last executing test programs:

1m5.756412021s ago: executing program 0 (id=2377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280144102000000000000000000000000000000000108001400ff01000014000300", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0)

1m5.662982284s ago: executing program 0 (id=2378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000080211000001c5ddf59e00000807000000000000640001000006020202020202010882848b960c12182416f5f01ad734fb052bbe85de4da2e65c363f720a32aeba01b7241401b8b2561992d0cf279c56f8e969362838dcfb9bd084522ea96156c8bce5ae4f4277eb83d5f38e8cce8eaa3573a33ff0b311"], 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000780)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @from_mac=@device_b, @device_a, {0x4, 0x1}, "", @void, @value=@ver_80211n={0x0, 0xb, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x345)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r3, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000003c0), 0x0, 0x0, 0x1})
r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0xc4, 0x0, 0xc, "a900"}, 0x2000000, 0x2, {}, 0x20800})
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"])
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})

1m3.587604688s ago: executing program 0 (id=2387):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x5000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
close(0x3)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, 0x0, 0x0)
sendmmsg$inet(r2, 0x0, 0x0, 0x40)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20010)
write$tun(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r4, 0x0, 0x482, &(0x7f0000000040)="060000007f00000100500000000000006d6800"/44, 0x2c)
setsockopt(r4, 0x0, 0x487, &(0x7f0000000080)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44)
setsockopt(r4, 0x0, 0x487, &(0x7f0000000100)="060000007f00000100500000000001006d6800000000000000000000000000000000000000000000000000007f00000100510000000000000100"/68, 0x44)
setsockopt(r4, 0x0, 0x484, 0x0, 0x0)
futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)

1m2.177540993s ago: executing program 4 (id=2396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c00028014c302000000000000000000000000000000000108001400ff01000014000300", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0)

1m2.105554159s ago: executing program 4 (id=2398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0xc, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10)

1m1.981379064s ago: executing program 4 (id=2399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000711010101010202020200004000", 0x44)

1m1.954796337s ago: executing program 4 (id=2401):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
io_setup(0x41, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6617, r0, &(0x7f00000002c0)="03", 0x1, 0xe3b}, &(0x7f0000000240)={0x0, 0x0, 0x1f, 0x1, 0x9, r0, 0x0, 0x0, 0x5e9}])
socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x6, 0x8, 0xb48, 0x7, 0x8, 0x2, 0x21}, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x4e23, 0x0, @empty, 0xfffffffc}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0x50, 0x5]}}, 0x5c)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00')
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$inet6(0xa, 0x3, 0x3)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast2, 0x4f23, 0xfffc, 0x4e23, 0x6, 0x2, 0x2a11bad3d5f03f84, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x20000000004, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0xfffffffb}}, 0xe8)
setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})

1m1.809157727s ago: executing program 2 (id=2402):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x95)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)

1m1.771570911s ago: executing program 3 (id=2403):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000800000036490000c200000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000008000000000000020000000000"], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0x800000e, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x6, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0x3, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x402, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x8000, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x818, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x2a, 0x5, 0x80000001, 0xd77, 0x5, 0x29, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x8001, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x0, 0x0, 0x7, 0xffff3f16, 0xa, 0x0, 0x9, 0x2, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0xa92, 0x3, 0x81, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x80000000, 0x1fff80, 0x3, 0xc84, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x4, 0xfffffff3, 0xd077, 0x6, 0xb, 0x21, 0x200, 0xa, 0x106, 0x2, 0x1ff, 0xfe, 0x2, 0x7, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'})
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
unshare(0x22020600)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4200003, @mcast1, 0x20000000}}}, 0x32)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x1, <r3=>0x0}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r1, 0x4ac58c656958a54f, 0x0, @val=@target_btf_id=r3}, 0x14)

1m1.661141778s ago: executing program 3 (id=2404):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x4c53, &(0x7f0000000040)={0x0, 0x30b5, 0x8000, 0x2, 0x19d}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m1.4705659s ago: executing program 3 (id=2405):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000980)="cd6fa1d1839978de85e2809882a3713be979d5a5a19255ba8ba7d5f1c72c1aa15f841a770a585c63dde13ba26d9d25ac268ea5ffde5fa73f6d5c55a15e6e2c1067e392a93b95bae460b21f50c300c95b181533923eee41cf97e991196ff47dad4dbbe69021b39181a0302186b10b68534993820f0cc22dde380727e5df927221db07061547219e17e7")
ptrace$cont(0x20, r0, 0x200, 0x7)
ptrace(0x21, r0)

1m1.469645645s ago: executing program 1 (id=2406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
sync_file_range(r1, 0x10000, 0x6, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002300)={0x24, 0x2b, 0x107, 0x70bd28, 0x25dfdbfd, {0xc, 0x7c}, [@generic='\x00\x00j\x00\x00\x00', @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00, 0x7000000}, 0xc)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000240)={&(0x7f0000000100)=0x3bb632f2, 0xce7, &(0x7f0000000140)=[{}], &(0x7f0000000200)})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d06, &(0x7f00000000c0)=0x39)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r6, 0xa}}, 0x10)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
close_range(r1, r7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x0, 0x1}, 0x80, &(0x7f0000000ac0)=[{0x0}, {&(0x7f00000000c0)="c8714086", 0x9}], 0x2}, 0x4048810)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000280)={0x2, 0x0, [{0x7, 0xfffffff8, 0x7, 0xfffffffa, 0x1000001}, {0x1, 0x6, 0x6, 0xffffffff, 0x3}]})
socket$alg(0x26, 0x5, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r11, 0xffffffffffffffff, 0x15, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x2}}, 0x40)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYBLOB="332300000000000000020000000003000000000000000000", @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r11, @ANYBLOB="00000000ffffffffffffffff00"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00HB\x00'/28])

1m1.265803883s ago: executing program 1 (id=2407):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

1m0.957872975s ago: executing program 1 (id=2408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000020000000000000060006008848000010000700010101010202020200004000", 0x44)

1m0.904864215s ago: executing program 2 (id=2409):
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x40890)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0x5, 0x7, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0x0, 0xffffffff], 0x404, 0x4000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x5}, {0xffffffffffffffff, 0x11, 0x3}, 0x2, 0x5be}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x28e, 0x0, 0x404}]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000050000000000000000000000000000000900000100060000000900020073482a3f19f5c950"], 0x28}}, 0x0)
write$binfmt_aout(r5, 0x0, 0x20)
mmap(&(0x7f0000955000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r0, 0x8f8db000)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000240)={0x0, 0x30, &(0x7f0000000140)={&(0x7f0000000400)={0x24, 0x140f, 0x1, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x3}]}, 0x24}}, 0x0)
r9 = syz_io_uring_setup(0x1151, &(0x7f0000000080)={0x0, 0x8a13, 0x335ab3541b157825, 0x3, 0x321}, &(0x7f0000000500)=<r10=>0x0, &(0x7f0000000580)=<r11=>0x0, &(0x7f0000000180)=<r12=>0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0, 0x8, 0x2, 0x1})
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000240)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0xaf8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r9, 0x21, &(0x7f0000000240)={0x0, 0x1e6c, 0x8, 0x1, 0x69}, 0x1)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
accept$alg(r13, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000040), 0x0, 0x80000060, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, 0x0, 0x0)

1m0.841436898s ago: executing program 4 (id=2410):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000c4c000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x9, 0x1a4}) (async)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x9, 0x1a4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x0, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x0, 0x3}, 0x10)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0x7ff)
io_uring_enter(r1, 0x2215, 0xcf74, 0x16, 0x0, 0x0) (async)
io_uring_enter(r1, 0x2215, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
close(r0)

1m0.840977311s ago: executing program 1 (id=2411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000c3ffffff2c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044)

1m0.747797399s ago: executing program 2 (id=2412):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01072cbd7000fedbdf2506000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x48)
splice(r2, 0x0, r4, 0x0, 0x3000, 0x100000000000000d)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4c, 0x3, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYRES8=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

1m0.695125583s ago: executing program 1 (id=2413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0c007d80"], 0x28}}, 0x0)

1m0.617397744s ago: executing program 2 (id=2414):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = epoll_create(0x1)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r8, r8, &(0x7f0000000040)={0x4000001a}})
io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x34, r11, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r11, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000080)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r12, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r2, &(0x7f00000013c0)='J', 0x1, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r12, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

1m0.598675223s ago: executing program 1 (id=2415):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0x8, 0x0)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68})
tkill(r0, 0x7)
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r3 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x0, 0x80010, 0xffffffffffffffff, 0x10000000)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1)
mbind(&(0x7f00003bc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002a80), 0x20100, 0x0)
syz_io_uring_submit(0x0, r2, r3, &(0x7f0000002ac0)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001a80)="005866185bdccfc939dc6dea72b68410ce7e524ef216c667a096cc98b3c8d844f3e3773dfd7318479e576abca37db7a255f11fde7c64ea0f6a2ca219f5eeebb30e5388e0a506828e758112b6c9f7a6d3ac8c29682c2d454425a58b5b4725613773c6fcd2f7900af7c01859a52012a19abd876d70f090f7dc548c8ba6cec344438324838ba891302628b54fbc93e29312dd0565346a28f12a5862a95294ca0c41946359de72ed412b0b08513a043f35a2a56efacdd0380a59dd39075d04389111411e19a9e936493334e85bf01829677b89562629abee28e8bf902a2dfc4a3522a2452883cb7f144cd5754b53297c19ddeee3827ecf26f682f12516512e49eba6f2db11db1f6a70cd73ce5233777496affdfb8e0cc402bf59a50684b738dc919e4209aa298c57b5ea94f2f420ea61b2ee1c96254a7e8d2eeca0b4a23c43bebd881eac72bf23ddf8359692619ce3d1cd2bfc3eac1644f6ac9bf6218b3338d21522a0acbe67c0de4d29bdf82d9280e5297a616698827e9e65a10e27ee68d181aee89bcb6b5427f66e40162e232b2a55ae94f79f5873722c0d27c998eaa5a13991c690e46ba21f829e5a8a10d0f174ae6928615128d191362e24098e1bb25c949cae1288e78b9b86a0c7217eb66adf0cba0e2166fa31a82fe8111042a31029daaa260be59dfdca59a93a5e0b8731b8f6c2c04bb8b864f49f2d8d7cbd0af66a95a5803cdc0fbbeeb21bf062b515d389b1ebc9331e6017f4392a5bfb168599064fd521410553ffb4577fa8c8e02dd3a2ec6528f7ba9dfe7544e30b2a65355fa180bd9545c2cb93cb4e9118989aa8d8015c35b52f77861714b2d6358d9a9af9c5e354ce84635707f214c0e678640cfde9bde3e3a0f2fbb17e8746edc08a91e05b592a1c5dd9a395f696e504f879e491e5882304d9baa9e7b91205d96db94719191509bde87f80fe79f4bb82a8db4eb39c470d3d53b94c98cf64c7c400156c1716d6e6dcef5e2420619b2eef3c62333cc4fe2e593680f9d81b9363f554ac24852e23503e32a4f2a2c3d85510c75ffe36f2bcec882c701a0725bb83019d085e1cfbc5375724a4972b5136ca3995cdf80f359f384aef36a9e0f4f80bf92a6a131a0b1bc22ce74dc7494e3e6d5f4457069ec36ecb5f77682efeeddc3f3e39f30e291ed70e076d1f3d687e8a91b98176b95fdbbb5eac79c7409bb9c1d1823eafebd622ed0327904152a68284804904e0cd126d5c9251ca136f1b0ab26e65ecfc1b44d97b5b25ed4b1c87083372dae0b4ab7b420d4846b383232223258386b99bb52750a21141b04c7accc4b1479c6bce552bebe74005fc9496c5f52690b2a4340f8786b269ade912210d761d8d85bd2da7edfc3f51484387e1a3bec73d3d172bca05bd73e6ca24a1d521ce8ad47a2377d84edbddb847dd8b1864cfd0001ea9b104a07083837c6d9813398ac4160e126ef9d2cb65ed99a94c7628617f5ad3c7b17f55a4d24d4bd3d7c2456794c02c77e1d5f326c529e393e27e7078364f7da1e7672f796e94d6441565f85797179e4ac125c61fe19859c026833207ab180d768b6d23f5813b9a8988822f4dd4b23338538274880db63645f05947dfade07c5f8a79d462437dd4561d122373895a364619d0bd313fa352df8a4992ccec3e9d4016144cfbffa38d087f16ef70b43d1c206174b684865840b936648f7f9ae7d53606c71b0e3fb6c568539c88d9b50d0816b031f9446a960aa0e4c39f95bc0a4e0f4e0e0346265caf21e71dd83aa3cb35b6fbbcb08ee077c085cd888e33d36341336b91f163e49aa1c75e8a92598b53a8faf765a1e77dc1d636ba30e39d528917237e850fa9b142dcf8ce6cd8c4906f9736fbed4353d22b84cbccafded9cb8a14d99c66041777035c8885854149ce4717dda01e5aec65f6c1475e1d8bb4db98b5a6a8dd218b5738bcfe5851d468d2e5aeda6f9ba3c22dcc2bd13269762758cedc9e4c6e8d8f4a3a9e830d3aa7854c0c25d366283d432da3f53c851bff00b2c8932a5443ee953f4711721df3c81c5da6bf14f975f0075aac1c55491acfb042377ccc0b3896a387ade8820bdde61400e4ebb504183577a19080d8d86fa63b471bf90531f50b74a08f8355bd6cccd20797ea03bac950108e6d0f32450940fdbd2a85d16b230d539f22280c009a4d407b6fcf0f88967cd9a4ea96365d247fb9e93df7dc0a7eec53512baae857c7a7002bd74645cb6b824ffaf98564da712a9f01cd86c20100aab73a9d4f25a0ee7d68ad45ad8cb1eb41e1d0bfe1e7a1ea541149ecf0c9e1408ede6fe264595b98a850cbe9ab239f7ba88679f1e1097580b354c2a6ac5f5ac43f7510789f029378d10be78545bd733f9553b82ecd80027db3ded5caad0c3b95a2abd804e80aa27d739618501254501b63d02e990738f54ffb73346a1c4b811c6a7143f435a5d87867a4627670d04e80c0a359bdf3d9db52bc93f57c43762fd87b78f576e79eeafbe22f957e6112d5ef264a18f36f0d9f4f38b911a5d7001706c550b41c758e49347af53bd94ae64521a793abe0db5f708f19e82750a6d5d7a3a5bb8f6953e9d2e6fd34c6f253a70e03c356e95ccc8eabf75c640b79e79453ceb2a9aba91b6c82b2abce6b3783817eb18e8b2ffa231dae2f2151ccef79181da24e267b718640713344df64f2e7e82e83280c9f45191e893f35fad9e20d2aa9af255ac856e9b0754d4543c459dca84c9e1812a194446cb271529d95fc5ee12478570c5715b7520643c78125eca74e2b958207a2994c47282e324e2fcdf7bb3271a6ba08ea985f8acab8cd59e2458ce625df983e6ec6680f4ea0bf723e14bd3edc0f0bddf841011382d809a01a50a99f6c1ca91cebb36dbae9fc95f829a9b656c48566912a658d01676b965fd0b9d176080e1ffcd072bea919e5bc2db7a5561edbc42e409462e73c57a419cc1305aaee0c1b474c10412b5978214550bff7849d197863e66cb189fa77c964fcf57ca15ea4df4116bbdc6176c2b069f9f008efa48b042eae570623b7fb6f9cc19cff01af997cf31012a7e464f1ec2d1d5ccff1671bd67a37492e71e5313f61d21f27d8952cfe1f534ebac421a0ed47114a1bdda8f75552aff1b9e55a2fda00e242880fcc655927cb39fc593d5a55106e16b5898eb974f1ea06f2a8dfd07efd38dbf19637daf71faceaf40de03e1f7a7306429f50269bef11de7059e0e05a8845b8fc88fdd330c83aab78437fc660add44e278b3f4117f4ad04f555eb2d8014e60b7ef9d1b994b3ff99635adcfcdba0007c1c3beee07a511431754a3710bd47329e87f4d6de7f1eeb346d3e3af9eb999610893583698510bd34af2c273ba8b7c4b1d2cc74c3639056557a51d83330da09d4f694a823f5935e8c492596f0b8ec4243d74d104c1faf0e8ab777b3d1e497ec6771d6a555550c5c63fc79ca6225b2207004ddf42b71c0d604d8d96842954bdbbab47ba748d5aac96fbb3c77cc6f587e94cc9a8f3783844cd20e68147c81a7ef5b5ba5b21b8cd599527a6e8c813aba0255ffe40db7c6133703247ce714ca57e045059a465c34c075969a6a5a2682e3d450ae8f3e69383c84554b23cb327def84a39a200054df87ddf2fe7f86464886997c9c5221c148b98dfa4b1d831d7cb0e1ddc7b06a78749d9e97f8ed2595ca348346080360cd78b8c0da998599d7d03086475bc5d1e6ea5d162c3581c012028bb3e6ba28a29f13a1fb70a1691623d1a0e06d682891f929f4bbbce27cb944c990abc2a56c9cb743f164d04bf33f7bace6a4e89af529d57a5f447171f3ce57ebb0aaf21260e3c19ca11c9e8e55f2eca8757217f5a1f66c8e572d888dd35131a69141585b121f868aec65a6d031ff2836684987847126936531dc53f6c66384184343ee5d0b3f2f0e9ce84036df5f78af5816d14767ffe331fd5d65740aad27769d76081d9bc6457c880e305abc0b486d932df02d568793bbe82d3e3aa653a53360320cb367865a7babc1da4b3bd9dc56b69d4f062b0c95b332c080a22aee011bb48bd274fe8b6297208892a5d92b44103e3bc5e65929fcbd899631347a65f35f15e882cf599801ae24088f70b54821c0d7d9da72fa69b993c0a5f1c68c979637b8ac5e673ae226ad298d1e17bf7994e4ca0cc7fe934d17085723da1a8203fdc2df842bdd71d4a9f46694b1afacecbaf081c1332895ca69d25ad5cbcab6919ba36c2744e469645afde5ada7d96607820cb06537ec0436151ae878afcc6621b81478ac20d594bd454373bb93caa997481b05aab5c50360943b6b00e4ba0141852bcfc81aaf3b9271a40702363fdd4c437251572b84c5e39cef46f7ca6dd1897aa1eb28f98bbc8d0a1808ba3ca64f22d44c22bc8eb26682123014fe3b48d7bc1496590c9c3413e2d2a9eb36e4fc893fb859fcf9906dbb5bc0230db623fc00ffae28e48ee95424c2613841dfe154ffade3e3e3b983a3d0ad78898c16060ef7fb90a85953762d93bcb17321bbf10f49a913471996730fd2b256c44bc1860b3c5443c9671014cb5f60c5cfc832bd5fb35ad42d4826e0f1ae57be060b93ca3370bfef46a4687b5bca34dd0aceca7735e1d9623c84da906d76638e4eb8a18f2492aad012b7730aa489bb79077eb8c4a20be1ce9eb8614716fe6a37a587e42d87990083f9c5f8bd15a8c5fd36580a8f39acedeafb9ee6bebba5a820c8d1908f0a910ff3d4b3a9b33ea44c6d8855ecc7fb6cfabfe2ea72ac6bb250f33cf55bb1020ad33b178f101a99f19591af1855351aa7506b6cad2a530434f714d00751abeea9b1b556d004172b3300d849323d11df08486c4155d5bc40dbb77d4a66801987a7a4e04315f06cea2a2b29244a666141e8d3524746a95aa139296fe433a15d1bfd4bc5c8d2ec0a719a3449764cde666037816482042cf76df45b1e4f66f96638c4a7bae916cbf63a8ab006e30f9b037f7b917fc7207eda75c484c89eb0c09003cc77111ae8e241ca4f9c10b7dcd7b84f9d278e9b1e7f719ef1a0c4d12a58d346a608a3ad23e43fb8eba85f9d3a3994da7454f105baf82152e01197570c23d545ca48915723e2ca2820ffa606757869f511141ba33aeb96b874b966560104b92e1c240e388f0b484128f79466f789265a9a52ee41c244d51dfa85d0fdaffd10365c2d7c3a35c7d98e96a59b1bd23d91893aec2307aefb89dc0fd0f01e40fcaae36882e958694f6179cee6d08605a32668aa7bf10300a4a2d36d3d5c3e2286af39fefd6aab53e3dd6d840cd25b1b189ee75bb6a4c1c16359c6cd5b58572d70db6660e5a94910ee811b2f56945f2e474d65e6a88a9da3996fc7e7033993fa16a9fa7a0c3ad91b96ac6e3176f8ea59a2d0daade0bf2bb05bf2137ca5615c7863e3f5a4e0f1f5ac334ad0ffb7708d03e8b787a17a36ecd303d6ed10aaae6a30046c0499649a956d3653eb87bd1c65228359b61f2d841531b34f408bae4e5fa8059cfc9fe226d216458f1f74eec0e50fc5a6c50feac3c799d62246ab609d1b4b2510c05b1e4bb33a7f5a7ee3f7bb28073e37bc2447281a20f3837f37b76e6cab614822982dc1d7b062392d297d58450b08f717dd2765d4cb15ba13cac122c5e1b6a6303ce59381131a3d9368ffec759457a15789696917d6a6e7116498dcd9acc7064899100d75c6d98f8dc6a5a48a953e4fe3afcc27ff1fcd2e5dd3ada0fbe048cff50ac6eba08e108399f3112784fa5b5892cdcc5380827537e697a15b2c8cb7bdce2672a89117bbcc8d48c61cad3adfc31a760962f622a3a13f2c1d07d6876a217c", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r4, 0x7}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT6_PIM(r4, 0x29, 0xcf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107e0000000000170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200), 0x4)
setsockopt$inet6_int(r4, 0x29, 0xd0, &(0x7f0000000380), 0x4)
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000002b40)={&(0x7f0000002bc0)=[{&(0x7f0000000440)="0afdd755dfff85144c2305ac5bd23a8f7a4ec74cdc840205b59e4bfceb1ba47fddbde3e515575936b3d1fbc3461aaee68fd45a49c536143cec5ff4e01356e30b5e28194e081141832a2656c6e938371938fc9c72a48efd8406a39fdfb0357db700b4ae173e504135bd17bc704fb69e5db6c3e5864022b8659925904e8046fd43a333a59e06b17971fcc9ec4430e3f0d64f504a0ba995568f3878a66360e2bbf269fd76442a9f1884cb346af5718199e8a11d4a1e164623001f5373e4a3bed195c07d361ed4cf0724b9f907e526912564d7aa87d4af2efef4d0f24650c0b6dd8e683ab56ff68d3306ed5cf9c7ea87", 0xee}, {&(0x7f0000000800)="f9df8e1956f91a142329799c59e23931c5c3d3f56aaec7039f6bea82c79fb79d752edcc2e398e9aee2913c004659f8ace0704ba593a32f89cbd0fe4c2ca7", 0x3e}, {&(0x7f0000000840)="65e98211f73c5d85e84153668e9ca674e320f08a46feffb3f9cb025a0243a87a733f5fc96c5fcede60d520681b2fd46104dba961b345ac20c492632f", 0x3c}, {&(0x7f0000000880)="6d60105f60e86ff694c81ea97cdf1cb6fbcfed7e57ffdfcb6ef1a6099310be6569155c4437", 0x25}, {&(0x7f00000008c0)="7ddd0682", 0x4}], 0x5, 0xa, 0x0, 0x961, 0x9, 0x2, 0x7, 0x7})
sendto$inet6(r5, &(0x7f0000000980)="b2", 0x1, 0x24000045, &(0x7f0000000400)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000040))
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)={0x40, 0x35, 0x28, {0x28, 0x22, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m0.559644829s ago: executing program 3 (id=2416):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800500150002000000080012"], 0x64}}, 0x0) (async)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) (async)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000100)=0xd) (async)
write$dsp(r2, 0x0, 0xfffffe59) (async)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) (async)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffc8f, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0xffffff7c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8bd4cec)

1m0.289497282s ago: executing program 0 (id=2417):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c01000013000101fdffffff00000000e0000001000000000000000000000000fe8000000000000000000000000000bb0100000b040000090a0000ffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000030000000000000d000000000000000008000000000000000200000080000000010000000000000000000000004000000001000000000000feffffff00000000010000000000000084000500ff010000000000000000000000000001000004d5320000000afaffff630101010000000000000000000000000000000004"], 0x13c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0)

1m0.289220734s ago: executing program 2 (id=2418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000760010101010202020200004000", 0x44)

1m0.238761963s ago: executing program 3 (id=2419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000012c0)={{r2}, "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"})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000))
io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000002030101000000000033000002000000080001000100000209000200000000000200000008000440000000020800054000000002"], 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000040000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

1m0.116707569s ago: executing program 2 (id=2420):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x95)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)

1m0.045395396s ago: executing program 0 (id=2421):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000600000000000aaff020000000000000000000000000001042022eb"], 0xfdef)

59.663855757s ago: executing program 0 (id=2422):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110021871ed400d05022147b701020400ff"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xc, 0xfff10000}}]}}]}, 0x3c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f00000000c0))
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

59.482143095s ago: executing program 4 (id=2423):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x2000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000400000010000001fc010000000000000000000000000001000107144e230005000000002b00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000008000000000000000008001f0002000000a8"], 0x140}}, 0x844)
io_setup(0x4205, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x1, 0x6, r0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5}])
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
userfaultfd(0x80001)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={r5, 0xffff8001}, &(0x7f0000000800)=0x8)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x5ff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r7, 0x7, 0xfff, 0x40a0000000000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]})

58.653806444s ago: executing program 3 (id=2424):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007dc0)=@newtfilter={0x884, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x1, 0x1, 0x5, 0xfffa, 0x1, 0x7}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x1, 0x0, 0xe3a1, 0x9, 0x2, 0x1693, 0x9, 0xffffffff, 0xffffffff, 0x10000, 0x80, 0xfffffe01, 0x3, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x80000000, 0x1, 0x7, 0x3, 0xb3, 0xfffffbfb, 0xc, 0xfc4, 0x5, 0x2, 0x5, 0x9, 0x34e, 0x3, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7fffffff, 0x4, 0x6, 0x97f, 0xde, 0xd, 0x7, 0x2, 0x481d, 0x7fffffff, 0x0, 0x5, 0x4a09, 0xa63, 0x7fe, 0x3, 0x9, 0xcb, 0x3, 0x7, 0xffff45cc, 0x7, 0x8, 0x1, 0x2, 0xcbb, 0x8, 0x8662, 0x3, 0x9, 0x5, 0xffff, 0x27, 0xfffffffa, 0x8000, 0x1, 0x2, 0xfff, 0x8, 0x5, 0x1400000, 0x2, 0x40, 0x48, 0xa64, 0x40, 0x8, 0x2, 0xf, 0x0, 0x2, 0x7, 0x9, 0x400, 0x10000, 0x0, 0x5, 0x9, 0x7, 0x2, 0x6, 0x0, 0x3, 0x4, 0x2, 0x1, 0x2, 0x17141ccd, 0x3, 0x80000001, 0xfffffffb, 0xffffffe7, 0xff, 0x0, 0x20000000, 0x2, 0x6, 0x5, 0x9, 0x4b, 0x6, 0x8, 0x8, 0x200, 0x218d, 0x4, 0x4, 0x3ff, 0x1, 0xff, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x6, 0x2, 0xffff2238, 0x9, 0xeaa8, 0x4, 0x8, 0x6, 0x9, 0xfe0c, 0xffffffff, 0xffffff81, 0x7, 0x8, 0x8001, 0x1000, 0xfff, 0x9, 0x1, 0x5, 0xfffffff7, 0x37, 0x78, 0x4, 0x9, 0x5, 0x5, 0x2, 0xfffffffb, 0x800, 0x62e, 0x5, 0xbb, 0x84, 0x3, 0x6, 0xc17e, 0x3, 0x6, 0xffffffff, 0xb, 0x3, 0x8, 0x1, 0x0, 0xef, 0xfffffffe, 0x8, 0x6, 0x9ad1, 0x5, 0x3, 0x4, 0x5, 0xb, 0xe, 0xfffffc01, 0x5, 0x39, 0x2, 0xb, 0x7fff, 0x74, 0x200, 0x200003, 0x0, 0xe1, 0x974, 0x2, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x2e, 0xfffffffa, 0x5fb, 0x7fffffff, 0x271a, 0x5, 0x2, 0x7, 0x56, 0x2, 0x5, 0xdd3, 0x4, 0x9, 0x9, 0x1, 0x4, 0xf, 0x400, 0x2, 0x800, 0x7, 0x0, 0xfffffffe, 0x1, 0x3, 0x3, 0x8, 0x3718, 0x6, 0xf, 0x8, 0x6, 0x1ff, 0x20000, 0x8, 0x7, 0x3, 0xfffffff8, 0x4, 0x0, 0x6, 0x5d, 0x49, 0x2, 0x8, 0x2, 0x3ff, 0x1]}, @TCA_POLICE_RATE={0xfffffffffffffdc6, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f09, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x8, 0xec, 0x800, 0x7f, 0x7, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x80000001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x1, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffff7, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0x2, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x3, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x200, 0x5, 0x4, 0x9, 0x7, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x800, 0x6, 0x9, 0x7, 0x3, 0x7, 0x400, 0x9, 0x3, 0x8, 0x9, 0x9, 0x9, 0x3, 0x0, 0x3ee, 0x4, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x4, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x6, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x57}}]}, 0x884}, 0x1, 0x0, 0xe4ffffffffffffff, 0x24000000}, 0x0)

0s ago: executing program 32 (id=2422):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110021871ed400d05022147b701020400ff"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xc, 0xfff10000}}]}}]}, 0x3c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f00000000c0))
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

kernel console output (not intermixed with test programs):

 error: local softirq work is pending, handler #08!!!
[  400.762317][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  400.804006][ T5675] usb 4-1: config 0 descriptor??
[  400.812667][T11847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  400.814093][ T5675] hub 4-1:0.149: bad descriptor, ignoring hub
[  400.814115][ T5675] hub 4-1:0.149: probe with driver hub failed with error -5
[  400.841438][ T5675] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.149/input/input41
[  400.897346][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'.
[  400.916130][  T988] usb 5-1: Using ep0 maxpacket: 16
[  400.924262][  T988] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  400.939840][  T988] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  401.183227][  T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.183252][  T988] usb 5-1: Product: syz
[  401.183335][  T988] usb 5-1: Manufacturer: syz
[  401.183350][  T988] usb 5-1: SerialNumber: syz
[  401.276603][  T988] r8152-cfgselector 5-1: Unknown version 0x0000
[  401.276627][  T988] r8152-cfgselector 5-1: config 0 descriptor??
[  401.318671][ T5675] usb 4-1: USB disconnect, device number 74
[  402.619064][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'.
[  402.767785][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1987'.
[  402.767810][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1987'.
[  403.629385][ T5675] r8152-cfgselector 5-1: USB disconnect, device number 106
[  403.714391][  T988] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  403.854694][  T988] usb 1-1: device descriptor read/64, error -71
[  404.094586][  T988] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  404.226887][  T988] usb 1-1: device descriptor read/64, error -71
[  404.311714][T11904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1993'.
[  404.325684][ T5675] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  404.343168][  T988] usb usb1-port1: attempt power cycle
[  404.477420][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  404.478138][ T5675] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  404.479265][ T5675] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.479292][ T5675] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.479313][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0
[  404.479344][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.540211][ T5675] usb 3-1: config 0 descriptor??
[  404.674420][  T988] usb 1-1: new full-speed USB device number 88 using dummy_hcd
[  404.696888][  T988] usb 1-1: device descriptor read/8, error -71
[  404.934356][  T988] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  404.963115][  T988] usb 1-1: device descriptor read/8, error -71
[  405.035126][ T5959] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.035170][ T5959] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.035202][ T5959] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.035258][ T5959] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.098745][  T988] usb usb1-port1: unable to enumerate USB device
[  405.148434][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  405.165167][ T5675] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  405.165201][ T5675] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  405.165229][ T5675] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  405.165255][ T5675] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  405.165280][ T5675] mcp2221 0003:04D8:00DD.002E: unknown main item tag 0x0
[  405.168499][ T5675] mcp2221 0003:04D8:00DD.002E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  405.412558][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.431119][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.473114][  T988] usb 3-1: USB disconnect, device number 88
[  405.704361][ T5675] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  405.855952][ T5675] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  405.855993][ T5675] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  405.857305][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.857350][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.857373][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.858649][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.858694][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.858717][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.859988][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.860032][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.860056][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.861321][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.861364][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.861387][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.862765][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.862808][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.862832][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.864093][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.864136][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.864160][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  405.938092][ T5743] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  406.167085][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.167135][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.167159][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  406.170706][ T5675] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.170751][ T5675] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.170775][ T5675] usb 5-1: config 0 interface 0 has no altsetting 0
[  406.236847][ T5675] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  406.236880][ T5675] usb 5-1: Product: syz
[  406.236895][ T5675] usb 5-1: Manufacturer: syz
[  406.236908][ T5675] usb 5-1: SerialNumber: syz
[  406.261454][ T5743] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  406.284416][ T5675] usb 5-1: config 0 descriptor??
[  406.327386][ T5675] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  406.406635][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.424919][ T5743] usb 4-1: config 0 descriptor??
[  406.620161][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  406.621950][ T5743] usb 5-1: USB disconnect, device number 107
[  406.642691][ T5743] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  407.012668][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  407.012712][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  408.671994][T11956] ip_tables: iptables: counters copy to user failed while replacing table
[  408.710296][T11956] veth0_vlan: left promiscuous mode
[  408.731778][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2013'.
[  408.923995][T11963] syzkaller0: entered promiscuous mode
[  408.924025][T11963] syzkaller0: entered allmulticast mode
[  409.029703][T11965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.050459][T11962] tipc: Resetting bearer <eth:syzkaller0>
[  409.117456][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2016'.
[  409.117482][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2016'.
[  409.117554][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2016'.
[  409.202731][T11962] tipc: Disabling bearer <eth:syzkaller0>
[  409.605605][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'.
[  409.728992][  T988] usb 4-1: USB disconnect, device number 75
[  409.898154][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2021'.
[  410.022342][T11986] could not allocate digest TFM handle -ż�ĆqřęĘâ4żOĂ(0&qú´f·=Ż*΀Żňřjť„¸$€ŚĆŞ�­ü€«;ş}'üj°O
[  410.362506][T11994] netlink: 'syz.4.2024': attribute type 10 has an invalid length.
[  410.554395][ T5743] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  410.818368][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short
[  410.818416][ T5743] usb 3-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  410.819270][ T5743] usb 3-1: unable to read config index 0 descriptor/start: -71
[  410.819310][ T5743] usb 3-1: can't read configurations, error -71
[  411.736075][T12017] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2033'.
[  412.001838][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2034'.
[  413.340692][T12036] ip_tables: iptables: counters copy to user failed while replacing table
[  413.433585][T12039] ip_tables: iptables: counters copy to user failed while replacing table
[  414.003041][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2042'.
[  415.054418][ T5675] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  415.246059][ T5675] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  415.252175][ T5675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  415.252201][ T5675] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  415.252238][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.436756][T12056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.510023][ T5675] cxacru_cm: 19 callbacks suppressed
[  415.510046][ T5675] cxacru 5-1:1.0: send of cm 0x90 failed (-71)
[  415.510073][ T5675] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  415.510251][ T5675] cxacru 5-1:1.0: probe with driver cxacru failed with error -22
[  415.559266][ T5675] usb 5-1: USB disconnect, device number 108
[  415.560162][T12059] openvswitch: netlink: Message has 16 unknown bytes.
[  415.759785][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'.
[  415.759828][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'.
[  417.812387][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'.
[  417.812413][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'.
[  419.420109][T12106] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  419.486935][ T5704] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  419.487000][ T5704] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  419.521187][ T5704] usb 2-1: USB disconnect, device number 75
[  419.522059][T12106] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  420.584555][T12116] netlink: 964 bytes leftover after parsing attributes in process `syz.3.2063'.
[  420.584579][T12116] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  421.353278][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  421.353310][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  421.424685][ T5704] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  421.576250][ T5704] usb 5-1: Using ep0 maxpacket: 16
[  421.580137][ T5704] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  421.582150][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  421.582171][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  421.622064][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.622089][ T5704] usb 5-1: Product: syz
[  421.622102][ T5704] usb 5-1: Manufacturer: syz
[  421.622116][ T5704] usb 5-1: SerialNumber: syz
[  421.720797][ T5704] usb 5-1: 0:2 : does not exist
[  421.990741][ T5704] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  422.292287][ T5704] usb 5-1: USB disconnect, device number 109
[  422.788673][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  423.524551][ T5704] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  423.717429][ T5704] usb 4-1: Using ep0 maxpacket: 16
[  423.718242][ T5704] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.718769][ T5704] usb 4-1: config 0 has no interfaces?
[  423.801363][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.801391][ T5704] usb 4-1: Product: syz
[  423.801405][ T5704] usb 4-1: Manufacturer: syz
[  423.801418][ T5704] usb 4-1: SerialNumber: syz
[  423.860266][ T5704] usb 4-1: config 0 descriptor??
[  424.208329][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2071'.
[  424.223550][ T5704] usb 4-1: USB disconnect, device number 76
[  428.142880][T12171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  429.108685][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'.
[  429.540932][T12190] input: syz0 as /devices/virtual/input/input42
[  429.541023][T12190] input: failed to attach handler leds to device input42, error: -6
[  429.710791][T12197] FAULT_INJECTION: forcing a failure.
[  429.710791][T12197] name failslab, interval 1, probability 0, space 0, times 0
[  429.710828][T12197] CPU: 1 UID: 0 PID: 12197 Comm: syz.4.2087 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  429.710854][T12197] Tainted: [L]=SOFTLOCKUP
[  429.710861][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  429.710873][T12197] Call Trace:
[  429.710881][T12197]  <TASK>
[  429.710890][T12197]  dump_stack_lvl+0xe8/0x150
[  429.710921][T12197]  should_fail_ex+0x410/0x560
[  429.710948][T12197]  ? __alloc_skb+0x1db/0x7a0
[  429.710973][T12197]  should_failslab+0xa8/0x100
[  429.711000][T12197]  ? __alloc_skb+0x1db/0x7a0
[  429.711022][T12197]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  429.711043][T12197]  ? __alloc_skb+0x18d/0x7a0
[  429.711067][T12197]  ? __alloc_skb+0x1db/0x7a0
[  429.711098][T12197]  __alloc_skb+0x1db/0x7a0
[  429.711126][T12197]  netlink_sendmsg+0x5d4/0xb40
[  429.711157][T12197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  429.711185][T12197]  ? apparmor_socket_sendmsg+0x98/0x360
[  429.711208][T12197]  ? lock_acquire+0x115/0x350
[  429.711230][T12197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  429.711250][T12197]  sock_sendmsg_nosec+0x13a/0x180
[  429.711275][T12197]  sock_write_iter+0x2de/0x3e0
[  429.711299][T12197]  ? __pfx_sock_write_iter+0x10/0x10
[  429.711333][T12197]  ? bpf_lsm_file_permission+0x9/0x20
[  429.711360][T12197]  ? security_file_permission+0x75/0x260
[  429.711390][T12197]  vfs_write+0x612/0xba0
[  429.711417][T12197]  ? __pfx_vfs_write+0x10/0x10
[  429.711445][T12197]  ? __fget_files+0x2a/0x420
[  429.711480][T12197]  ksys_write+0x150/0x270
[  429.711501][T12197]  ? __pfx_ksys_write+0x10/0x10
[  429.711530][T12197]  do_syscall_64+0x166/0x520
[  429.711556][T12197]  ? trace_irq_disable+0x3b/0x140
[  429.711576][T12197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.711596][T12197]  ? clear_bhb_loop+0x70/0xc0
[  429.711618][T12197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.711637][T12197] RIP: 0033:0x7f6b2e79e199
[  429.711655][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.711671][T12197] RSP: 002b:00007f6b2f5b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  429.711690][T12197] RAX: ffffffffffffffda RBX: 00007f6b2ea25fa0 RCX: 00007f6b2e79e199
[  429.711705][T12197] RDX: 0000000000000044 RSI: 0000200000000400 RDI: 0000000000000003
[  429.711717][T12197] RBP: 00007f6b2f5b1090 R08: 0000000000000000 R09: 0000000000000000
[  429.711729][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.711741][T12197] R13: 00007f6b2ea26038 R14: 00007f6b2ea25fa0 R15: 00007f6b2eb4fa48
[  429.711770][T12197]  </TASK>
[  430.243020][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2086'.
[  430.243055][T12190] netlink: 'syz.0.2086': attribute type 7 has an invalid length.
[  430.243068][T12190] netlink: 'syz.0.2086': attribute type 8 has an invalid length.
[  430.243079][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'.
[  434.944392][ T5704] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[  435.096440][ T5704] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  435.097525][ T5704] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  435.097553][ T5704] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  435.097577][ T5704] usb 5-1: config 0 interface 0 has no altsetting 0
[  435.097608][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.175008][ T5704] usb 5-1: config 0 descriptor??
[  435.175724][T12205] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  435.176794][T12210] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  435.284374][ T5675] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  435.384685][T12205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.385161][T12205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.434347][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  435.439151][ T5675] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  435.440867][ T5675] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.440895][ T5675] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.440915][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0
[  435.440954][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.509400][ T5675] usb 3-1: config 0 descriptor??
[  435.646676][ T5704] kye 0003:0458:501A.002F: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  435.647470][ T5704] kye 0003:0458:501A.002F: unknown main item tag 0x7
[  435.689074][ T5704] kye 0003:0458:501A.002F: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0
[  435.689106][ T5704] kye 0003:0458:501A.002F: tablet-enabling feature report not found
[  435.689120][ T5704] kye 0003:0458:501A.002F: tablet enabling failed
[  435.832684][ T5704] usb 5-1: USB disconnect, device number 110
[  436.131866][ T5675] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0
[  436.131902][ T5675] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0
[  436.131930][ T5675] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0
[  436.131956][ T5675] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0
[  436.131983][ T5675] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0
[  436.174611][ T5675] mcp2221 0003:04D8:00DD.0030: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  436.417783][T12217] fido_id[12217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  436.527777][ T5675] usb 3-1: USB disconnect, device number 91
[  436.779267][T12220] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.2091'.
[  437.923198][T12241] x_tables: unsorted underflow at hook 3
[  438.031042][T12243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.514386][ T5704] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  438.632054][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'.
[  438.632082][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'.
[  438.632145][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'.
[  438.664327][ T5704] usb 5-1: Using ep0 maxpacket: 8
[  438.669871][ T5704] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  438.703334][ T5704] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  438.716592][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.716615][ T5704] usb 5-1: Product: syz
[  438.716629][ T5704] usb 5-1: Manufacturer: syz
[  438.716642][ T5704] usb 5-1: SerialNumber: syz
[  438.751651][ T5704] usb 5-1: config 0 descriptor??
[  438.770937][ T5704] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  438.770984][ T5704] usb 5-1: setting power ON
[  438.802454][ T5704] dvb-usb: bulk message failed: -22 (2/0)
[  438.815283][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'.
[  438.815324][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'.
[  438.823515][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  438.833562][ T5704] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  438.833614][ T5704] usb 5-1: media controller created
[  439.015090][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  439.051729][T12243] dvb-usb: bulk message failed: -22 (4/0)
[  439.051750][T12243] cxusb: i2c read failed
[  439.355512][ T5743] tipc: Node number set to 867684557
[  439.954773][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  439.954838][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  440.052224][ T5704] usb 5-1: selecting invalid altsetting 6
[  440.052249][ T5704] usb 5-1: digital interface selection failed (-22)
[  440.052263][ T5704] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  440.369819][T12256] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  440.450527][ T5704] usb 5-1: setting power OFF
[  440.450609][ T5704] dvb-usb: bulk message failed: -22 (2/0)
[  440.450624][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  440.450636][ T5704] (NULL device *): no alternate interface
[  440.544094][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  440.581006][ T5704] usb 5-1: USB disconnect, device number 111
[  440.665408][T12256] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  440.971717][T12244] tipc: Disabling bearer <eth:syzkaller0>
[  441.046689][ T5704] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  441.195276][ T5704] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  441.200803][ T5704] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[  441.200845][ T5704] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  441.321555][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.321582][ T5704] usb 3-1: Product: syz
[  441.321595][ T5704] usb 3-1: Manufacturer: syz
[  441.321609][ T5704] usb 3-1: SerialNumber: syz
[  441.434408][ T5675] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  441.594392][ T5675] usb 1-1: Using ep0 maxpacket: 32
[  441.595168][ T5675] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  441.627653][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.627676][ T5675] usb 1-1: Product: syz
[  441.627690][ T5675] usb 1-1: Manufacturer: syz
[  441.627704][ T5675] usb 1-1: SerialNumber: syz
[  441.716865][ T5675] usb 1-1: config 0 descriptor??
[  441.863850][ T5704] usb 3-1: unit 5 not found!
[  442.151078][  T988] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  442.184443][ T5704] usb 3-1: disable ehci-hcd to run US-144
[  442.232046][ T5704] usb 3-1: disable ehci-hcd to run US-144
[  442.308061][ T5704] usb 3-1: USB disconnect, device number 92
[  442.396492][  T988] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  442.425981][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.426007][  T988] usb 4-1: Product: syz
[  442.426020][  T988] usb 4-1: Manufacturer: syz
[  442.426058][  T988] usb 4-1: SerialNumber: syz
[  442.752002][T12204] udevd[12204]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  442.848753][  T988] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  442.974687][ T5675] airspy 1-1:0.0: usb_control_msg() failed -110 request 0a
[  442.974714][ T5675] airspy 1-1:0.0: Could not detect board
[  442.974844][ T5675] airspy 1-1:0.0: probe with driver airspy failed with error -110
[  443.349236][ T5675] usb 4-1: USB disconnect, device number 77
[  443.614900][ T5704] usb 1-1: USB disconnect, device number 90
[  443.926391][  T988] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  443.926563][  T988] ath9k_htc: Failed to initialize the device
[  443.927385][ T5675] usb 4-1: ath9k_htc: USB layer deinitialized
[  444.048355][T12280] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2108'.
[  444.073039][T12280] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2108'.
[  444.334337][T11876] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  444.536602][T11876] usb 2-1: unable to get BOS descriptor or descriptor too short
[  444.537098][T11876] usb 2-1: not running at top speed; connect to a high speed hub
[  444.537128][T11876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  444.585925][T11876] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  444.592591][T11876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.592614][T11876] usb 2-1: Product: syz
[  444.592627][T11876] usb 2-1: Manufacturer: syz
[  444.592641][T11876] usb 2-1: SerialNumber: syz
[  445.027184][T12285] ipvlan2: entered allmulticast mode
[  445.027205][T12285] gretap0: entered allmulticast mode
[  445.048044][T11876] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  445.273836][T11876] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  445.484950][T11876] usb 2-1: USB disconnect, device number 76
[  445.765635][T12204] udevd[12204]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  445.817748][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'.
[  446.536483][ T5675] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  446.674766][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'.
[  446.674812][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'.
[  446.705305][ T5675] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  446.716149][ T5675] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  446.716172][ T5675] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.716189][ T5675] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  446.716256][ T5675] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.720729][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  446.720751][ T5675] usb 2-1: Product: syz
[  446.720765][ T5675] usb 2-1: Manufacturer: syz
[  446.796204][ T5675] cdc_wdm 2-1:1.0: skipping garbage
[  446.796222][ T5675] cdc_wdm 2-1:1.0: skipping garbage
[  446.817956][ T5675] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  446.818324][ T5675] cdc_wdm 2-1:1.0: Unknown control protocol
[  446.914400][T11876] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  446.996527][ T5675] usb 2-1: USB disconnect, device number 77
[  447.065160][T11876] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  447.066478][T11876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.069298][T11876] usb 3-1: config 0 descriptor??
[  447.361835][T11876] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  447.504311][ T5704] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  447.684751][ T5704] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  447.690026][ T5704] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  447.690056][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.690072][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  447.690113][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.756580][T11876] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[  447.756603][T11876] [drm] Initialized udl on minor 1
[  447.761136][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  447.761184][ T5704] usb 2-1: Product: syz
[  447.761200][ T5704] usb 2-1: Manufacturer: syz
[  447.851396][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'.
[  447.873720][T12326] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.2123'.
[  447.892755][ T5704] cdc_wdm 2-1:1.0: skipping garbage
[  447.892773][ T5704] cdc_wdm 2-1:1.0: skipping garbage
[  447.909560][ T5704] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  447.909579][ T5704] cdc_wdm 2-1:1.0: Unknown control protocol
[  448.740328][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'.
[  448.740388][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'.
[  448.995373][T12340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.995934][T12340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.034169][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.058502][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.671590][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.671758][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.671974][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.671995][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.672210][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.672229][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.672441][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.672460][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.674337][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.674359][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.681472][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.681497][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.681748][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.681768][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.681962][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.681982][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.688303][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.688324][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.688531][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  451.688550][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  451.865967][  T988] usb 2-1: USB disconnect, device number 78
[  451.866067][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  452.818980][T11876] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  452.820295][T11876] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  452.846496][T11876] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  452.847457][T11876] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  452.847677][T11876] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  453.976557][T12359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'.
[  454.356416][ T5704] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  454.542569][ T5704] usb 2-1: Using ep0 maxpacket: 32
[  454.558536][ T5704] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa
[  454.560994][ T5704] usb 2-1: config 245 has an invalid interface number: 214 but max is 0
[  454.561017][ T5704] usb 2-1: config 245 has no interface number 0
[  454.561064][ T5704] usb 2-1: config 245 interface 214 altsetting 70 bulk endpoint 0x5 has invalid maxpacket 64
[  454.561086][ T5704] usb 2-1: config 245 interface 214 has no altsetting 0
[  454.656129][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.656155][ T5704] usb 2-1: Product: syz
[  454.656169][ T5704] usb 2-1: Manufacturer: syz
[  454.656182][ T5704] usb 2-1: SerialNumber: syz
[  454.664977][T12353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  455.181575][T11876] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  455.328199][T11876] usb 5-1: Using ep0 maxpacket: 16
[  455.331307][T11876] usb 5-1: unable to get BOS descriptor or descriptor too short
[  455.331354][T11876] usb 5-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40
[  455.364158][T11876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.364245][T11876] usb 5-1: Product: syz
[  455.364259][T11876] usb 5-1: Manufacturer: syz
[  455.364274][T11876] usb 5-1: SerialNumber: syz
[  455.424945][T11876] usb 5-1: 1:1 : unsupported format bits 0xfffe0000
[  455.424974][T11876] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  455.431019][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.433260][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.434676][ T5704] usb 2-1: USB disconnect, device number 79
[  455.436897][ T5704] f81534a_ctrl 2-1:245.214: failed to enable ports: -19
[  455.581346][T12361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.596296][T12361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.182621][ T5704] usb 3-1: USB disconnect, device number 93
[  460.387467][T12382] could not allocate digest TFM handle -ż�ĆqřęĘâ4żOĂ(0&qú´f·=Ż*΀Żňřjť„¸$€ŚĆŞ�­ü€«;ş}'üj°O
[  460.488883][T11876] usb 5-1: failed to enable PITCH for EP 0x1
[  460.489641][T11876] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  460.999222][T11876] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  461.264322][T11876] usb 3-1: device descriptor read/64, error -71
[  461.504312][T11876] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  461.644352][T11876] usb 3-1: device descriptor read/64, error -71
[  461.730637][T12394] netlink: 'syz.3.2142': attribute type 3 has an invalid length.
[  461.755442][T11876] usb usb3-port1: attempt power cycle
[  461.811037][T12355] usb 5-1: USB disconnect, device number 112
[  462.118543][T11876] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  462.136233][T11876] usb 3-1: device descriptor read/8, error -71
[  462.340463][T12409] openvswitch: netlink: Missing key (keys=d0, expected=200000)
[  462.375442][T11876] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  462.395047][T11876] usb 3-1: device descriptor read/8, error -71
[  462.505474][T11876] usb usb3-port1: unable to enumerate USB device
[  462.821649][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2148'.
[  462.902875][T12355] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  463.102673][   T31] audit: type=1326 audit(1791401651.171:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.103077][   T31] audit: type=1326 audit(1791401651.171:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.103331][   T31] audit: type=1326 audit(1791401651.171:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.103599][   T31] audit: type=1326 audit(1791401651.171:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.103784][   T31] audit: type=1326 audit(1791401651.171:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.104050][   T31] audit: type=1326 audit(1791401651.171:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.173824][T12355] usb 5-1: Using ep0 maxpacket: 32
[  463.261912][   T31] audit: type=1326 audit(1791401651.331:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.289357][   T31] audit: type=1326 audit(1791401651.341:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.317684][T12355] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  463.326569][   T31] audit: type=1326 audit(1791401651.401:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.335996][   T31] audit: type=1326 audit(1791401651.411:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  463.463187][T12355] usb 5-1: unable to read config index 0 descriptor/start: -61
[  463.463224][T12355] usb 5-1: can't read configurations, error -61
[  463.644364][ T5675] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  463.696686][T12355] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  463.774373][ T5675] usb 2-1: device descriptor read/64, error -71
[  463.949073][T12436] x_tables: unsorted underflow at hook 3
[  463.994751][T12355] usb 5-1: Using ep0 maxpacket: 32
[  464.014360][ T5675] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  464.028832][T12355] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  464.123967][T12355] usb 5-1: unable to read config index 0 descriptor/start: -61
[  464.124006][T12355] usb 5-1: can't read configurations, error -61
[  464.131354][T12355] usb usb5-port1: attempt power cycle
[  464.144794][ T5675] usb 2-1: device descriptor read/64, error -71
[  464.254729][ T5675] usb usb2-port1: attempt power cycle
[  464.571575][T12355] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  464.594511][ T5675] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  464.615104][ T5675] usb 2-1: device descriptor read/8, error -71
[  464.643356][T12355] usb 5-1: Using ep0 maxpacket: 32
[  464.661668][T12355] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  464.696841][T12355] usb 5-1: unable to read config index 0 descriptor/start: -61
[  464.696877][T12355] usb 5-1: can't read configurations, error -61
[  464.855389][ T5675] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  464.875076][ T5675] usb 2-1: device descriptor read/8, error -71
[  464.910104][T12355] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  464.986255][ T5675] usb usb2-port1: unable to enumerate USB device
[  464.989005][T12355] usb 5-1: device descriptor read/8, error -71
[  465.131987][T12355] usb usb5-port1: unable to enumerate USB device
[  465.233601][T12442] loop0: detected capacity change from 0 to 4096
[  465.550299][T12442] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  465.550604][T12442] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  465.550623][T12442] ldm_validate_privheads(): Cannot find PRIVHEAD 2.
[  465.550677][T12442]  loop0:
[  466.134335][ T5675] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  466.284303][ T5675] usb 1-1: Using ep0 maxpacket: 16
[  466.285008][ T5675] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  466.285577][ T5675] usb 1-1: config 0 has no interfaces?
[  466.287738][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.287760][ T5675] usb 1-1: Product: syz
[  466.287774][ T5675] usb 1-1: Manufacturer: syz
[  466.287787][ T5675] usb 1-1: SerialNumber: syz
[  466.293572][ T5675] usb 1-1: config 0 descriptor??
[  466.540388][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'.
[  466.569900][ T5675] usb 1-1: USB disconnect, device number 91
[  466.719852][T12458] kvm: MWAIT instruction emulated as NOP!
[  466.924489][ T5704] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  467.061120][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.061524][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.081481][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  467.087387][ T5704] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  467.100304][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  467.116885][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.116907][ T5704] usb 2-1: Product: syz
[  467.116921][ T5704] usb 2-1: Manufacturer: syz
[  467.116934][ T5704] usb 2-1: SerialNumber: syz
[  467.121336][ T5704] usb 2-1: config 0 descriptor??
[  467.166357][ T5704] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  467.166386][ T5704] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  467.294404][T11876] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  467.364864][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.452963][T12469] FAULT_INJECTION: forcing a failure.
[  467.452963][T12469] name failslab, interval 1, probability 0, space 0, times 0
[  467.452993][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.4.2164 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.453013][T12469] Tainted: [L]=SOFTLOCKUP
[  467.453020][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  467.453029][T12469] Call Trace:
[  467.453035][T12469]  <TASK>
[  467.453042][T12469]  dump_stack_lvl+0xe8/0x150
[  467.453070][T12469]  should_fail_ex+0x410/0x560
[  467.453094][T12469]  should_failslab+0xa8/0x100
[  467.453118][T12469]  __kmalloc_cache_noprof+0xa3/0x600
[  467.453139][T12469]  ? io_ring_ctx_alloc+0x54/0xb80
[  467.453165][T12469]  ? io_ring_ctx_alloc+0x54/0xb80
[  467.453194][T12469]  io_ring_ctx_alloc+0x54/0xb80
[  467.453221][T12469]  ? io_prepare_config+0x8c8/0xc70
[  467.453248][T12469]  io_uring_create+0x50/0x990
[  467.453276][T12469]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  467.453298][T12469]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  467.453326][T12469]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  467.453359][T12469]  ? __pfx_ksys_write+0x10/0x10
[  467.453388][T12469]  do_syscall_64+0x166/0x520
[  467.453413][T12469]  ? trace_irq_disable+0x3b/0x140
[  467.453432][T12469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.453452][T12469]  ? clear_bhb_loop+0x70/0xc0
[  467.453473][T12469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.453491][T12469] RIP: 0033:0x7f6b2e79e199
[  467.453507][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.453523][T12469] RSP: 002b:00007f6b2f57fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  467.453552][T12469] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f6b2e79e199
[  467.453567][T12469] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26
[  467.453580][T12469] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000
[  467.453593][T12469] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  467.453604][T12469] R13: 0000200000000b10 R14: 00007f6b2f57ffd8 R15: 0000000000000000
[  467.453631][T12469]  </TASK>
[  467.766739][T11876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  467.768598][T11876] usb 4-1: not running at top speed; connect to a high speed hub
[  467.768628][T11876] usb 4-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40
[  467.771264][T11876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  467.771286][T11876] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  467.771339][T11876] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  467.801214][T11876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.801237][T11876] usb 4-1: Product: syz
[  467.801251][T11876] usb 4-1: Manufacturer: syz
[  467.801265][T11876] usb 4-1: SerialNumber: syz
[  467.876671][T12470] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2166'.
[  467.876692][T12470] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  467.946883][ T5704] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  468.520320][ T5675] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  468.645836][ T5704] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  468.645871][ T5704] em28xx 2-1:0.0: board has no eeprom
[  468.734411][ T5675] usb 1-1: Using ep0 maxpacket: 16
[  468.758368][ T5675] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  468.907887][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.908560][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.910981][ T5675] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  468.911021][ T5675] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  468.911075][ T5675] usb 1-1: config 0 interface 0 has no altsetting 0
[  468.911107][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.009518][ T5675] usb 1-1: config 0 descriptor??
[  469.223761][T12476] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2167'.
[  469.239863][ T5675] usbhid 1-1:0.0: can't add hid device: -71
[  469.239986][ T5675] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  469.269931][ T5675] usb 1-1: USB disconnect, device number 92
[  470.054365][ T5704] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  470.054394][ T5704] em28xx 2-1:0.0: dvb set to bulk mode.
[  470.057776][ T5675] em28xx 2-1:0.0: Binding DVB extension
[  470.129509][ T5704] usb 2-1: USB disconnect, device number 84
[  470.142237][ T5704] em28xx 2-1:0.0: Disconnecting em28xx
[  470.483665][T11876] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor
[  470.483744][T11876] usb 4-1: 1:1 : sample bitwidth 190 in over sample bytes 1
[  470.483765][T11876] usb 4-1: 1:1 : unsupported format bits 0x200006
[  470.483786][T11876] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  470.533339][T11876] usb 4-1: unit 2 not found!
[  470.533362][T11876] usb 4-1: unit 0 not found!
[  471.089654][ T5675] em28xx 2-1:0.0: Registering input extension
[  471.124542][ T5704] em28xx 2-1:0.0: Closing input extension
[  471.173763][ T5704] em28xx: Freeing device
[  471.201505][T11876] usb 4-1: USB disconnect, device number 78
[  471.419001][T12387] udevd[12387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  471.954689][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'.
[  471.954736][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'.
[  472.404493][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.487757][T12501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2175'.
[  472.549591][T12503] netlink: 'syz.1.2176': attribute type 63 has an invalid length.
[  472.549613][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2176'.
[  472.751354][T12508] loop0: detected capacity change from 0 to 4096
[  472.820373][T12508] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  472.820702][T12508] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  472.820721][T12508] ldm_validate_privheads(): Cannot find PRIVHEAD 2.
[  472.820777][T12508]  loop0:
[  473.384123][ T5767] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  473.454854][T11876] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  473.606891][T11876] usb 4-1: Using ep0 maxpacket: 16
[  473.608449][T11876] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  473.610400][T11876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  473.633632][T11876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.633654][T11876] usb 4-1: Product: syz
[  473.633668][T11876] usb 4-1: Manufacturer: syz
[  473.633681][T11876] usb 4-1: SerialNumber: syz
[  473.658118][ T5767] usb 3-1: Using ep0 maxpacket: 8
[  473.676649][T11876] usb 4-1: config 0 descriptor??
[  473.692474][T11876] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  473.692503][T11876] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  473.770212][ T5702] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  473.777529][ T5767] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  473.890133][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.239956][ T5767] pvrusb2: Hardware description: Terratec Grabster AV400
[  474.239974][ T5767] pvrusb2: **********
[  474.239981][ T5767] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  474.239991][ T5767] pvrusb2: Important functionality might not be entirely working.
[  474.239999][ T5767] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  474.240009][ T5767] pvrusb2: **********
[  474.300952][T11876] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  474.398089][ T5702] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  474.417522][T12539] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  474.460124][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.460155][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.460185][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  474.460222][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.476853][ T5702] usb 2-1: config 0 descriptor??
[  474.529807][ T2341] pvrusb2: Invalid write control endpoint
[  474.662633][T12511] pvrusb2: Invalid write control endpoint
[  474.763688][ T2341] pvrusb2: Invalid write control endpoint
[  474.763702][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  474.763711][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  474.763744][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  474.763752][ T2341] pvrusb2: Device being rendered inoperable
[  474.763788][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  474.763831][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  474.819881][ T5767] usb 3-1: USB disconnect, device number 98
[  474.907848][ T2341] pvrusb2: Attached sub-driver cx25840
[  474.907863][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  474.907872][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  474.982777][T11876] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  474.982805][T11876] em28xx 4-1:0.0: board has no eeprom
[  475.284548][T11876] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  475.284576][T11876] em28xx 4-1:0.0: dvb set to bulk mode.
[  475.284877][ T5675] em28xx 4-1:0.0: Binding DVB extension
[  475.391146][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'.
[  475.632066][ T5702] usb 2-1: USB disconnect, device number 85
[  475.799365][ T5743] usb 4-1: USB disconnect, device number 79
[  475.800998][ T5743] em28xx 4-1:0.0: Disconnecting em28xx
[  476.035606][ T5675] em28xx 4-1:0.0: Registering input extension
[  476.035849][ T5743] em28xx 4-1:0.0: Closing input extension
[  476.122311][ T5743] em28xx: Freeing device
[  476.836175][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.867213][T12568] xt_cgroup: no path or classid specified
[  476.877476][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.887231][ T5743] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  477.197457][ T5743] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  477.232181][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  477.232207][ T5743] usb 3-1: Product: syz
[  477.232220][ T5743] usb 3-1: SerialNumber: syz
[  477.319199][ T5743] usb 3-1: config 0 descriptor??
[  477.586821][ T5743] usb 3-1: USB disconnect, device number 99
[  477.604540][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.605357][T12204] udevd[12204]: setting mode of /dev/bus/usb/003/099 to 020664 failed: No such file or directory
[  477.605470][T12204] udevd[12204]: setting owner of /dev/bus/usb/003/099 to uid=0, gid=0 failed: No such file or directory
[  478.324753][T11876] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  478.524592][T11876] usb 1-1: Using ep0 maxpacket: 16
[  478.525602][T11876] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  478.528411][T11876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.528440][T11876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  478.528464][T11876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  478.528501][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.625407][T11876] usb 1-1: config 0 descriptor??
[  478.641746][T12585] ipvlan2: entered allmulticast mode
[  479.173762][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.235498][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.243385][T11876] usbhid 1-1:0.0: can't add hid device: -71
[  479.243479][T11876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  479.589847][T11876] usb 1-1: USB disconnect, device number 93
[  480.360288][ T5702] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  480.657566][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2203'.
[  480.679558][ T5702] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  480.746128][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'.
[  480.750620][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.758992][ T5702] usb 5-1: config 0 descriptor??
[  481.059214][ T5702] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  481.185348][ T5743] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  481.335037][ T5743] usb 4-1: New USB device found, idVendor=0e6f, idProduct=3c2c, bcdDevice=31.68
[  481.335077][ T5743] usb 4-1: no configurations
[  481.335089][ T5743] usb 4-1: can't read configurations, error -22
[  481.479025][ T5743] usb 4-1: new full-speed USB device number 81 using dummy_hcd
[  481.625297][ T5743] usb 4-1: New USB device found, idVendor=0e6f, idProduct=3c2c, bcdDevice=31.68
[  481.625338][ T5743] usb 4-1: no configurations
[  481.625351][ T5743] usb 4-1: can't read configurations, error -22
[  481.625586][ T5743] usb usb4-port1: attempt power cycle
[  482.103792][ T5743] usb 4-1: new full-speed USB device number 82 using dummy_hcd
[  482.157107][ T5743] usb 4-1: New USB device found, idVendor=0e6f, idProduct=3c2c, bcdDevice=31.68
[  482.157148][ T5743] usb 4-1: no configurations
[  482.157160][ T5743] usb 4-1: can't read configurations, error -22
[  482.284354][ T5743] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  482.382941][ T5743] usb 4-1: New USB device found, idVendor=0e6f, idProduct=3c2c, bcdDevice=31.68
[  482.382981][ T5743] usb 4-1: no configurations
[  482.382994][ T5743] usb 4-1: can't read configurations, error -22
[  482.383229][ T5743] usb usb4-port1: unable to enumerate USB device
[  482.430802][T12620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2206'.
[  482.433612][T12617] batman_adv: batadv0: Interface deactivated: gretap1
[  482.453553][T12617] batman_adv: batadv0: Removing interface: gretap1
[  482.733770][ T5702] [drm:udl_init] *ERROR* Selecting channel failed
[  483.059762][ T5702] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  483.059778][ T5702] [drm] Initialized udl on minor 1
[  483.074987][ T5702] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  483.075456][ T5702] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  483.109075][T12355] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  483.127094][T12355] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  483.127292][T12355] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  483.364504][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.392257][ T5702] usb 5-1: USB disconnect, device number 117
[  484.544405][T11876] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  484.808617][T11876] usb 5-1: Using ep0 maxpacket: 8
[  484.810282][T11876] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  484.814415][T11876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.587696][T11876] pvrusb2: Hardware description: Terratec Grabster AV400
[  485.587715][T11876] pvrusb2: **********
[  485.587722][T11876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  485.587733][T11876] pvrusb2: Important functionality might not be entirely working.
[  485.587742][T11876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  485.587752][T11876] pvrusb2: **********
[  486.164462][    C1] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967292. macoff=76
[  486.428827][ T2341] pvrusb2: Invalid write control endpoint
[  486.630457][T12645] pvrusb2: Invalid write control endpoint
[  486.703068][ T2341] pvrusb2: Invalid write control endpoint
[  486.705083][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  486.705096][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  486.705104][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  486.705123][ T2341] pvrusb2: Device being rendered inoperable
[  486.705175][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  486.705217][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  486.706113][ T2341] pvrusb2: Attached sub-driver cx25840
[  486.706125][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  486.706134][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  487.649476][T11876] usb 5-1: USB disconnect, device number 118
[  488.044497][T12659] netlink: 'syz.1.2216': attribute type 10 has an invalid length.
[  488.189594][   T31] kauditd_printk_skb: 23 callbacks suppressed
[  488.189613][   T31] audit: type=1326 audit(1791401676.261:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.189655][   T31] audit: type=1326 audit(1791401676.261:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.193444][   T31] audit: type=1326 audit(1791401676.261:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.193488][   T31] audit: type=1326 audit(1791401676.261:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.193527][   T31] audit: type=1326 audit(1791401676.261:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.367723][   T31] audit: type=1326 audit(1791401676.441:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.367771][   T31] audit: type=1326 audit(1791401676.441:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.367810][   T31] audit: type=1326 audit(1791401676.441:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.424954][   T31] audit: type=1326 audit(1791401676.501:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  488.425002][   T31] audit: type=1326 audit(1791401676.501:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.3.2219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  489.083402][T12684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2223'.
[  489.124485][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.657992][T12677] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2222'.
[  489.658016][T12677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  489.694104][T12682] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2222'.
[  489.694125][T12682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  490.221473][T12692] FAULT_INJECTION: forcing a failure.
[  490.221473][T12692] name failslab, interval 1, probability 0, space 0, times 0
[  490.221514][T12692] CPU: 0 UID: 0 PID: 12692 Comm: syz.1.2224 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  490.221540][T12692] Tainted: [L]=SOFTLOCKUP
[  490.221547][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  490.221559][T12692] Call Trace:
[  490.221567][T12692]  <TASK>
[  490.221576][T12692]  dump_stack_lvl+0xe8/0x150
[  490.221606][T12692]  should_fail_ex+0x410/0x560
[  490.221635][T12692]  should_failslab+0xa8/0x100
[  490.221662][T12692]  __kvmalloc_node_noprof+0x176/0x820
[  490.221686][T12692]  ? __kvmalloc_node_noprof+0x345/0x820
[  490.221708][T12692]  ? io_alloc_cache_init+0x42/0x140
[  490.221728][T12692]  ? io_alloc_cache_init+0x42/0x140
[  490.221754][T12692]  io_alloc_cache_init+0x42/0x140
[  490.221778][T12692]  io_ring_ctx_alloc+0x527/0xb80
[  490.221813][T12692]  io_uring_create+0x50/0x990
[  490.221845][T12692]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  490.221869][T12692]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  490.221899][T12692]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  490.221937][T12692]  ? __pfx_ksys_write+0x10/0x10
[  490.221966][T12692]  do_syscall_64+0x166/0x520
[  490.221990][T12692]  ? trace_irq_disable+0x3b/0x140
[  490.222014][T12692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.222032][T12692]  ? clear_bhb_loop+0x70/0xc0
[  490.222053][T12692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.222070][T12692] RIP: 0033:0x7f2d5f59e199
[  490.222087][T12692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.222101][T12692] RSP: 002b:00007f2d60501ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  490.222122][T12692] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f2d5f59e199
[  490.222135][T12692] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26
[  490.222147][T12692] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000
[  490.222160][T12692] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  490.222173][T12692] R13: 0000200000000b10 R14: 00007f2d60501fd8 R15: 0000000000000000
[  490.222201][T12692]  </TASK>
[  491.915059][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2231'.
[  493.213421][T12737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2237'.
[  493.389755][T12736] netlink: 'syz.4.2236': attribute type 10 has an invalid length.
[  493.814619][ T5675] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  493.965286][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  493.966101][ T5675] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  493.967492][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  493.969429][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.969452][ T5675] usb 3-1: Product: syz
[  493.969466][ T5675] usb 3-1: Manufacturer: syz
[  493.969480][ T5675] usb 3-1: SerialNumber: syz
[  493.972239][ T5675] usb 3-1: config 0 descriptor??
[  494.132344][ T5675] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  494.132376][ T5675] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  494.168034][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'.
[  494.168099][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'.
[  494.169413][T12747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'.
[  494.169434][T12747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'.
[  494.795443][ T5675] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  494.884470][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.233159][ T5675] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  495.233188][ T5675] em28xx 3-1:0.0: board has no eeprom
[  495.606287][ T5675] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  495.606343][ T5675] em28xx 3-1:0.0: dvb set to bulk mode.
[  495.607494][T11876] em28xx 3-1:0.0: Binding DVB extension
[  495.835282][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  495.835308][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  495.835395][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  496.816422][T12742] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  496.821040][ T5743] usb 3-1: USB disconnect, device number 100
[  496.822223][ T5743] em28xx 3-1:0.0: Disconnecting em28xx
[  497.104306][ T5675] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  497.275420][ T5675] usb 5-1: Using ep0 maxpacket: 32
[  497.277098][ T5675] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  497.279488][T11876] em28xx 3-1:0.0: Registering input extension
[  497.279783][ T5743] em28xx 3-1:0.0: Closing input extension
[  497.280758][ T5675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.280778][ T5675] usb 5-1: config 0 has no interfaces?
[  498.326494][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.326521][ T5675] usb 5-1: Product: syz
[  498.326535][ T5675] usb 5-1: Manufacturer: syz
[  498.326548][ T5675] usb 5-1: SerialNumber: syz
[  498.379779][ T5675] usb 5-1: config 0 descriptor??
[  498.400714][ T5743] em28xx: Freeing device
[  498.834658][ T5675] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  498.987929][ T5675] usb 2-1: Using ep0 maxpacket: 32
[  498.993343][ T5675] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  499.023703][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.023726][ T5675] usb 2-1: Product: syz
[  499.023740][ T5675] usb 2-1: Manufacturer: syz
[  499.023753][ T5675] usb 2-1: SerialNumber: syz
[  499.053846][ T5675] usb 2-1: config 0 descriptor??
[  499.505351][T12784] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2251'.
[  499.530255][ T5675] airspy 2-1:0.0: Board ID: 00
[  499.530274][ T5675] airspy 2-1:0.0: Firmware version: 
[  499.632172][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2252'.
[  500.004454][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.454380][ T5743] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  500.568246][ T5675] airspy 2-1:0.0: usb_control_msg() failed -110 request 11
[  500.605141][ T5743] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  500.606149][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.813047][ T5675] airspy 2-1:0.0: Registered as swradio24
[  500.813068][ T5675] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  500.833507][ T5743] usb 4-1: config 0 descriptor??
[  500.997655][ T5743] usb 5-1: USB disconnect, device number 119
[  501.105047][ T5675] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  501.159068][T11876] usb 2-1: USB disconnect, device number 86
[  501.256051][ T5675] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  501.257056][ T5675] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  501.259104][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  501.259137][ T5675] usb 3-1: Product: syz
[  501.259151][ T5675] usb 3-1: Manufacturer: syz
[  501.259165][ T5675] usb 3-1: SerialNumber: syz
[  501.412463][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  501.412520][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  501.542679][T12804] FAULT_INJECTION: forcing a failure.
[  501.542679][T12804] name failslab, interval 1, probability 0, space 0, times 0
[  501.542713][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.4.2256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  501.542738][T12804] Tainted: [L]=SOFTLOCKUP
[  501.542745][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  501.542759][T12804] Call Trace:
[  501.542767][T12804]  <TASK>
[  501.542776][T12804]  dump_stack_lvl+0xe8/0x150
[  501.542807][T12804]  should_fail_ex+0x410/0x560
[  501.542836][T12804]  should_failslab+0xa8/0x100
[  501.542860][T12804]  ? do_getname+0x2e/0x250
[  501.542884][T12804]  kmem_cache_alloc_noprof+0xa1/0x600
[  501.542912][T12804]  ? ksys_write+0x242/0x270
[  501.542929][T12804]  ? do_getname+0x2e/0x250
[  501.542959][T12804]  do_getname+0x2e/0x250
[  501.542980][T12804]  ? getname_flags+0x11/0x20
[  501.543005][T12804]  __x64_sys_execve+0x7a/0xc0
[  501.543024][T12804]  do_syscall_64+0x166/0x520
[  501.543050][T12804]  ? trace_irq_disable+0x3b/0x140
[  501.543067][T12804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.543084][T12804]  ? clear_bhb_loop+0x70/0xc0
[  501.543104][T12804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.543123][T12804] RIP: 0033:0x7f6b2e79e199
[  501.543141][T12804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.543157][T12804] RSP: 002b:00007f6b2f5b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  501.543176][T12804] RAX: ffffffffffffffda RBX: 00007f6b2ea25fa0 RCX: 00007f6b2e79e199
[  501.543190][T12804] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000200000000080
[  501.543202][T12804] RBP: 00007f6b2f5b1090 R08: 0000000000000000 R09: 0000000000000000
[  501.543214][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.543225][T12804] R13: 00007f6b2ea26038 R14: 00007f6b2ea25fa0 R15: 00007f6b2eb4fa48
[  501.543254][T12804]  </TASK>
[  502.076700][ T5675] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  502.122043][ T5675] usb 3-1: USB disconnect, device number 101
[  502.231576][ T5675] usblp0: removed
[  503.006322][ T5675] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  503.154315][ T5675] usb 1-1: Using ep0 maxpacket: 16
[  503.155325][ T5675] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  503.157614][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  503.164583][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.164606][ T5675] usb 1-1: Product: syz
[  503.164619][ T5675] usb 1-1: Manufacturer: syz
[  503.164633][ T5675] usb 1-1: SerialNumber: syz
[  503.222148][ T5675] usb 1-1: config 0 descriptor??
[  503.238347][ T5675] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  503.238377][ T5675] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  503.384578][ T5704] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  503.585815][T11876] usb 4-1: USB disconnect, device number 84
[  503.602110][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  503.612864][ T5704] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  503.626378][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  503.649321][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.649369][ T5704] usb 2-1: Product: syz
[  503.649383][ T5704] usb 2-1: Manufacturer: syz
[  503.649397][ T5704] usb 2-1: SerialNumber: syz
[  503.675580][ T5704] usb 2-1: config 0 descriptor??
[  503.786186][ T5704] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  503.786219][ T5704] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  503.917341][ T5675] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  503.957916][   T31] kauditd_printk_skb: 36 callbacks suppressed
[  503.957933][   T31] audit: type=1326 audit(1791401692.031:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.958209][   T31] audit: type=1326 audit(1791401692.031:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.958770][   T31] audit: type=1326 audit(1791401692.031:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.959228][   T31] audit: type=1326 audit(1791401692.031:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.959493][   T31] audit: type=1326 audit(1791401692.031:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.959933][   T31] audit: type=1326 audit(1791401692.031:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.960296][   T31] audit: type=1326 audit(1791401692.031:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.960528][   T31] audit: type=1326 audit(1791401692.031:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.960938][   T31] audit: type=1326 audit(1791401692.031:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  503.961206][   T31] audit: type=1326 audit(1791401692.031:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12822 comm="syz.3.2262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x7ffc0000
[  504.622924][ T5675] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  504.622977][ T5675] em28xx 1-1:0.0: board has no eeprom
[  504.648263][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.670117][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.844763][ T5704] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  504.991196][T12833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2264'.
[  505.239891][T12829] netlink: 'syz.3.2263': attribute type 39 has an invalid length.
[  505.328167][ T5704] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  505.329117][ T5704] em28xx 2-1:0.0: board has no eeprom
[  505.376492][ T5675] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  505.376517][ T5675] em28xx 1-1:0.0: dvb set to bulk mode.
[  505.383866][T11876] em28xx 1-1:0.0: Binding DVB extension
[  505.432553][ T5675] usb 1-1: USB disconnect, device number 94
[  505.470336][ T5675] em28xx 1-1:0.0: Disconnecting em28xx
[  505.804466][ T5704] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  505.804494][ T5704] em28xx 2-1:0.0: dvb set to bulk mode.
[  505.909700][T11876] em28xx 1-1:0.0: Registering input extension
[  505.922105][ T5743] em28xx 2-1:0.0: Binding DVB extension
[  506.004574][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.138194][T11876] usb 2-1: USB disconnect, device number 87
[  506.139881][T11876] em28xx 2-1:0.0: Disconnecting em28xx
[  506.505481][ T5743] em28xx 2-1:0.0: Registering input extension
[  506.505700][T11876] em28xx 2-1:0.0: Closing input extension
[  506.507139][ T5675] em28xx 1-1:0.0: Closing input extension
[  506.750409][ T5675] em28xx: Freeing device
[  506.752180][T11876] em28xx: Freeing device
[  507.445261][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.209678][T12866] syzkaller0: entered promiscuous mode
[  508.209702][T12866] syzkaller0: entered allmulticast mode
[  508.534704][ T5743] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  508.706424][T12886] syzkaller0: entered allmulticast mode
[  508.778864][ T5743] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  508.800208][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.811534][ T5743] usb 5-1: config 0 descriptor??
[  508.823602][ T5743] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  509.654331][T11876] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  509.786751][T12894] syzkaller0: entered promiscuous mode
[  509.786798][T12894] syzkaller0: entered allmulticast mode
[  509.809224][T11876] usb 2-1: Using ep0 maxpacket: 16
[  509.810092][T11876] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  509.811280][T11876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  509.813831][T11876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.813853][T11876] usb 2-1: Product: syz
[  509.813867][T11876] usb 2-1: Manufacturer: syz
[  509.813905][T11876] usb 2-1: SerialNumber: syz
[  509.875198][T11876] usb 2-1: config 0 descriptor??
[  509.893938][T11876] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  509.893967][T11876] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  510.608259][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.610159][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.695110][T11876] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  511.138700][T11876] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  511.138729][T11876] em28xx 2-1:0.0: board has no eeprom
[  511.393305][ T5743] usb 5-1: USB disconnect, device number 120
[  511.459506][T12906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2282'.
[  511.514283][T11876] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  511.514310][T11876] em28xx 2-1:0.0: dvb set to bulk mode.
[  511.524510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.550233][T11876] em28xx 2-1:0.0: Binding DVB extension
[  511.800615][   T31] kauditd_printk_skb: 57 callbacks suppressed
[  511.800633][   T31] audit: type=1326 audit(1791401699.871:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12907 comm="syz.3.2281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x0
[  512.581477][T12917] openvswitch: netlink: Missing key (keys=d0, expected=200000)
[  512.727047][T12892] em28xx 2-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  512.732979][ T5743] usb 2-1: USB disconnect, device number 88
[  512.849506][ T5743] em28xx 2-1:0.0: Disconnecting em28xx
[  512.888037][T11876] em28xx 2-1:0.0: Registering input extension
[  512.888334][ T5743] em28xx 2-1:0.0: Closing input extension
[  512.921612][ T5743] em28xx: Freeing device
[  513.467318][T12925] netlink: 'syz.4.2287': attribute type 10 has an invalid length.
[  513.529102][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2288'.
[  513.529119][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2288'.
[  513.865584][ T5743] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  513.955662][  T988] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  514.014761][ T5675] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  514.016201][ T5743] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  514.022934][ T5743] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.022961][ T5743] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.022985][ T5743] usb 2-1: config 0 interface 0 has no altsetting 0
[  514.023016][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.086377][ T5743] usb 2-1: config 0 descriptor??
[  514.114291][  T988] usb 4-1: Using ep0 maxpacket: 32
[  514.115020][  T988] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  514.116304][  T988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.116324][  T988] usb 4-1: config 0 has no interfaces?
[  514.118922][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.118944][  T988] usb 4-1: Product: syz
[  514.118957][  T988] usb 4-1: Manufacturer: syz
[  514.118971][  T988] usb 4-1: SerialNumber: syz
[  514.124914][  T988] usb 4-1: config 0 descriptor??
[  514.193451][ T5675] usb 1-1: Using ep0 maxpacket: 16
[  514.265010][ T5675] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  514.266229][ T5675] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7
[  514.268954][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.268976][ T5675] usb 1-1: Product: syz
[  514.269013][ T5675] usb 1-1: Manufacturer: syz
[  514.269027][ T5675] usb 1-1: SerialNumber: syz
[  514.557790][ T5675] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  514.588180][ T5675] usb 1-1: USB disconnect, device number 95
[  514.700186][ T5743] playstation 0003:054C:09CC.0032: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0
[  514.821761][ T5743] playstation 0003:054C:09CC.0032: Failed to retrieve feature with reportID 18: -71
[  514.821788][ T5743] playstation 0003:054C:09CC.0032: Failed to retrieve DualShock4 pairing info: -71
[  514.821839][ T5743] playstation 0003:054C:09CC.0032: Failed to get MAC address from DualShock4
[  514.821854][ T5743] playstation 0003:054C:09CC.0032: Failed to create dualshock4.
[  514.871254][ T5743] playstation 0003:054C:09CC.0032: probe with driver playstation failed with error -71
[  514.914342][ T5743] usb 2-1: USB disconnect, device number 89
[  515.259488][T12940] fido_id[12940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  515.952481][T12946] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2294'.
[  517.284453][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.697465][ T5702] usb 4-1: USB disconnect, device number 85
[  517.997427][T12965] ipvlan3: entered allmulticast mode
[  518.258855][T12969] loop0: detected capacity change from 0 to 4096
[  518.424343][ T5675] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  518.446909][T12969] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  518.454950][T12969] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  518.454971][T12969] ldm_validate_privheads(): Cannot find PRIVHEAD 2.
[  518.455029][T12969]  loop0:
[  518.574832][ T5675] usb 5-1: Using ep0 maxpacket: 16
[  518.580549][ T5675] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  518.609865][ T5675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  518.631918][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.631941][ T5675] usb 5-1: Product: syz
[  518.631955][ T5675] usb 5-1: Manufacturer: syz
[  518.631968][ T5675] usb 5-1: SerialNumber: syz
[  518.675509][ T5675] usb 5-1: config 0 descriptor??
[  518.720012][ T5675] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  518.720783][ T5675] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  518.844296][ T5743] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  519.003042][ T5743] usb 2-1: Using ep0 maxpacket: 16
[  519.013112][ T5743] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  519.027522][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.027565][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  519.034130][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.034222][ T5743] usb 2-1: Product: syz
[  519.034236][ T5743] usb 2-1: Manufacturer: syz
[  519.034250][ T5743] usb 2-1: SerialNumber: syz
[  519.083702][ T5743] usb 2-1: config 0 descriptor??
[  519.151590][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2300'.
[  519.247384][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'.
[  519.366446][ T5675] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  519.456195][ T5675] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  519.456224][ T5675] em28xx 5-1:0.0: board has no eeprom
[  519.559729][ T5675] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  519.559755][ T5675] em28xx 5-1:0.0: dvb set to bulk mode.
[  519.560802][ T5743] em28xx 5-1:0.0: Binding DVB extension
[  519.607420][ T5675] usb 5-1: USB disconnect, device number 121
[  519.638062][ T5675] em28xx 5-1:0.0: Disconnecting em28xx
[  519.911913][ T5743] em28xx 5-1:0.0: Registering input extension
[  519.920713][ T5675] em28xx 5-1:0.0: Closing input extension
[  519.953189][ T5675] em28xx: Freeing device
[  520.866078][T12995] netlink: 'syz.4.2308': attribute type 4 has an invalid length.
[  521.737119][ T5743] usb 2-1: USB disconnect, device number 90
[  522.424356][ T5743] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  522.576659][ T5743] usb 2-1: Using ep0 maxpacket: 32
[  522.577373][ T5743] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  522.579371][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.579392][ T5743] usb 2-1: config 0 has no interfaces?
[  522.582026][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.582048][ T5743] usb 2-1: Product: syz
[  522.582061][ T5743] usb 2-1: Manufacturer: syz
[  522.582074][ T5743] usb 2-1: SerialNumber: syz
[  522.674973][ T5743] usb 2-1: config 0 descriptor??
[  522.724326][T11876] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  522.806220][ T5675] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  522.884288][T11876] usb 3-1: Using ep0 maxpacket: 16
[  522.885247][T11876] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  522.886830][T11876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  522.892525][T11876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.892547][T11876] usb 3-1: Product: syz
[  522.892561][T11876] usb 3-1: Manufacturer: syz
[  522.892574][T11876] usb 3-1: SerialNumber: syz
[  522.950475][T11876] usb 3-1: config 0 descriptor??
[  522.964320][ T5675] usb 1-1: Using ep0 maxpacket: 8
[  522.966762][ T5675] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  522.992653][ T5675] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  522.992676][ T5675] usb 1-1: config 0 has no interface number 0
[  522.992713][ T5675] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  522.992733][ T5675] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  522.992756][ T5675] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  522.992779][ T5675] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  522.992818][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.116323][T11876] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  523.116354][T11876] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  523.153246][ T5675] usb 1-1: config 0 descriptor??
[  523.445723][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.127823][ T5675] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  524.145591][ T5675] usb 1-1: USB disconnect, device number 96
[  524.150981][ T5675] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  524.828003][T13006] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2312'.
[  524.829565][   T52] Bluetooth: hci4: Unable to find connection for big 0x00
[  524.855295][T13011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2312'.
[  524.855315][T13011] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  524.885194][T11876] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  524.907880][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'.
[  525.490701][T11876] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  525.490732][T11876] em28xx 3-1:0.0: board has no eeprom
[  525.534356][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.535733][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.732156][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'.
[  526.500071][T13019] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2315'.
[  526.503604][ T5675] usb 2-1: USB disconnect, device number 91
[  526.624332][T11876] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  526.624360][T11876] em28xx 3-1:0.0: dvb set to bulk mode.
[  526.625315][  T988] em28xx 3-1:0.0: Binding DVB extension
[  528.884519][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.444798][T11876] usb 3-1: USB disconnect, device number 102
[  533.446439][T11876] em28xx 3-1:0.0: Disconnecting em28xx
[  533.607872][  T988] em28xx 3-1:0.0: Registering input extension
[  533.608142][T11876] em28xx 3-1:0.0: Closing input extension
[  533.679680][T13032] openvswitch: netlink: Missing key (keys=d0, expected=200000)
[  533.802335][T13035] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  533.868010][T11876] em28xx: Freeing device
[  533.969095][   T31] audit: type=1800 audit(1791401722.041:1359): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2319" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  534.096799][  T988] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  536.084506][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.547241][  T988] usb 5-1: Using ep0 maxpacket: 16
[  538.204076][  T988] usb 5-1: device descriptor read/all, error -71
[  538.773322][T13056] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  539.476707][T13065] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  539.924627][  T988] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  539.965207][T12355] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  540.024436][ T5702] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[  540.074274][  T988] usb 3-1: Using ep0 maxpacket: 16
[  540.074995][  T988] usb 3-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa
[  540.077952][  T988] usb 3-1: config 6 has an invalid interface number: 105 but max is 0
[  540.077966][  T988] usb 3-1: config 6 has no interface number 0
[  540.077983][  T988] usb 3-1: config 6 interface 105 has no altsetting 0
[  540.079642][  T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.079655][  T988] usb 3-1: Product: syz
[  540.079662][  T988] usb 3-1: Manufacturer: syz
[  540.079670][  T988] usb 3-1: SerialNumber: syz
[  540.099250][  T833] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  540.166223][T12355] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  540.167378][T12355] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  540.167404][T12355] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  540.167426][T12355] usb 2-1: config 0 interface 0 has no altsetting 0
[  540.168371][T12355] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  540.168385][T12355] usb 2-1: Manufacturer: syz
[  540.174127][T12355] usb 2-1: config 0 descriptor??
[  540.234345][ T5702] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16
[  540.235623][ T5702] usb 5-1: config 2 has an invalid interface number: 49 but max is 1
[  540.235646][ T5702] usb 5-1: config 2 has an invalid interface number: 116 but max is 1
[  540.235663][ T5702] usb 5-1: config 2 has no interface number 0
[  540.235678][ T5702] usb 5-1: config 2 has no interface number 1
[  540.235725][ T5702] usb 5-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  540.235751][ T5702] usb 5-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64
[  540.235776][ T5702] usb 5-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  540.235800][ T5702] usb 5-1: config 2 interface 49 has no altsetting 0
[  540.235816][ T5702] usb 5-1: config 2 interface 116 has no altsetting 0
[  540.237697][T12355] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  540.238402][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.238424][ T5702] usb 5-1: Product: syz
[  540.238437][ T5702] usb 5-1: Manufacturer: syz
[  540.238450][ T5702] usb 5-1: SerialNumber: syz
[  540.245611][  T833] usb 4-1: Using ep0 maxpacket: 16
[  540.263171][  T833] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  540.295379][  T833] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  540.336015][  T988] uvcvideo 3-1:6.105: Found Unit with invalid ID 0
[  540.337758][  T988] uvcvideo 3-1:6.105: probe with driver uvcvideo failed with error -22
[  540.343551][  T988] usb 3-1: USB disconnect, device number 103
[  540.353747][T13041] udevd[13041]: setting mode of /dev/bus/usb/003/103 to 020664 failed: No such file or directory
[  540.357414][T13041] udevd[13041]: setting owner of /dev/bus/usb/003/103 to uid=0, gid=0 failed: No such file or directory
[  540.425186][  T833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.425240][  T833] usb 4-1: Product: syz
[  540.425260][  T833] usb 4-1: Manufacturer: syz
[  540.425273][  T833] usb 4-1: SerialNumber: syz
[  540.466039][  T833] usb 4-1: config 0 descriptor??
[  540.485379][ T5702] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.49/input/input51
[  540.877875][T13077] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2336'.
[  541.194286][  T988] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  541.344230][  T988] usb 3-1: Using ep0 maxpacket: 16
[  541.345024][  T988] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  541.345850][  T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  541.347645][  T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.347666][  T988] usb 3-1: Product: syz
[  541.347680][  T988] usb 3-1: Manufacturer: syz
[  541.347693][  T988] usb 3-1: SerialNumber: syz
[  541.352812][  T988] usb 3-1: config 0 descriptor??
[  541.407326][  T988] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  541.407357][  T988] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  541.601897][ T4968] bcm5974 5-1:2.49: could not read from device
[  541.605270][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.625820][ T4968] bcm5974 5-1:2.49: could not read from device
[  541.652793][ T4968] bcm5974 5-1:2.49: could not read from device
[  541.659835][ T5702] usb 5-1: USB disconnect, device number 124
[  541.964095][  T988] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  542.094258][ T5702] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  542.255167][ T5702] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  542.258553][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.260876][ T5702] usb 5-1: config 0 descriptor??
[  542.377146][  T988] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  542.377167][  T988] em28xx 3-1:0.0: board has no eeprom
[  542.381445][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.382999][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.657778][  T988] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  542.657796][  T988] em28xx 3-1:0.0: dvb set to bulk mode.
[  542.658475][T11876] em28xx 3-1:0.0: Binding DVB extension
[  542.683785][  T988] usb 3-1: USB disconnect, device number 104
[  542.698397][  T988] em28xx 3-1:0.0: Disconnecting em28xx
[  542.714300][ T5743] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  542.755364][T11876] em28xx 3-1:0.0: Registering input extension
[  542.764072][  T988] em28xx 3-1:0.0: Closing input extension
[  542.774231][ T5702] usb 2-1: USB disconnect, device number 92
[  542.840956][  T988] em28xx: Freeing device
[  542.867113][ T5743] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  542.873034][ T5743] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  542.873058][ T5743] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  542.907700][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.907724][ T5743] usb 1-1: Product: syz
[  542.907738][ T5743] usb 1-1: Manufacturer: syz
[  542.907751][ T5743] usb 1-1: SerialNumber: syz
[  543.011274][ T5702] usb 4-1: USB disconnect, device number 86
[  543.130541][ T5743] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  543.148850][T13114] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  543.271728][T13118] fuse: Unknown parameter 'g‚oup_id'
[  543.379647][T13122] netlink: 964 bytes leftover after parsing attributes in process `syz.3.2348'.
[  543.379668][T13122] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  543.443920][T13124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2349'.
[  543.589753][ T5702] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  543.667511][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.667925][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.764518][ T5702] usb 2-1: Using ep0 maxpacket: 32
[  543.767451][ T5702] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  543.769770][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.772260][ T5702] usb 2-1: config 0 descriptor??
[  543.802823][ T5702] as10x_usb: device has been detected
[  543.803861][ T5702] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  543.873526][ T5702] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  543.995778][T13140] xt_TCPMSS: Only works on TCP SYN packets
[  544.034082][ T5702] as10x_usb: error during firmware upload part1
[  544.034123][ T5702] Registered device nBox DVB-T Dongle
[  544.070786][T13120] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  544.071059][T13120] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  544.079472][T13120] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  544.079683][T13120] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  544.079844][T13120] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  544.122892][ T5702] usb 2-1: USB disconnect, device number 93
[  544.228276][ T5702] Unregistered device nBox DVB-T Dongle
[  544.233083][ T5702] as10x_usb: device has been disconnected
[  544.553017][T13158] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  544.847557][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'.
[  544.877443][ T5743] usb 5-1: USB disconnect, device number 125
[  544.969024][   T31] audit: type=1326 audit(1791401733.041:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13167 comm="syz.2.2362" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e4519e199 code=0x0
[  545.038545][   T31] audit: type=1326 audit(1791401733.111:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13172 comm="syz.3.2364" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f620199e199 code=0x0
[  545.146290][T13176] ipvlan3: entered allmulticast mode
[  545.234660][ T5743] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  545.364642][ T5743] usb 5-1: device descriptor read/64, error -71
[  545.504695][   T31] audit: type=1800 audit(1791401733.571:1362): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2368" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  545.504846][ T5702] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  545.604267][ T5743] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  545.667193][T12355] usb 1-1: USB disconnect, device number 97
[  545.669132][ T5702] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  545.669998][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.705557][T12355] usblp0: removed
[  545.733579][ T5702] usb 3-1: config 0 descriptor??
[  545.744296][ T5743] usb 5-1: device descriptor read/64, error -71
[  545.749228][T13191] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  545.854491][ T5743] usb usb5-port1: attempt power cycle
[  546.084477][T13144] Bluetooth: hci4: command 0x0c1a tx timeout
[  546.084514][T13144] Bluetooth: hci2: command 0x0c1a tx timeout
[  546.084538][T13144] Bluetooth: hci3: command 0x0c1a tx timeout
[  546.084564][T13144] Bluetooth: hci1: command 0x0c1a tx timeout
[  546.084607][T13144] Bluetooth: hci0: command 0x0c1a tx timeout
[  546.180655][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'.
[  546.180679][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'.
[  546.180767][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'.
[  546.202753][ T5743] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  546.225244][ T5743] usb 5-1: device descriptor read/8, error -71
[  546.234329][T11876] usb 2-1: new low-speed USB device number 94 using dummy_hcd
[  546.395098][T11876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  546.398102][T11876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  546.398125][T11876] usb 2-1: config 0 has no interface number 0
[  546.398160][T11876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  546.398191][T11876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  546.398227][T11876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.442155][T11876] usb 2-1: config 0 descriptor??
[  546.453653][T13193] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  546.486387][ T5743] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  546.489185][T11876] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  546.514353][ T5743] usb 5-1: device descriptor read/8, error -71
[  546.577144][T13205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2373'.
[  546.624610][ T5743] usb usb5-port1: unable to enumerate USB device
[  546.722884][T13207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2374'.
[  546.779464][  T833] usb 2-1: USB disconnect, device number 94
[  546.990526][T13215] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2377'.
[  547.076321][ T5743] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  547.117691][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.173233][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.225019][ T5743] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  547.226577][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.229748][ T5743] usb 4-1: config 0 descriptor??
[  547.261003][ T5743] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  547.263114][ T5743] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  547.285824][T13218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.364484][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.435090][ T5668] usb 4-1: USB disconnect, device number 87
[  547.544553][ T5743] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  547.624364][  T833] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  547.694736][ T5743] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  547.695863][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.698143][ T5743] usb 1-1: config 0 descriptor??
[  547.825226][  T833] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  547.826561][  T833] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  547.826578][  T833] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  547.826599][  T833] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  547.826662][  T833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.831153][T13220] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  547.904546][ T5743] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  547.921929][ T5702] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  547.929863][ T5702] [drm:udl_init] *ERROR* Selecting channel failed
[  547.961988][ T5702] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[  547.962011][ T5702] [drm] Initialized udl on minor 1
[  547.963417][ T5702] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  547.964069][ T5702] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  547.992507][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  547.993291][ T5668] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  547.993527][ T5668] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  548.027093][ T5702] usb 3-1: USB disconnect, device number 105
[  548.120223][   T31] audit: type=1326 audit(1791401736.191:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.2.2380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e4519e199 code=0x0
[  548.191068][ T5743] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  548.191092][ T5743] [drm] Initialized udl on minor 2
[  548.310601][T13217] loop5: detected capacity change from 0 to 7
[  548.327561][T13217]  loop5: p1 < > p3 p4
[  548.327586][T13217] loop5: partition table partially beyond EOD, truncated
[  548.330828][T13217] loop5: p3 size 3645588866 extends beyond EOD, truncated
[  548.346288][T13217] loop5: p4 start 33554432 is beyond EOD, truncated
[  548.368233][ T5743] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  548.368661][ T5743] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  548.395864][ T5743] usb 1-1: USB disconnect, device number 98
[  548.397275][  T988] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  548.403366][  T988] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  548.403561][  T988] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  548.461131][T13083] udevd[13083]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  548.470040][T13041] udevd[13041]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  548.495969][   T25] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  548.622548][   T31] audit: type=1800 audit(1791401736.691:1364): pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2386" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0
[  548.645677][   T25] usb 4-1: Using ep0 maxpacket: 8
[  548.647226][   T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  548.648148][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.674686][   T25] pvrusb2: Hardware description: Terratec Grabster AV400
[  548.674700][   T25] pvrusb2: **********
[  548.674707][   T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  548.674717][   T25] pvrusb2: Important functionality might not be entirely working.
[  548.674726][   T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  548.674735][   T25] pvrusb2: **********
[  548.707332][  T833] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  548.738493][  T833] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input53
[  548.899373][ T2341] pvrusb2: Invalid write control endpoint
[  549.134568][T13230] pvrusb2: Invalid write control endpoint
[  549.147732][ T5743] usb 4-1: USB disconnect, device number 88
[  549.157911][ T2341] pvrusb2: Invalid write control endpoint
[  549.157922][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  549.157931][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  549.157939][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  549.157948][ T2341] pvrusb2: Device being rendered inoperable
[  549.170653][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  549.170702][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  549.173202][ T2341] pvrusb2: Attached sub-driver cx25840
[  549.173214][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  549.173223][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  549.224242][   T25] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  549.374937][   T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  549.375996][   T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  549.376018][   T25] usb 5-1: config 0 has no interface number 0
[  549.376054][   T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  549.376076][   T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  549.376098][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.383148][   T25] usb 5-1: config 0 descriptor??
[  549.383866][T13241] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  549.403671][   T25] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  549.544637][   T31] audit: type=1326 audit(1791401737.621:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13247 comm="syz.2.2389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e4519e199 code=0x0
[  549.564296][T11876] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  549.666938][ T5743] usb 5-1: USB disconnect, device number 4
[  549.715156][T11876] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  549.716253][T11876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.722313][T11876] usb 1-1: config 0 descriptor??
[  550.094438][T13259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2379'.
[  550.426770][T13266] fuse: Unknown parameter 'group_id™00000000000000000000'
[  550.540200][T13271] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2396'.
[  550.561241][T13272] netlink: 'syz.2.2395': attribute type 10 has an invalid length.
[  550.630368][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'.
[  550.630391][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2397'.
[  550.706854][T13280] openvswitch: netlink: Key type 4359 is out of range max 32
[  551.186556][  T833] usb 2-1: USB disconnect, device number 95
[  551.186682][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  551.328498][   T31] audit: type=1326 audit(1791401739.401:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.3.2405" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f620199e199 code=0x0
[  551.470409][   T31] audit: type=1326 audit(1791401739.541:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.471954][   T31] audit: type=1326 audit(1791401739.541:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.471998][   T31] audit: type=1326 audit(1791401739.541:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.472179][   T31] audit: type=1326 audit(1791401739.541:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.472570][   T31] audit: type=1326 audit(1791401739.541:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.472793][   T31] audit: type=1326 audit(1791401739.541:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.472919][   T31] audit: type=1326 audit(1791401739.541:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.473052][   T31] audit: type=1326 audit(1791401739.541:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.474738][   T31] audit: type=1326 audit(1791401739.541:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.2407" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d5f59e199 code=0x7ffc0000
[  551.775524][T13307] openvswitch: netlink: Missing key (keys=d0, expected=200000)
[  551.845710][T13309] ip6t_srh: unknown srh invflags 4000
[  551.877823][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  551.913405][T13314] bridge2: entered promiscuous mode
[  551.913418][T13314] bridge2: entered allmulticast mode
[  552.349129][  T833] usb 1-1: USB disconnect, device number 99
[  552.404439][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.498910][T13335] openvswitch: netlink: Key type 8199 is out of range max 32
[  552.792778][T13345] netlink: 'syz.3.2419': attribute type 10 has an invalid length.
[  553.414484][  T988] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  553.414617][ T5743] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  553.564327][  T988] usb 1-1: Using ep0 maxpacket: 32
[  553.564937][ T5743] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  553.565863][  T988] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  553.566685][ T5743] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  553.566775][ T5743] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  553.566801][ T5743] usb 2-1: config 0 interface 0 has no altsetting 0
[  553.566831][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.567555][  T988] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  553.567575][  T988] usb 1-1: config 0 has no interface number 0
[  553.589433][ T5743] usb 2-1: config 0 descriptor??
[  553.590433][T13347] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  553.613719][  T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.613742][  T988] usb 1-1: Product: syz
[  553.613756][  T988] usb 1-1: Manufacturer: syz
[  553.613770][  T988] usb 1-1: SerialNumber: syz
[  553.735551][  T988] usb 1-1: config 0 descriptor??
[  553.746705][  T988] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  554.146317][T13351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.803958][  T988] usb 1-1: qt2_attach - failed to power on unit: -110
[  560.827974][  T988] quatech2 1-1:0.51: probe with driver quatech2 failed with error -110
[  561.312936][    C0] sched: DL replenish lagged too much
[  561.569378][ T5743] usbhid 2-1:0.0: can't add hid device: -32
[  561.569498][ T5743] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  563.811227][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  563.818692][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  565.849044][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.371917][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.288180][T13351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.652469][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.367417][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.046192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.130600][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.527212][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.664459][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  625.678530][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  633.372218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.728172][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.451328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.085055][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.808767][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.366637][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.844981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.815471][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  692.010969][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  703.049484][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  709.293417][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.004638][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.251459][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.407831][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.767234][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.966753][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.708166][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  749.715438][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  753.769924][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.170695][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.204728][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.684474][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  808.698775][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  827.525271][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.194035][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  832.201009][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13341/1:b..l
[  832.209019][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=88769, q=6740 ncpus=2)
[  832.216841][    C0] task:syz.2.2420      state:R  running task     stack:23512 pid:13341 tgid:13339 ppid:5630   task_flags:0x400040 flags:0x00080002
[  832.230343][    C0] Call Trace:
[  832.233627][    C0]  <TASK>
[  832.236565][    C0]  __schedule+0x17db/0x58f0
[  832.241112][    C0]  ? __pfx___schedule+0x10/0x10
[  832.245999][    C0]  preempt_schedule_irq+0x4b/0x90
[  832.251039][    C0]  irqentry_exit+0x14f/0x920
[  832.255648][    C0]  ? trace_irq_disable+0x3b/0x140
[  832.260688][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  832.266675][    C0] RIP: 0010:kasan_check_range+0x1ca/0x2c0
[  832.272410][    C0] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 1a 4c b2 09 cc 45 84 ff 0f 85 a1 00 00 00
[  832.292018][    C0] RSP: 0018:ffffc90004ebefa8 EFLAGS: 00000256
[  832.298096][    C0] RAX: ffffffff822f1101 RBX: ffffea0001a42d00 RCX: ffffffff822f1123
[  832.306080][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001a42d00
[  832.314067][    C0] RBP: 000020000002e000 R08: ffffea0001a42d07 R09: 1ffffd40003485a0
[  832.322046][    C0] R10: dffffc0000000000 R11: fffff940003485a1 R12: dffffc0000000000
[  832.330022][    C0] R13: 1ffffd40003485a1 R14: fffff940003485a1 R15: 1ffffd40003485a0
[  832.338008][    C0]  ? free_swap_cache+0x41/0x300
[  832.342881][    C0]  ? free_swap_cache+0x63/0x300
[  832.347759][    C0]  free_swap_cache+0x63/0x300
[  832.352461][    C0]  __collapse_huge_page_copy+0x7eb/0xc70
[  832.358128][    C0]  collapse_single_pmd+0x2ea7/0x3c50
[  832.363427][    C0]  ? lock_acquire+0x115/0x350
[  832.368131][    C0]  ? collapse_single_pmd+0x1afe/0x3c50
[  832.373615][    C0]  ? __pfx_collapse_single_pmd+0x10/0x10
[  832.379261][    C0]  ? __flush_work+0xb05/0xca0
[  832.383979][    C0]  ? __mutex_unlock_slowpath+0x731/0x900
[  832.389635][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  832.395635][    C0]  ? flush_work+0xd/0x30
[  832.399901][    C0]  ? __lru_add_drain_all+0x601/0x7a0
[  832.405197][    C0]  madvise_collapse+0x2cf/0x790
[  832.410070][    C0]  madvise_vma_behavior+0x1174/0x41d0
[  832.415468][    C0]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  832.421199][    C0]  ? __lock_acquire+0x747/0x2de0
[  832.426159][    C0]  ? __lock_acquire+0x747/0x2de0
[  832.431114][    C0]  ? __lock_acquire+0x747/0x2de0
[  832.436074][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  832.441120][    C0]  ? rcu_is_watching+0x16/0xb0
[  832.445901][    C0]  ? trace_hrtimer_start+0x82/0x200
[  832.451108][    C0]  ? hrtimer_start_range_ns_common+0x7cd/0xb60
[  832.457299][    C0]  ? mas_prev_slot+0xb76/0xbf0
[  832.462096][    C0]  ? find_vma_prev+0x123/0x1b0
[  832.466879][    C0]  ? __pfx_find_vma_prev+0x10/0x10
[  832.472014][    C0]  ? __pfx___schedule+0x10/0x10
[  832.476887][    C0]  madvise_walk_vmas+0x576/0xb00
[  832.481851][    C0]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  832.487375][    C0]  ? blk_start_plug+0x6e/0x1b0
[  832.492158][    C0]  madvise_do_behavior+0x385/0x540
[  832.497291][    C0]  ? __pfx_madvise_do_behavior+0x10/0x10
[  832.502952][    C0]  ? down_read+0x2be/0x330
[  832.507385][    C0]  do_madvise+0x327/0x3a0
[  832.511732][    C0]  ? __pfx_do_madvise+0x10/0x10
[  832.516658][    C0]  ? __se_sys_futex+0x3a8/0x450
[  832.521540][    C0]  ? rcu_is_watching+0x16/0xb0
[  832.526328][    C0]  __x64_sys_madvise+0xa6/0xc0
[  832.531111][    C0]  do_syscall_64+0x166/0x520
[  832.535718][    C0]  ? trace_irq_disable+0x3b/0x140
[  832.540752][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.546838][    C0]  ? clear_bhb_loop+0x70/0xc0
[  832.551528][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.557429][    C0] RIP: 0033:0x7f0e4519e199
[  832.561857][    C0] RSP: 002b:00007f0e46045028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  832.570287][    C0] RAX: ffffffffffffffda RBX: 00007f0e45426090 RCX: 00007f0e4519e199
[  832.578278][    C0] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000
[  832.586264][    C0] RBP: 00007f0e452358e0 R08: 0000000000000000 R09: 0000000000000000
[  832.594238][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  832.602211][    C0] R13: 00007f0e45426128 R14: 00007f0e45426090 R15: 00007f0e4554fa48
[  832.610205][    C0]  </TASK>
[  832.613226][    C0] rcu: rcu_preempt kthread starved for 1463 jiffies! g88769 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
[  832.624161][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  832.634134][    C0] rcu: RCU grace-period kthread stack dump:
[  832.640017][    C0] task:rcu_preempt     state:R  running task     stack:27496 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
[  832.653520][    C0] Call Trace:
[  832.656800][    C0]  <TASK>
[  832.659737][    C0]  __schedule+0x17db/0x58f0
[  832.664287][    C0]  ? __pfx___schedule+0x10/0x10
[  832.669151][    C0]  ? lock_acquire+0x115/0x350
[  832.673848][    C0]  ? schedule+0x90/0x2b0
[  832.678114][    C0]  schedule+0x164/0x2b0
[  832.682287][    C0]  schedule_timeout+0x152/0x2c0
[  832.687152][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  832.692538][    C0]  ? __pfx_process_timeout+0x10/0x10
[  832.697839][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  832.703658][    C0]  ? prepare_to_swait_event+0x322/0x350
[  832.709226][    C0]  rcu_gp_fqs_loop+0x30c/0x11f0
[  832.714101][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  832.720267][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  832.725554][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  832.730778][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  832.736601][    C0]  rcu_gp_kthread+0x9e/0x2b0
[  832.741205][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  832.746413][    C0]  ? __kthread_parkme+0x71/0x1f0
[  832.751366][    C0]  ? __kthread_parkme+0x199/0x1f0
[  832.756412][    C0]  kthread+0x38b/0x480
[  832.760491][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  832.765696][    C0]  ? __pfx_kthread+0x10/0x10
[  832.770296][    C0]  ret_from_fork+0x514/0xb70
[  832.774894][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  832.780014][    C0]  ? __switch_to+0xc89/0x1420
[  832.784706][    C0]  ? __pfx_kthread+0x10/0x10
[  832.789307][    C0]  ret_from_fork_asm+0x1a/0x30
[  832.794099][    C0]  </TASK>
[  832.797122][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  832.803451][    C0] CPU: 0 UID: 0 PID: 5955 Comm: kworker/u8:18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  832.814607][    C0] Tainted: [L]=SOFTLOCKUP
[  832.818932][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  832.828988][    C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker
[  832.835947][    C0] RIP: 0010:__sanitizer_cov_trace_switch+0x8c/0x110
[  832.842543][    C0] Code: 84 93 00 00 00 4e 8b 54 ce 10 65 4c 8b 1d ec 89 cd 11 41 f7 c3 00 01 00 ff 74 2c 44 89 db 81 e3 00 01 00 0f 81 fb 00 01 00 00 <0f> 95 c3 41 81 fb 00 00 00 10 41 0f 93 c3 41 08 db 75 bc 41 83 b8
[  832.862155][    C0] RSP: 0018:ffffc900000075b8 EFLAGS: 00000246
[  832.868230][    C0] RAX: 0000000000000002 RBX: 0000000000000100 RCX: 0000000000000005
[  832.876203][    C0] RDX: ffffffff8a0d6bef RSI: ffffffff902ec060 RDI: 0000000000000002
[  832.884181][    C0] RBP: ffffc90000007830 R08: ffff888031931f40 R09: 0000000000000001
[  832.892154][    C0] R10: 00000000ffffffff R11: 8000000000000101 R12: ffff8880346f1190
[  832.900131][    C0] R13: dffffc0000000000 R14: ffffc900000077b0 R15: 1ffff110068de232
[  832.908111][    C0] FS:  0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000
[  832.917046][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  832.923633][    C0] CR2: 00007f290aa4284f CR3: 000000000eb48000 CR4: 00000000003526f0
[  832.931611][    C0] Call Trace:
[  832.934891][    C0]  <IRQ>
[  832.937740][    C0]  nft_do_chain+0x13af/0x1b10
[  832.942442][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[  832.947760][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  832.952837][    C0]  nft_do_chain_inet+0x360/0x4b0
[  832.957797][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  832.963271][    C0]  ? nf_nat_ipv6_local_in+0x157/0x660
[  832.968658][    C0]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  832.974391][    C0]  ? lock_acquire+0x115/0x350
[  832.979081][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  832.984560][    C0]  nf_hook_slow+0xc5/0x220
[  832.988992][    C0]  NF_HOOK+0x21f/0x3c0
[  832.993079][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  832.998467][    C0]  ? NF_HOOK+0x9e/0x3c0
[  833.002642][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  833.007254][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  833.012644][    C0]  ip6_input+0x16a/0x270
[  833.016887][    C0]  ? ip6_input+0x23/0x270
[  833.021225][    C0]  NF_HOOK+0x336/0x3c0
[  833.025314][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  833.030525][    C0]  ? NF_HOOK+0x9e/0x3c0
[  833.034698][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  833.039309][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  833.044533][    C0]  process_backlog+0x795/0x18b0
[  833.049400][    C0]  ? call_timer_fn+0xd5/0x5f0
[  833.054094][    C0]  ? process_backlog+0x3de/0x18b0
[  833.059146][    C0]  __napi_poll+0xaa/0x330
[  833.063492][    C0]  net_rx_action+0x61d/0xf50
[  833.068106][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  833.073228][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  833.078451][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  833.083763][    C0]  handle_softirqs+0x226/0x860
[  833.088543][    C0]  ? do_softirq+0x77/0xd0
[  833.092887][    C0]  ? kernel_fpu_end+0x62/0x80
[  833.097576][    C0]  do_softirq+0x77/0xd0
[  833.101751][    C0]  </IRQ>
[  833.104680][    C0]  <TASK>
[  833.107623][    C0]  __local_bh_enable_ip+0x100/0x140
[  833.112835][    C0]  blake2s_compress+0xfa/0x1c00
[  833.117693][    C0]  ? __lock_acquire+0x747/0x2de0
[  833.122649][    C0]  ? __lock_acquire+0x747/0x2de0
[  833.127603][    C0]  ? __asan_memset+0x22/0x50
[  833.132205][    C0]  ? kernel_fpu_begin_mask+0x2bb/0x380
[  833.137678][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  833.143058][    C0]  ? kernel_fpu_end+0x62/0x80
[  833.147752][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[  833.153048][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  833.158267][    C0]  ? kernel_fpu_end+0x62/0x80
[  833.162951][    C0]  ? __local_bh_enable_ip+0xd6/0x140
[  833.168245][    C0]  ? blake2s_compress+0x1b4d/0x1c00
[  833.173461][    C0]  blake2s_final+0x10f/0x260
[  833.178063][    C0]  hmac+0x204/0x3b0
[  833.181883][    C0]  ? __pfx_hmac+0x10/0x10
[  833.186230][    C0]  ? curve25519_generate_public+0x2fed/0x3050
[  833.192323][    C0]  ? __asan_memset+0x22/0x50
[  833.196931][    C0]  message_ephemeral+0x255/0x310
[  833.201886][    C0]  ? __pfx_message_ephemeral+0x10/0x10
[  833.207381][    C0]  ? down_read+0x2be/0x330
[  833.211809][    C0]  wg_noise_handshake_create_initiation+0x24f/0x810
[  833.218412][    C0]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  833.225534][    C0]  ? __lock_acquire+0x747/0x2de0
[  833.230501][    C0]  ? __lock_acquire+0x747/0x2de0
[  833.235456][    C0]  ? lock_acquire+0x115/0x350
[  833.240151][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  833.246145][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  833.251358][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  833.257352][    C0]  ? ktime_get_coarse_with_offset+0x102/0x150
[  833.263431][    C0]  wg_packet_handshake_send_worker+0x18c/0x370
[  833.269598][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  833.274639][    C0]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  833.281352][    C0]  ? rcu_is_watching+0x16/0xb0
[  833.286135][    C0]  ? process_scheduled_works+0x97a/0x1630
[  833.291868][    C0]  process_scheduled_works+0xc3d/0x1630
[  833.297454][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  833.303452][    C0]  ? assign_work+0x3cf/0x5d0
[  833.308063][    C0]  worker_thread+0xa47/0xfb0
[  833.312691][    C0]  kthread+0x38b/0x480
[  833.316773][    C0]  ? __pfx_worker_thread+0x10/0x10
[  833.321902][    C0]  ? __pfx_kthread+0x10/0x10
[  833.326512][    C0]  ret_from_fork+0x514/0xb70
[  833.331121][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  833.336242][    C0]  ? __switch_to+0xc89/0x1420
[  833.340942][    C0]  ? __pfx_kthread+0x10/0x10
[  833.345546][    C0]  ret_from_fork_asm+0x1a/0x30
[  833.350348][    C0]  </TASK>