_invalid_op+0x1a/0x20
[  705.382670][ T7723] RIP: 0010:kernfs_get+0x72/0x90
[  705.387605][ T7723] Code: e8 43 f8 55 ff 48 89 df be 04 00 00 00 e8 86 38 c1 ff f0 ff 03 eb 05 e8 2c f8 55 ff 5b 5d e9 95 f8 35 09 cc e8 1f f8 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 85
[  705.407376][ T7723] RSP: 0018:ffffc900051976b0 EFLAGS: 00010293
[  705.413445][ T7723] RAX: ffffffff826f4811 RBX: ffff888035449b40 RCX: ffff8880329e0000
[  705.421421][ T7723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  705.429386][ T7723] RBP: 0000000000000000 R08: ffff888035449b43 R09: 1ffff11006a89368
[  705.437357][ T7723] R10: dffffc0000000000 R11: ffffed1006a89369 R12: 1ffff1100550b8c5
[  705.445342][ T7723] R13: 1ffff1100550b8c6 R14: ffff88802a85c630 R15: ffff88802a85c628
[  705.453319][ T7723]  ? kernfs_get+0x71/0x90
[  705.457675][ T7723]  kobject_add_internal+0x6b9/0xcd0
[  705.462885][ T7723]  kobject_add+0x163/0x240
[  705.467326][ T7723]  ? rcu_is_watching+0x15/0xb0
[  705.472101][ T7723]  ? __pfx_kobject_add+0x10/0x10
[  705.477040][ T7723]  ? __kasan_kmalloc+0x93/0xb0
[  705.481805][ T7723]  ? __kmalloc_cache_noprof+0x318/0x660
[  705.487352][ T7723]  ? kobject_init+0x7f/0x1e0
[  705.491955][ T7723]  get_device_parent+0x316/0x3a0
[  705.496894][ T7723]  device_add+0x2d4/0xb90
[  705.501241][ T7723]  firmware_fallback_sysfs+0x2dd/0xa40
[  705.506704][ T7723]  ? kfree+0x1c5/0x640
[  705.510783][ T7723]  ? __kmalloc_cache_noprof+0x157/0x660
[  705.516333][ T7723]  _request_firmware+0x1049/0x1780
[  705.521550][ T7723]  ? __pfx__request_firmware+0x10/0x10
[  705.527018][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.532727][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.538443][ T7723]  request_firmware_work_func+0x9d/0x1a0
[  705.544096][ T7723]  ? process_scheduled_works+0xa20/0x14e0
[  705.549836][ T7723]  process_scheduled_works+0xa8e/0x14e0
[  705.555391][ T7723]  ? __pfx_process_scheduled_works+0x10/0x10
[  705.561377][ T7723]  ? assign_work+0x3cf/0x5d0
[  705.566058][ T7723]  worker_thread+0xa47/0xfb0
[  705.570664][ T7723]  kthread+0x389/0x470
[  705.574732][ T7723]  ? __pfx_worker_thread+0x10/0x10
[  705.579828][ T7723]  ? __pfx_kthread+0x10/0x10
[  705.584412][ T7723]  ret_from_fork+0x514/0xb70
[  705.588995][ T7723]  ? __pfx_ret_from_fork+0x10/0x10
[  705.594111][ T7723]  ? __switch_to+0xc89/0x1420
[  705.598793][ T7723]  ? __pfx_kthread+0x10/0x10
[  705.603373][ T7723]  ret_from_fork_asm+0x1a/0x30
[  705.608217][ T7723]  </TASK>
[  705.611520][ T7723] Kernel Offset: disabled
[  705.615841][ T7723] Rebooting in 86400 seconds..