last executing test programs:

3m54.901942904s ago: executing program 0 (id=1208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2004}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x4000000}}, 0xb4}}, 0x0)

3m54.7558811s ago: executing program 0 (id=1209):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000580)={r0, 0x8001, 0x1ff, 0x1})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x3c8, 0x250, 0xb, 0x148, 0x0, 0x148, 0x330, 0x240, 0x240, 0x330, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {0xff}, {}, 0x11}, 0x2e8, 0x1f0, 0x250, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'wlan1\x00', {0x58c5, 0xffff, 0x40, 0x3, 0x2, 0x9, 0x2, 0xf, 0x18}, {0x2}}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x6, 0x83, [0x24, 0x2, 0x1e, 0xf, 0x2b, 0x1d, 0xe, 0x11, 0x3b, 0x36, 0x2b, 0xf, 0x5, 0x17, 0x3b, 0x17], 0x2, 0x7, 0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8fd67d86, 0xb, '\x00', {0xdf3f}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000540)={0x2, 0x3, 0x3})
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
close(r0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0xf, 0x2c436529, 0x0})

3m53.25820291s ago: executing program 0 (id=1217):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0})
get_mempolicy(0x0, &(0x7f0000000100), 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
fsopen(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffff59}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x129541, 0x0)

3m51.640349248s ago: executing program 0 (id=1226):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x120)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x0, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @rand_addr=' \x01\x00', [0x0, 0x0, 0x0, 0xff], [], 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0x84}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x800000000002}, {0x7f}], 0x2, 0x2}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0x800000ff], @ipv4=@rand_addr=0x64010100, [0x0, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@multicast2, [0xff, 0xffffff00, 0xff000000, 0xff000000], 0x36, 0x7ff, 0x32, 0x4e24, 0x4e22, 0x4e23, 0x4e23, 0x12, 0x2010}, 0x40, 0xb0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x9, 0x81, 'snmp\x00', 'syz1\x00', {0x400000000000}}}}, {{@ipv6={@empty, @private0, [0xffffff00, 0xffffff00, 0xff, 0xff], [0xff, 0x0, 0xffffff00, 0xff], 'macvlan0\x00', 'pim6reg0\x00', {}, {0xff}, 0xf8, 0x9, 0x6, 0x1c}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x4}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x5df, 0x5, 0x50, 0x0, 0x2, 0x1804, 0x6, 0x3, 0x40}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3m50.72010916s ago: executing program 0 (id=1230):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1)
r0 = io_uring_setup(0x7349, &(0x7f00000007c0)={0x0, 0x6b71, 0x40, 0x0, 0xfffffd})
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r3, 0x3, 0x0)
getdents64(r3, &(0x7f0000003440)=""/92, 0x5c)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000100))
r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@migrate={0x50, 0x27, 0x1, 0x4, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa5}, 0x0, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000012d133e60"], 0x68}}, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000240)={0x1, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0x6, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x27], 0x0, 0x2})

3m50.237088876s ago: executing program 0 (id=1233):
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00')
setns(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/vmcoreinfo', 0x4003, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5127, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @ldst={0x3, 0x3, 0x0, 0x0, 0x2, 0xa0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x9]}})
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd792180000000000bc201000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0xf6, @mcast1, 0x6}], 0x2c)

3m49.973929679s ago: executing program 32 (id=1233):
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00')
setns(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/vmcoreinfo', 0x4003, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5127, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @ldst={0x3, 0x3, 0x0, 0x0, 0x2, 0xa0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x9]}})
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffffd792180000000000bc201000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000000000000005348619893ad1f4730a010400000000000000000a0000040900010073797a31000000000800054000000002000008000a40fffffffc08000340000000100c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000000a050000000000000000000a000004140000001100010000000000000000000100000aad69b3109abec5a9f0eaa4b3f61bd8e6896a63e88cc8fd3e79e7641a599320650e3fda6545459b65fd81968d6869a0e42423254d0db08f5c4c2b3bdae01f4d8296ba599f6a95e2ec587c2672b4b16dce301f6dbb15235979a3b13338dc72468616f538729bcd0d807d862c83a28456a33d13ed7abdc83b87dcb888ad1046c0d8705416d3221d4d8e81d8e7ae0a0202c8bf670e474e5cacdecfb828dd56654edd8e457dbd6b5db7633df57d75505dbf4055528edb95a176079cccc51e6c3f8da8c6592efcf8c974654545ed012c90ec32d98bbebff4e728b9d3e5f24445fcb3e3c8583bc04a34ffe400000000000000000000000000dd000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0xf6, @mcast1, 0x6}], 0x2c)

8.828457201s ago: executing program 2 (id=2347):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80000001, 0x82080)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x9c})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
sendmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f83fad9168be3cb66dcb11fa2dcac0d312", 0x20}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="c82a7287c5d17b22540e7fb0fd08a97177b68e1f0a5bea2a67050e2471069e3f56205aa3235a93e194cab3bc9f5d226cf7436386453708e05aa2fb4ac9e327b0f8a8980df9d961d7afe222f42d46fcff8b563da92c35ce2d936b62a7643d24e6", 0x60}, {0x0, 0xf00}, {&(0x7f0000000800)="cbb8371b27d923d576288b4e0504dccf8b8c82da89c28886f02d4ee2c16e792dea07a72dcd74669ca36aa01f77061f91143da33b01cae15a954803bf90447e6f1a575e468a5960364287dcb62dc4c9bfc5038b2c77d682b706dacbd6cccb46c27a4877cdf19374e06faecbdeba86105a8fe444780c03dc24d00ab4baa12c67f77ced2ce7b09fe73cbb30135a02398298d019976041fccf81987882", 0x9b}], 0x4, 0x0, 0x0, 0x40000}}], 0x2, 0xc000) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
r4 = accept4$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) (async, rerun: 64)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0x0, '\x00', r5}, 0x9)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async)
recvmmsg(r3, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)

8.58642181s ago: executing program 2 (id=2348):
syz_usb_connect(0x5, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a152412"], 0x0)

7.189962044s ago: executing program 2 (id=2355):
socket$netlink(0x10, 0x3, 0x8)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0xf9)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r2})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x80000002}, 0x8)
ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x47d9, 0x8, 0x6, 0xc})
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={<r5=>0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x8fe2}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000480)={r5, 0x0, 0xf}, 0x8)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000240)="0f06dbe10f20d835080000000f22d8c4c12571d57cc4e2793c9f1800000026360f01c066baf80cb88421968eef66bafc0ced660f3882155a9500000f01c20f0092f4000000", 0x45}], 0x1, 0x20, &(0x7f0000000340)=[@cstype3={0x5, 0x7}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x489, 0x0, 0x1fffffffff}]})
close(0x3)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r10, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000004c1178504635bb2500000000"], 0x18}, 0x440e0)
r11 = io_uring_setup(0x1085, &(0x7f0000000180)={0x0, 0xdaa0, 0x8, 0x1, 0x400})
io_uring_setup(0x1b7b, &(0x7f0000000100)={0x0, 0x970, 0x1f680, 0x0, 0x39c, 0x0, r11})
fspick(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

6.637532992s ago: executing program 2 (id=2361):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c010000100007000000000000000000fc0100000000000000000000000000feab1414fdffffffffff003bf54e200c1a00000004020020000200000020000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e0000001000000000000000000000000ffffffff2b000000fc00000000000000000000000000000000000000000000000900000000000000020000000000000000000000000000000000001000000000ffffffffffffffff0300000000000000000000000000000003000000000000000000200000000000070000000000000000000000000000000000040001000000e80a000000000000000000000200020034000000000000001c0004"], 0x10c}}, 0x0)

6.536702421s ago: executing program 2 (id=2362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="12011002000000208205820540001d02030109026e000301be0000080b0001012130810904000000010130000a2403020a088100000009040100000102300009040101010102300009050109000200fe983a2ebd3d00000010070009040200000102300009040217d5300009058209200006800a0a252506000000010300"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000016002109000000010000000000000007cf0a000000", @ANYRES32=0x0], 0x18}}, 0x94)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
shutdown(r3, 0x1)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x23})
r5 = timerfd_create(0x7, 0x800)
ppoll(&(0x7f0000000040)=[{r5, 0x8000}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a100)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001bc0)="f8733ab9b4", 0x5}, {&(0x7f0000000040)="d952bcf0", 0x4}, {&(0x7f0000001cc0)="dbfab3", 0x3}, {&(0x7f0000001d00)='l', 0x1}, {&(0x7f0000000300)="9c3bd309a22a935c34dda949dacf87d3a6274b5807cc20d1c2ec748412886c66fb1f018730e99e396de89567558a697e42563428d9ac93cab9ee513b6c7796465d1cade9b1cf4db2f32c80e894d4cfb465b78f084b824d4f321caa6b7290026bab03a0b77093fc7a762923a914bbf47f55f5af034b1bb6dd10ec6849d6", 0x7d}, {&(0x7f0000001e00)="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", 0xfffffffffffffe59}, {&(0x7f0000002e00)="8442a950090d42f38d12789e297a8bf65a3ebf4f0c4a9bf5f4912417e179fa683ef7286a37a321e3f05e7c849de0f111306b57f624992d59d2e069972dd7086c9aa12c4e5f3c8fe7fd42c4b591e787b4ec0a20aac11e5516a7066abf2e062610c84facab40d3de317c3de573ba919d61b145c4287780bce7db3c4578b7175c2feaab83da3398208c1e3893246a9b74e283", 0x91}], 0x7, 0x0, 0x0, 0x4004}}], 0x1, 0x20000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r6 = dup3(r0, r1, 0x0)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"])
io_uring_setup(0x68dc, &(0x7f0000000280)={0x0, 0x58b6, 0x200, 0x1, 0x180, 0x0, r4})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaf7"], 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x9c}}, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x1, 0x2, 0x1})
sendmsg$kcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="c85252f49e0d2c6ebdbce3c619cd03a5ec52582bbc419c62f36b676804ad4570bf72a4b4823781bb9a640706a5c3c01c2df7c3224432f292302ef8e4a85d41ef0ae545120746abb35deb8400eb0758af15c76b8b98af6163df2a0e8b015c5d3b107f6db60b8968d497334bfeeaa213653fbcb0f87f9573b01f64edd21d4335feb57ab03773", 0x85}, {&(0x7f0000000600)="8a63191789ae544e5c8fa76924b95e514470e8e66df44e", 0x17}, {&(0x7f0000000640)="d531bb6357d7081f40106700aba11e05564fe607671b14588fa0d23477f3a6ff11dfc0270a9e4f0a30352da98a6bbc4cb8bf96d055adccdded72c85763362f39d2a0b04e9345a208667939770ce1f488ade7b27be5e9db4c0a00e3ae74341a592f6bcac6705cab45b6fec7798983526e6611777c089fd55f9e2fe9dedb6c85a428ba59f703e0f5c32b98844707726c80b7d0f63a7ff8fdceec990b441d7880dcb92af957cd975ef56eb488061c12750f53abf2abe62be69f05164744c2585a2f4bafbe06dbbefeff1a621947647eb6a838abdbd7fee432247323eca5ed8bad8bd5d83b3adefcbe", 0xe7}, {&(0x7f0000000740)="67e49e9ed8d00089ef10f2f807bb5e5c0cc4531c21ed26f57c2b467f33a07e420d", 0x21}], 0x4, &(0x7f00000007c0)=[{0x60, 0x84, 0x8, "e5bb59080af30a90fc3fc943f2751d32ac069359c3bab924e800a5ef3f1e9891187577ae668b09e242b674c90e8df91b0f52a433b6c442e5ded837a4891424f80ea147edf6fb9228a9e8"}, {0x90, 0x10b, 0x41ac000, "a10037d98ed466a47698ce872e6590abcca8ba390ad0e99d8d39ff61feda322f5afd52a260fcbf4638706998d0be79cd21e4a6e56917e828d0c244af44ec66465c745f01adc381c312b58be565c704f1b81f19a3e7ca651fe34ae9aeabb35a07f15b68ce2a66671e105fb824f05a5dbae35d9299483a2b18e6ad"}], 0xf0}, 0x40000)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x3, @win={{0x81, 0x8, 0x33565348, 0xd}, 0x3, 0x3, 0x0, 0x1, 0x0, 0xfd}})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r8, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0)
r9 = syz_open_dev$swradio(&(0x7f0000000dc0), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000e00)={0x1, 0x5})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}, 0x1, 0x0, 0x0, 0x8081}, 0x0)

6.4410295s ago: executing program 1 (id=2363):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010068bd7000fedbdf25140000000c00078008000400"], 0x20}, 0x1, 0x0, 0x0, 0x8404}, 0x8040)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.331779655s ago: executing program 1 (id=2364):
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000640)={0x1, 0x1000000, "f0af87f0e28783073ea2910b5c58372b1dc1063324627b16", {0xffff, 0xc1}, 0x4})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0xff, 0x20, 0x2000}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000011c0)=""/97, 0x61}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSBRK(r6, 0x5409, 0x56e3)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.975356511s ago: executing program 5 (id=2366):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x0, 0x779, 0x2}, {0x2000000000, 0x20000800000, 0x0, 0x186, 0x10000000000000, 0x0, 0x0, 0x914}, {0x3, 0x7fffffffffd, 0x0, 0xfff}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x4, 0x1, 0x0, 0x1, 0xffffffff, 0x1001}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}, {&(0x7f0000001a00)={0x1460, 0x16, 0x2, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1161, 0xaa, 0x0, 0x1, [@generic="11e8945a28a3a766a1d3697c83970f903425adee9732c09f4e6acf14a022cc9fe3937885d9bf8cc7cc46b1e659a0a9716fcdda0357add87fd28400a16cdf9977c070a914bae81a9d5a2a70494030b669f54eb3f87a2a3b14c2015e1b889eec0777e4a8e398c127038b4de873d8b13f2f0faafe8f84be95c7c36f49e80b58cc7a8c422f1bd1fc1dfbb7b90e6cd181de", @nested={0x4, 0xf7}, @nested={0x4, 0x146}, @generic="6d4bd4b125db1411e1bbcc1519494243fdcabe44cf81181e8a6cafc612bc298491d787dd69d2d6183585e7a2234ab7fcc18d", @nested={0x31, 0x8c, 0x0, 0x1, [@generic="000b139b59d825c81a236c3b9039f6196ca02053341037e889aacf578dc82759e749dc5fa61bd06dd2078e0d23"]}, @generic="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", @generic="028b7a44cd00cfe0503375b5a56fd0ecc748fdcf8ea3d5d9ab6ce1c98f0796b5d1942a99da73d8fb12f0f74d522f5a1adc36b27f451d7356cc368733cba2c7244a22c988c6f48aba4f5ea15ac01e88b8b2f5233a", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x65}, @nested={0x4, 0xe2}]}, @typed={0x4, 0xe0}, @generic="b324bff7e4bdcd53de0a90628702956aa761f1b409f8096d1d7127f739f6e480c6b9b863b252735b1c89a57923c29b6ff92fe2c34cd1db5c4bea35e7c767ee16b826a804798aefdc44863428d63f4c0dbfca1fb145a75c9fbc8270facf03783011fe782771c14c0e62e3f20403d9f94479e06888cd4501b89c11847ec5c241454643a3d28ec44bdc4e8c83092d0d012de677f244699598aa9616e35fba26e044106ea4aed366c34dd747dc38f897bd2fab494861db80d6dd9d26d31ca088f72bbf040ef6aee9ce1dd7dc0e315eea6cf29a00"/225, @nested={0xe3, 0xa5, 0x0, 0x1, [@nested={0x4, 0x13}, @generic="d7185363b8283424d43017356c378e5889151b50b1b5d4adcc6442389fbb24088cc34b000e796aa50908df1f2abb0d713a4ca1e210858d79a6bb3e5108e8f44fac84c37eb67342d53034cfa732edf53f3cd9e49dd8de40f96a741924fb87266d9318194074c0aa40746d3692dd0939f6ff58684421c071b02c5709c56ae49aafa2ef59f429fa088ac3b2feb9ce64bc8d2dcf1a337286", @generic="f4042388a370ed72d6e9b02911b90cf1e1c8691d83fa07209d60eb", @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x4, 0x35}, @generic="f46138b31c226b27a2fcf0bc6ce06574dee2"]}, @generic="e40a09564ebb2a9cecd898823874e69ef00fe8938d3941afba5b2ac1d49ab3b8092ee589eaecf4d6ebf97b3afff4fd83e343657af10b76f2368417385bda574ce4eb9b2e9203c482ee51cb0fa455be31eb783604861c6638a4cf8252ec6ea40e9dd18c124a7af4a0c23d47c190e511b4362096b2f1b7e8d05cf176af8ea2e8", @generic="1123ad9132d238ae641b13a3c3f159b2aadb9f3e4916294f19a43464137d73efc1355074e53e728b1aecd0878a6492a7590a10b70d3760f2335030486e909eb77e4550e5932907c1e5409a2f82732f925fadf9750a69b6cc3f14251a470c7d4ada006d6bc277b3aeba630ff4e6c3a5f6fa0210766a1f3f0162659a9314b09038959b5283c4c52e05c2ba433a9114534ace571aa1949058fcc28b4131bd", @typed={0x4, 0x143}]}, 0x1460}], 0x2, 0x0, 0x0, 0xc010}, 0x40080)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r6, &(0x7f0000000700)={@void, @void, @ipv6=@gre_packet={0x4, 0x6, "e2a6a3", 0x223, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [0x89a3]}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "768ab8fa3e8ad5d134f164549969133534e7ee032fb27eacaa664b7df2020bc458b65952a474e9f099eaae2bd9ceefdfd02822cec51d459abf155f1e9c8c9a94782bc10cdc8c335cf2f76f4a9c44f70d572426be1b18fbac1120cdceb27d5cec7682bb468f943eb5012295b2b7829d6b46b31b9e27df805ca287eca67e3fca7e8e6192a97fb39368057e986a56dfdff6f0ae046b258188d4db09299fe327118f1d0868c219eae9b6ce8eeb7ac184d600d44f681802ade533e0f85a0c45b9865dd44bdff4edac05ab8af4ff2963cd91850112f4cfa7619b6edd5cfb9ef51c333e45b568f2c681"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x6, 0x2, 0x0, 0x2, 0x2, 0x25}, 0x1, {0x68bb}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x6, 0x1, 0x1, 0x2, 0x4, 0x3}, 0x2, {0x0, 0x3, 0x3, 0x2, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "2b4d2c369660b2f3ff2d0fcbae1b1c17eed19e891d351d247c889372f7e2f2f6cd56c5438df36618f82faddcb04776dc604247ff362736ab30326a603e8f0913322af0243d47bf4d327b5e159b22a920d11576ef8656ed025d71f1176973663875c50b9d099a63085707793ed08dbbc65ac3ab8c37d19f462a22ee6fa9eb2b78863fc0ca9e155a6c80d35ad20d47f31c28f05cfa94221672ce6e1c430ab9853400dfc43e95d5f5c14a9110339f45f8b99a7c2e8ec1d77827c3b7c048cc1a0d028220edb965651746c7813e6bcc1f638cf784d40e10965de9159ac62f801cfae97f7ffb79e1c858cae5fb0d23684cd62c08fb56cfdf0977"}}}}}, 0x24b)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = eventfd(0x400000)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x2, r8, 0x11})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x4000, 0x1, r8, 0x1})
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001340)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

5.797985372s ago: executing program 1 (id=2368):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x2c, 0x1c2, 0x0, 0x1, [@nested={0x28, 0xa, 0x0, 0x1, [@typed={0x21, 0x91, 0x0, 0x0, @str='/dev/qrtr-tu]\xf1=\x97!H\t^C\f\xc9m|\"\xf5n\x00'}]}]}, @typed={0x4, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x28008050)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
fadvise64(r5, 0x3, 0x7, 0x5)
prlimit64(0x0, 0xf, &(0x7f0000000240)={0x7, 0x9}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r1, {0x7}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x48000)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)

5.597413102s ago: executing program 1 (id=2369):
sysfs$2(0x2, 0x5, &(0x7f0000000000)=""/102)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="59210db211935ca34620bfa3489e0a6b7d23f35dde7d95f36528d505e5af1e8264e193b30c97c5ac9f11e2a9131b46db6e2b1404beb600dcba8d267d179eaf7ffdf48d97566a7c38b21a0741ce419b32b84ba777b5163cbf7512d38fb758cdc86565ae2705103e768aeb43bb80f191fa0c4020241883ca8c79435a301c0ca68ea2373adf0a8ceb96250b3a8f999e0935812aeb7861b5b713ba97786a80f4023c9f74835a89fe40ce21566124f3cad93a985356f8592df259d8e73e91009dfd9e", 0xc0)
sysfs$2(0x2, 0x2, &(0x7f0000000140)=""/185)
sysfs$2(0x2, 0x7, &(0x7f0000000200)=""/53)
sysfs$2(0x2, 0x1, &(0x7f0000000240)=""/158)
sysfs$2(0x2, 0x5, &(0x7f0000000300)=""/13)
sysfs$2(0x2, 0x1, &(0x7f0000000340)=""/73)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001500)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000400)="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", 0xc9, 0x0, &(0x7f0000001400)="33db3d4177cb7e9c7ec6d54916b1545872f2dada3d0fa54d82d2e42fdebf003d71adcc47eec0878083cb1cdf09cc449ad599496990fc74fdc2cbb96f22c810a499f47b9978e267a36e431a7241281eab988fbae3a361e360f4e015e6481aca83e9c86df301dc5c76915206f2e0ba120746c6233d578e218b9fde29ea08baa8cf3a9b631ceae27b1ce1381febd2916756e680ddd298ef1a2e15e52b2f718807cce155a2f3cd1df4f9a3b23a779682f82c6c5fd17ee1aebe2aee5ebc1b5628f9489bad1b871f588359de"})
sysfs$2(0x2, 0x6, &(0x7f0000001580)=""/227)
sysfs$2(0x2, 0x3, &(0x7f0000001680)=""/4096)
sysfs$2(0x2, 0x2, &(0x7f0000002680)=""/32)
sysfs$2(0x2, 0x9, &(0x7f00000026c0)=""/255)
sysfs$2(0x2, 0xe8, &(0x7f00000027c0)=""/64)
sysfs$2(0x2, 0xffffffff, &(0x7f0000002800)=""/253)
sysfs$2(0x2, 0xff, &(0x7f0000002900)=""/207)
sysfs$2(0x2, 0x8, &(0x7f0000002a00)=""/115)
sysfs$2(0x2, 0x6, &(0x7f0000002a80)=""/181)
sysfs$2(0x2, 0xfb, &(0x7f0000002b40)=""/153)
sysfs$2(0x2, 0xfff, &(0x7f0000002c00)=""/199)
sysfs$2(0x2, 0xcdc0, &(0x7f0000002d00)=""/47)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002d40)={0x1, <r1=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002d80)=r1, 0x4)
sysfs$2(0x2, 0x7, &(0x7f0000002dc0)=""/35)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002e00)=<r2=>0x0)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000002e40)=r2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002ec0)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x118, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000002e80), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x4, 0x1, [0x5, 0xffff, 0x0, 0xf5, 0x3, 0x3, 0x8, 0x8, 0x2, 0x6, 0x800, 0x3ff, 0x4000, 0x148, 0x10, 0xff80], 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @empty, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [], 'vcan0\x00', 'tunl0\x00', {}, {}, 0x2c, 0x3, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x8, 0xd}}, @common=@hbh={{0x48}, {0x9, 0x4, 0x0, [0x3d8b, 0x2, 0x4756, 0x3, 0xe, 0x185, 0x8, 0x9, 0x7, 0x8, 0x8, 0x2, 0x9, 0x1, 0x7d9, 0x8], 0x9}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x5e, 0x7fffffff, 0xf, 0xa5, 0x9, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
sysfs$2(0x2, 0x8001, &(0x7f0000003340)=""/223)
sysfs$2(0x2, 0x9, &(0x7f0000003440)=""/4096)
sysfs$2(0x2, 0x200, &(0x7f0000004440)=""/91)

5.449510206s ago: executing program 5 (id=2370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x15}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8180)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000005c0)={{0x3, 0x3, 0x5, 0x0, 0x5}, 0x401, 0xd89b})
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x191d00)

5.371690295s ago: executing program 1 (id=2372):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106307302040000102030109026500030168"], 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)

5.125973928s ago: executing program 5 (id=2373):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r0)
umount2(&(0x7f0000000500)='./cgroup\x00', 0xc)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="131602000000f610"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="04a001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f0000000a00)={0x1, {&(0x7f0000000240)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f00000005c0)={0x1, {&(0x7f0000000400)=""/140, 0x8c, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)

4.790458599s ago: executing program 4 (id=2375):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4})

4.342766562s ago: executing program 3 (id=2376):
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, <r1=>0x41424344}, 0x9, 0x3)
syz_extract_tcp_res(&(0x7f0000000180)={<r2=>0x41424344}, 0x5b, 0x7ff)
syz_emit_ethernet(0x1b0, &(0x7f0000000400)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0xd, 0x1a2, 0x68, 0x0, 0x6, 0x6, 0x0, @local, @multicast2, {[@rr={0x7, 0xb, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0x13, 0x2b, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e24, 0x4e20, r1, r2, 0x0, 0x0, 0x28, 0x1, 0xc00, 0x0, 0xfffd, {[@window={0x3, 0x3, 0x2}, @nop, @sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x63, 0x5, 0x0, "d5ed5cc8852fd94fee0a5a4b5332338626a9b41dfe662654072735768d070d1b08a123e6375f8b28b161cc3fc4e1fc30a3c8b2eb06079753e61daeb2ad7d1c148813a67b8caf89dd7f243fc33db516bac098482c0430891e37ab16595a4db816"}, @md5sig={0x13, 0x12, "94b13402d07c94bdfa2159d8c78c6b87"}, @timestamp={0x8, 0xa, 0x9, 0xffffffff}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}]}}, {"ec78ea59f7b2ab88df34bcadc16767c0d9ba68d148bb51a4dc27aaa216a9244a96572ebbcca6cf2e4d9d839fd87f2832ae308af5ca49bef4fb46409718f05fd2a5d2524fee539b50e90c3b068ae5e83d76524f55ff781aa7ce712a518a2f41ffff2c638c755380380894474408e661b152a1d91c2c42cc07fd68ba4b6e20c0f4b4a21ee2014a1f5181e6254adf641aabc78d3d25d1f3ba5f3b8908ec7f90c2f257c9b7b8841533ced0b39d35c6d5004492b9097afe832fed4cfc72af3cbd6683a90f249d059ff8c1d221536432f0"}}}}}}, 0x0)
r3 = socket(0x1e, 0x805, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000)
sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r5 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80800)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0xc0642, 0x0)
write$tun(r6, &(0x7f0000000680)={@void, @void, @mpls={[{0x8, 0x0, 0x1}, {0xaa, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}], @ipv4=@dccp={{0x11, 0x4, 0x3, 0x3, 0x151, 0x68, 0x0, 0x3, 0x21, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x2}, @end, @timestamp={0x44, 0x10, 0x35, 0x0, 0x1, [0x0, 0x5, 0x4]}, @lsrr={0x83, 0x17, 0x5d, [@multicast2, @multicast2, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}]}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x3, "d1b8c1", 0x0, "a9107c"}, "db8c548958512db320facd9a65e85222605fa066a78a177126e3a55aa0a337b6c69f5c01e13bb9270b7e1a1f6c367db3115e092eef41859be7e376a3cb799b43627c17df9f8985a6a28e5b216bb7b7f3cd44c54209363a3c3c55049b2db77573b8aa46c389d1d88a6c773fd21c6d5182ecd31f1759bd78bd0aa0abd4287aaa0763bb3f0aa6be166c6e1d9b61fcb1423b05d350fdb4bbc6a9007fe0928f09c6a674ddb0b57389d3bb9c65826a690443b3c429f0e299f46e81e0471a07cd8eb28e70f686dd69b3e1595ad5b627ecea28d5fae31f91d114d8fd913ed52c1d6222d8b80c258c30ed63ba9a9285a93322e4a10d3e45d28635835872ef7a4b58"}}}}, 0x165)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000240)='vcan0\x00')
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

4.125181911s ago: executing program 4 (id=2377):
poll(&(0x7f0000000200), 0x51, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x2c, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0xb, 0x0, 0x65}, 0x2c)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'})

3.657481108s ago: executing program 4 (id=2378):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80000000, 0x1, 0x3, 0x0, 0x2})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0xfff3, 0x6}, {0xc, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x400c800)
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x1f, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0x11}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40c0)
socket$netlink(0x10, 0x3, 0x9)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x490001, 0x0)
io_uring_setup(0x10, &(0x7f00000003c0)={0x0, 0xde90, 0x200, 0x0, 0xfffffffd})
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010ec80649e84cc49f10eb90c9983e4bf"], 0x10b8}, 0xff00)
close_range(r3, r3, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002840)={{0xffffffffffffffff, &(0x7f0000000340)='\x00\x00\x19\x1c\x18\x02\xdc~\xd1\x94)D\xf1', 0x82800, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x5c9d]}, {0xf2, 0x3, 0x96, 0x5}}, 0x6, &(0x7f0000000200), &(0x7f00000002c0)=0x1}, 0x3, &(0x7f00000027c0)=[{0x3, 0xb98, &(0x7f0000000240)='/d\xa4)\x8f\xa1e-\x1a6\x06\xdc\x00M{Wev\x00\x00\x00\x00\x00', &(0x7f00000028c0)="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", 0x1000, 0x22}, {0x1, 0x4, &(0x7f0000000700)='\x02\xca\xe4!?\xee\x9e\'\xbb\xfa\x8b,P`@J\b\xbbQ\x89\'f\xec\xd1\xad\x01\xb9\xb5\xf7\xf8\xf1*\x98\x1b\xd9\x0e\xac\xc2\xbbf\xaa\xb9\xff\x82\xf1\xb6XE1\xd1\xee\x1f@\x03\xd1\xce\xb3\xf5\x80jU\xd4\x10|\xbbr\x95W1\n\xff^o8\x830\xc6\a\x80b\x9f\xdc\xeb\xf2\x8d\xadZ\xddI\xb2\x98\xc3\x95\x80t\xb8\xe8\xdfK\xe6v\xf8\xf8\x15\xec\xe5\x17\xd0E|\x16!\x9c\x1d\xcb\xad|\x02\x00\x00\x00\x00\x00\x00\x00[\x940\xfe\x00\x10r\x95s\xcb\xba`\x90\xc1\x16\xa8\xce\x8d\xee\x10\x874\xa0\xa5\xd5@\x92\xdf\x9f?4\xf1\x98\n\x92R\x12*\xeek\xf3=OGF>]4\xafS\xe6\xf2\x81\xba\x9b/\xad\x84\xeaS\x86l\x15z\x97\x1bO\x9d\xd6\xe9', &(0x7f0000002640)="d50fca3ce803b4d072c7de4b770795e91301bee192e796fb796dfcf1c669a1029c09b7b270158375eb9eebbe76debca9159c9b1670a7a8675df4df132811ee1b3201cfbfa21c7249a270f7de57c9e2339c8aa89f21638e9668ad8fdf1e9415c8aa269a29d968d8ebd41b1a8b86f203c0d4ee30bb033c765faa12167837feb7610bc354cbb992c809be03fb1c4c0d89ae708b6aa6f7d23af5c4", 0x99, 0x20}, {0x2, 0xfffffffc, &(0x7f0000002700)='*^\x00', &(0x7f0000000580)="d69b6a356dc99f42d3a69cd0d3d93901d4ab7e883ea81bc2c37217fda8be90753fba958be4b437dd92012ca7c27164ac59322a644e4d989b4e3e94c65d4247524b71de464e352e2019f9e6503aa8c9083dca11ae2f63bdb354d651208d5830fe4b05188e2c60eccfed96b1845e90a60346304910535c025e6bbb03a0f07af9", 0x7f, 0x2}]})
r7 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080))

3.338018547s ago: executing program 3 (id=2379):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d903000008"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ab4d, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfd}, [@RTA_OIF={0x8}]}, 0x53}, 0x1, 0x0, 0x0, 0x44104}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_wakeup_irq', 0x35dfafa7a654dca7, 0x4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000180)=0x8, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xa0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, r6}, 0x94)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40)

2.912209376s ago: executing program 3 (id=2380):
unshare(0x8040480)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000300), 0xffffffffffffffff, 0x101000)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000380))
r3 = syz_usb_connect$uac1(0x2, 0xcf, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xa, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0xe5, 0x75, "f958", 'F'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x4, "02511b"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x2, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x58, 0xa}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x1e, "", "d7d446"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x6, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0x7, "5b868ddf6c2698a715"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x100, 0xfd, 0x5}, @as_header={0x7, 0x24, 0x1, 0x9, 0xa, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x9, 0x5, 0x2f, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xd, 0x9, {0x7, 0x25, 0x1, 0xc, 0x10, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x2, 0x9, 0x6, 0x20, 0x5}, 0x26, &(0x7f0000000640)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3b, 0x1, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5d12aced83cdce79c42fef5d638f1ebc"}]}, 0x1, [{0x38, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}]})
syz_usb_control_io$uac1(r3, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x20, 0xd, 0xa3, {0xa3, 0x4, "1b7a4580a617008c2ddf3919174cd8b395e6aca9706cf3e7ca8cd5a3c54216c79912abb3aa00e88e7f4ae55acc1ed07951937232cf6f8dd455b35db47dfa746346d049e890682b4c6c0ac2b379ada54acf0103e56490b9ba892120635e5a3de60fe0fb08e3b9b86a1014c75f10d747fa50f75a9d7ebd27b8a18825805736052f0033a9e0a82eceb1471135c4b074de7a83cfb84afa4fcc14ea4483313bd9e4ddb3"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x40, 0x7, 0x8f, "507389bae6e90da537bc047ab08ee7e9c5eeabf4a9ae98a3b62c29ad73623f1209fa5ab637cfc376d608adfe8b88af5b0af490a46f2e2cf9a0616afabbb7f9a355655a2be1ff671b49497f88e6b6e537422c3d2c8b7a216d902e632c740e511ac745b35c48390999c7535d9b49a9c53e9494de454454a2ad07ded9d933c6f7c026211b5b055adf0c9eadeb7958376a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000980)={0x20, 0x81, 0x3, "674317"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "a269"}, &(0x7f0000000a00)={0x20, 0x83, 0x1, "b2"}, &(0x7f0000000a40)={0x20, 0x84, 0x1, "1b"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, '^L['}})
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200810000000100a3410926d86d4cf01c271ce65"], 0x0, 0x0, 0x0, 0x0}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @empty}, {0x1, @multicast}, 0x14, {0x2, 0x4e21, @local}, 'netpci0\x00'})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

2.617376816s ago: executing program 4 (id=2381):
r0 = syz_usbip_server_init(0x3)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="408b9a7f39eaf51d50dbbee4fe7ada1b431f351495e5406fa969e979f8fe659a6e1f979dbfc9", 0x26}, {&(0x7f0000000040)}], 0x2) (async)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x11b040)
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r1, 0xc008644c, &(0x7f0000000100)) (async)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000140)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000540)={0x12, 0x0, 0x2, 0x8, 0x10000}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0xffffffff, 0x2, 0xa, 0x7, 0x81, 0x40, 0x9, 0x80, 0x7, 0x0, 0x6, 0x9}, {0xfec00000, 0x1000, 0x0, 0x4, 0x8, 0x5, 0x5, 0x7, 0x1, 0x10, 0xff, 0x7f}, {0x4, 0xf000, 0xe, 0x6a, 0x2, 0x0, 0x5, 0xd7, 0x93, 0x3, 0x8d, 0x6}, {0x80a0000, 0xe000, 0xa, 0xee, 0x5, 0xdd, 0xfc, 0x4, 0x2, 0x50, 0x0, 0x8}, {0xe6caf009, 0x80a0000, 0x8, 0xa, 0x0, 0x95, 0xff, 0x8, 0x2, 0xd3, 0x3, 0x1}, {0x7000, 0xfec00000, 0xe, 0x7f, 0xb, 0x1, 0x9, 0x8, 0x74, 0x7, 0xfd, 0x9}, {0xe000, 0x4000, 0xd, 0xa3, 0x1, 0x2, 0x6, 0x81, 0x1, 0x1, 0xa4, 0x1}, {0x10000, 0x3000, 0x4, 0x9, 0x3, 0xa, 0x3, 0xf, 0xb9, 0x4e, 0x90, 0x4f}, {0x2000, 0xfa53}, {0x3000, 0x7}, 0x10001, 0x0, 0xc000, 0x51200c, 0xe, 0x1, 0xdddd0000, [0x6, 0x0, 0x2, 0xf7]}) (async)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000006c0), 0x117000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000780)={&(0x7f0000000700)="2571b4f55e72ccbccbb47b9b5f0eeb97db46864cf5489bac361fe906c894b5306d7f449bf1befac7992850a27b6edd90cd4fa5a017943da368197f8b15f6756409fa3ac51edeae67f5a4be9c282981fa5b76130a", 0x54, <r4=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000007c0)={0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000900)={0x1, 0x4, &(0x7f0000000800)=[r4, r5, 0x0, 0x0], &(0x7f0000000840)=[0x4, 0x2, 0x2d0, 0x1], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0xffffffffffffffff, 0x2], 0x0, 0x9}) (async)
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000009c0)={0x74, &(0x7f0000000940)="34428eca82845451963615efff8ace247a044497755f53d8fed818939354db3a49cdf5b378be1c1596c890277cb89a0fbdfe5f23b1a692a586d08ffdfbc6249715c14b8df78cb4b820930a48ae9b475d5801ea0313c1e8a0588eba76b86f449e75cc5530e014bbc935c5486c57c68f8d8a89bcdf"})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x420001, 0x0)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x309)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000a80)={0x5, 0x0, &(0x7f0000000a40)=[0x0, 0x0, <r7=>0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000bc0)={&(0x7f0000000ac0)="c24387b95e4f5b66d0dd1c36bd7ab0f2bb5bcca55e57a09ac61dd8247617969ba179b2f47b9a5ad2b2c683431116ab018a16918eb17d150cf09649070bf6a1134af4e01f9ff99ebf060c59665c814a6b4237352aac321cac36be8401f6ce35e388ef5082e365d34cf41b44cfd1941b1c88cab20f2559b9f163713669aad9879e9fe225b34e926d8e0bcaeb62e3c1db50cce80279ac7bb954eb2a36da6d741701616184f853e17224c0d758d85c8dabea46152c288b92f897493f0f9821c6e77cf073f54699827954dd12e0e8ae448873c908f8", 0xd3, <r8=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000d00)={&(0x7f0000000c80)=[<r9=>0x0, 0x0, <r10=>0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r5, 0xb0b0b0b0}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000001000)={&(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000f80)=[<r11=>0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000013c0)={&(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001340)=[0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0], 0x9, 0xa, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000016c0)=[<r13=>0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0xa})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001880)={0x100, 0xa, &(0x7f0000000c00)=[r5, r4, r4, r7, r5, r5, r5, r5, r8, r4], &(0x7f0000000c40)=[0x200, 0x5, 0x8000, 0x3, 0x4, 0x7], &(0x7f0000001800)=[r9, r11, r12, r13], &(0x7f0000001840)=[0x6, 0x8000, 0x9, 0x4, 0x6, 0xe6d, 0x10], 0x0, 0x6}) (async)
r14 = memfd_secret(0x80000)
ioctl$DRM_IOCTL_MODE_GETFB(r14, 0xc01c64ad, &(0x7f00000018c0)={r7})
r15 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001900), 0x200000, 0x0)
quotactl_fd$Q_SETQUOTA(r15, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000001940)={0x4, 0x100, 0x3, 0x1ff, 0xffffffffffffffff, 0x100000001, 0x1, 0x0, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001ac0)={&(0x7f00000019c0)=[0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[<r16=>0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x9, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000001b00)={0x9, r10, r16}) (async)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000001c00))

2.292750018s ago: executing program 4 (id=2382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x102, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x20040805)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x27c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_TUPLE_ORIG={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x83030ccb8a1859f8}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, @CTA_TUPLE_MASTER={0xc4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xd, 0x5d242878, 0x37d3, 0x8, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, <r4=>0xffffffffffffffff}, 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
timer_create(0x5, &(0x7f00000026c0)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000002700))
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002740), 0x60000, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000002900), 0x400000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r4, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000029c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000002a00)=[0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0], <r9=>0x0, 0x66, &(0x7f0000002a80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000002b40)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0xb, 0x23, &(0x7f0000002780)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffae4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x7, 0x4, 0x8, 0x4, 0xe}, @jmp={0x5, 0x0, 0x1, 0x1, 0xa, 0x4, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f1}}, @alu={0x4, 0x3, 0x8, 0x2, 0x1, 0x0, 0xfffffffffffffff0}], &(0x7f00000028c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xd2d683979c5ec26f, '\x00', 0x0, @fallback=0x28, r7, 0x8, &(0x7f0000002940)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002980)={0x2, 0x10, 0x7, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x3, &(0x7f0000002cc0)=[r4, r1, r3, r3, r4], &(0x7f0000002d00)=[{0x0, 0x3, 0x10, 0x9}, {0x1, 0x2, 0x8, 0x6}, {0x2, 0x5, 0xe, 0xc}], 0x10, 0x7}, 0x94)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000002e00)={r2, 0x1, 0x6, @remote}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r10 = socket(0x10, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002ec0)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0x138, 0x0, 0xffffffff, 0x388, 0x228, 0x508, 0x508, 0xffffffff, 0x508, 0x508, 0x5, &(0x7f0000002e40), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x1, [0xb235, 0x2, 0x101, 0x6, 0x4, 0x2, 0x0, 0x101, 0xfc00, 0xd, 0xa, 0x2b, 0x3, 0xff, 0x1, 0x7c8], 0xc}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@private=0xa010100, @port=0x4e22, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x17, @ipv4=@local, @ipv4=@empty, @icmp_id=0x67, @icmp_id=0x66}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, [0xff, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0x0, 0xffffff00, 0xff], 'vlan1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2c, 0x5, 0x0, 0x10}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}, @common=@eui64={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1a, @ipv6=@empty, @ipv4=@private=0xa010102, @port=0x4e21, @gre_key=0x6}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0xad, 0x2, 0x4, 0x0, 0x8, @loopback, @private0, @private1, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xffffffff], 0x2441, 0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, @port=0x4e23, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000039c0)={&(0x7f0000003500)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003900)=[{&(0x7f0000003540)="88670fd1c70e791e1941dbc619b58b622fb4a0bdb77179cf382fe7e836078c50315c6647d5248c1706fdce8ad7942042e2dcbe7beb7fd70681d72676ec45480d0fa1dadf83590224fc1268e8b324f29513af0161562f20d9bda27c38ee83ec84d2c4a3e1703c50489399c8542feb6a5016aa1c12ce942d", 0x77}, {&(0x7f00000035c0)="1024ec9543f932991e9d52c82d00f66bc4fc45fb0c9b0f54f66af10709a7805eabe0ebd5fc1c41d0e79bd6105756dded840e760e29e033ec51bc94361b97a845797b3391f31d31da0c68cbaec7311209716ec257d831686d274cfc4d07d4682a9cd113d3bd1054c6da9993693d4cd1f7153ab979870aa2ed9c0c37ea90e9d80a58bc123444e4bc28a0db8f370a67d7d0918d1fb483ce9ae1709fb1cb488786e6b05c089d473b742f3cfeb3035b086131e1139d3721a90497d02baf8e63b51c6891dae139bef6fdb5c6d2452076092b5181671fd65e4748f822552f60ba8053b7435b9c41", 0xe4}, {&(0x7f00000036c0)="55f182cd8a1873e82930adc52f7cf576a18b90f22d92cdb38bf5cddbd8b02fa0a6efde66c9f143042cefafa7f7e26c3f65deed5a16b0d04b8f38a7391136defb0b3f8099c7628904a027e551ff59fe5732c215904a1a56e1e14ecee99fb615636a53500b0d6404a49283b41a6b5b17d28a", 0x71}, {&(0x7f0000003740)="b3b2bd8d02e8c3ac0eb68baf49d170a6e4d061391eebaed0730a93ade63757d917fe8cd7303c1c8bd1424bab559198e54244090346894efffbb4f869120052ae15daaa3424a233d0f4d1080926d2c9dbfd6700b41b5d76865003e1d82d56c4c258a46cfbf06d0fa33292fb84ed3c740ddc03f5cced57d6e07aa8b604e29d7b4f793331a5e740857ddb4ee6ae57c9e963a97ed3c22e7e5c1028a4fd6a1212a8f3475951a2cf1166b4517fae52dce861b47e4598ca8116cc61fb1a930b5f21da5d3dcf731b2aa2dbf4f004f10e1a4562475c3aade2b377eccb2ba64a8dfd", 0xdd}, {&(0x7f0000003840)="baa11f2b81d816693e842bc3fb143252e092aef0aa357dba54efcdbf7f7d21e5387dcce9b4b7704a5d648db1f027a99a0bb4a82951fe2dbeb9a9c6dfa5b3c278b08c50c0e4fed684cc904b6494810e68306edc795c3eb22ab4b17537fd1225cf00d9ed4f7cc1bddff318e5d3757bcc017647edb3a693648ba8253a753173cf17e3d1d02a51ed704a436057a8b3c6ea2d00a57663102b27892a3c34e820fa735e9dc5db0024aa690b245f65dea4bd2db2", 0xb0}], 0x5, &(0x7f0000003980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}, 0x220088c0)
setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000003a00), 0x10)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003a40)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xba00000, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r11, 0xad197000)
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000003ac0)={r2, 0x1, 0x6, @remote}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003b80)={'ip_vti0\x00', &(0x7f0000003b00)={'syztnl2\x00', <r12=>r8, 0x40, 0x80, 0x5, 0xfffffffc, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x8, [{@local, 0x8}]}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x7, "9385d7b6b0"}, {0x5, 0x7, "b1d90d70fd"}, {0x7, 0xb, "4a97ab9bb3584f6b1e"}, {0x0, 0x11, "f7beb3b04dc463e53f26a23db5d708"}, {0x0, 0xc, "8e5b098ee29359fcf1eb"}, {0x2, 0x4, "41ae"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000003c40)={'syztnl0\x00', &(0x7f0000003bc0)={'syztnl1\x00', <r13=>r12, 0x4, 0x9, 0x8, 0xfff, 0x0, @mcast1, @mcast2, 0x20, 0x1, 0xca6, 0x7}})
r14 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000003c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x47, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0xb5d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x7, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xa, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000003e40)={0xa, &(0x7f0000003cc0)={0xa, 0x6, 0x201, 0x8, 0x10, 0x1, 0x8, 0xd}, 0x46, &(0x7f0000003d00)={0x5, 0xf, 0x46, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xc, 0xb, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x5, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x44, 0xa, 0xd1b9}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x8, 0xf00, 0x9, [0xff0000, 0x3fc0, 0xff00cf]}]}, 0x2, [{0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x50, &(0x7f0000003dc0)=@string={0x50, 0x3, "dfd768ad8f9cba6719fcf89ded6ca6ed2c3468a8fe59417ab1dc30455d0d98247e1cdf8ce6c2e9928a6aba5a3ff5c29466b957d70860b966d0f7822bb0a2dcb296549616554cfc66e56d5cbc2201"}}]})
syz_usb_control_io$hid(r14, &(0x7f00000040c0)={0x24, &(0x7f0000003e80)={0x69e1fe45f298c11f, 0x22, 0x5e, {0x5e, 0x2, "4eba060d9c84235708ad482d8c8dae1f5e5f18f8bb0e4a110a4c8fc1b6c1ae6150556add957aeee716c7daf0f53ee0f78e24fde6450de388ee5db86216e8788cbdee6be4f3eaeecc1e6ae43eb2bb49c33129cfb8b813e88ae7e6be54"}}, &(0x7f0000003f00)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000004040)={0x0, 0x22, 0x9, {[@global, @local=@item_012={0x0, 0x2, 0x7}, @global=@item_4={0x3, 0x1, 0x3, "affdc683"}, @global=@item_012={0x1, 0x1, 0xe, "ec"}]}}, &(0x7f0000004080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x534, 0x19, 0x1, {0x22, 0x745}}}}, &(0x7f0000004380)={0x2c, &(0x7f0000004100)={0x0, 0xb, 0xcb, "4f78e70cb98b5ccc6d351e4172eab83032beae83775b691925d51d44b8f1a0429dbbdabe6355c8ea21ba3ea05a5c0343b3eb9b0de9766471fbcb01ff540d77f5c0444124061c235e95405d76544c078a3619754048855f6392dfac51a5386fe8ea5d0c7d68fbe06fa4c6d6e763e3400b8f7967ac0be12f029dc26d91beb6f57dbc2c140815bda3848ff8d51d9c7bf367ef467fdc2b8c051f70e807115dc0478b0ad5355e13cf2b19870cd4c87fceb248b235b5d6a2cd4e5b6bd38b7a5b503a74ceb8841a7abfb7f521cdc5"}, &(0x7f0000004200)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000004240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004280)={0x20, 0x1, 0x8e, "e241880413c949ba3053e4111c85d8153ed6ecd5bb848f7af9867de72890a5574a4607ec9e00ebccccf3845a275ce38a7f26b08b4ccf4b4f667ac37dcd3e93c6ca07052ecaffe54e77280b8184f51c8883cb5a997ee342a6b60538670087a4bbae6ee43c6d1571f87648469d37f3514729ec623564e8b1fb865dad647649f40980028d156bc60c22c48d4c8582bb"}, &(0x7f0000004340)={0x20, 0x3, 0x1, 0x42}})
ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f00000043c0)=""/4096)
r15 = syz_genetlink_get_family_id$team(&(0x7f0000005400), r7)
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000059c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005980)={&(0x7f0000005480)={0x4f8, r15, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd6d}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3000}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9ea1, 0x3, 0x31, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24c7}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x1, 0xd, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

1.329614165s ago: executing program 5 (id=2383):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7fffffffffffffff, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x36, 0x3, 0xa], 0x10000, 0x202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f00001b6000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x4000)

1.053943736s ago: executing program 1 (id=2384):
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1f, 0x80880)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[<r4=>0x0], &(0x7f0000000280), 0x1, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r3], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r4], &(0x7f0000000180), 0x0, 0x8000000000009})
unshare(0x6a040000)
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a20020000000000", 0x8)
syz_emit_ethernet(0xc2, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYBLOB="e1d74b95c3d9446092b4ecd94a7b3e62b36dbdfd303a1b6af369e12447686792788945319a1e1309d4de87245b38a3874c2c1615761301529399c192c8ceca64"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x844)
r10 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
flock(r9, 0xf)
mknodat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x401)
ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000100)={'dvmrp1\x00', {0x2, 0x4e24, @remote}})

905.801881ms ago: executing program 5 (id=2385):
syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010068bd7000fedbdf25140000000c00078008000400"], 0x20}, 0x1, 0x0, 0x0, 0x8404}, 0x8040)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

722.796688ms ago: executing program 3 (id=2386):
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000300)='./file1\x00', 0x10000200)
socket$rds(0x15, 0x5, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x4})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93})
bind$rds(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) (async)
bind$rds(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@mask_cswp={0x58, 0x114, 0x9, {{0xa, 0xd}, 0x0, 0x0, 0xfffffffffffffff3, 0x8, 0x8, 0xfffffffffffffff7, 0x4, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0xfe, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000, 0x1, 0x332f, 0x0, 0x401}}], 0xb0, 0x41000}, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73658175726974792e0062c1aa50c36f2a2a2108caff2607c6fa03d3c0ee4907dbe0b8f3fc3cb56d7d0e50c3356aa2db90a68aaf725e9bf37e913a63a6d1025daecdcb102457b7a3bff4efbe40fe3b6d6dfdd2a19c01017a896723c1edf6181fbfbe2fa48a7c529337983b20387e2efc07"]) (async)
removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73658175726974792e0062c1aa50c36f2a2a2108caff2607c6fa03d3c0ee4907dbe0b8f3fc3cb56d7d0e50c3356aa2db90a68aaf725e9bf37e913a63a6d1025daecdcb102457b7a3bff4efbe40fe3b6d6dfdd2a19c01017a896723c1edf6181fbfbe2fa48a7c529337983b20387e2efc07"])
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x6, 'vlan1\x00', {0x4}, 0xaa})
inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x80000388)

578.291927ms ago: executing program 3 (id=2387):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4)
r1 = socket(0x26, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @initdev, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', <r3=>0x0, 0x29, 0x60, 0x7, 0x8, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0xfffffff9, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x9, 0xf, 0xd, 0x2, @empty, @loopback, 0x1, 0x80, 0x5, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl0\x00', <r5=>0x0, 0x40, 0x40, 0xfffffffb, 0x5, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x8b, [@rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}]}, @noop, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0xa, "7bd769762fc8cf39"}, {0x1, 0xa, "333dc30ec700ec4c"}]}, @end]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r7=>0x0, 0x20, 0x7800, 0x2, 0xa, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x68, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x23, 0x1, 0x4, [{@loopback, 0x5}, {@rand_addr=0x64010101, 0xa4}, {@rand_addr=0x64010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@loopback, 0xc41}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', <r8=>0x0, 0x4, 0x9, 0x6, 0x1, 0x50, @empty, @mcast2, 0x700, 0x8000}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', <r9=>0x0, 0x8000, 0x107b1, 0xbff, 0xc6a, {{0xe, 0x4, 0x2, 0x3b, 0x38, 0x66, 0x0, 0x54, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x4b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1, @remote]}, @generic={0x82, 0x10, "4ef44492b8d72c805bfbe966510c"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', <r10=>0x0, 0x7, 0x8000, 0x6, 0x1, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0x2}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', <r11=>0x0, 0x40, 0x8, 0x100, 0xd23, {{0x51, 0x4, 0x3, 0x0, 0x144, 0x67, 0x0, 0x9, 0x2d, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x24, 0xeb, 0x1, 0x7, [{@local, 0x8000}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x100}]}, @end, @cipso={0x86, 0x53, 0x3, [{0x0, 0x12, "abeee423818ff959189c7e893a25171f"}, {0x5, 0x11, "280de64412ecc180ec432cc26e8c0e"}, {0x2, 0x8, "52d40ab2c6f7"}, {0x0, 0x7, "40d1762ad0"}, {0x0, 0xd, "785e93445b7221662974a3"}, {0x7, 0x2}, {0x6, 0x3, "90"}, {0x2, 0x9, "b39179a77b9d5c"}]}, @rr={0x7, 0x17, 0x10, [@loopback, @multicast2, @empty, @loopback, @broadcast]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0x5, "0c89d7"}, {0x0, 0x7, "c5b6f92ea5"}, {0x2, 0xd, "347b263f3ea3887a99cd85"}]}, @timestamp_addr={0x44, 0x54, 0xab, 0x1, 0x5, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x838}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x10001}, {@multicast2, 0x3}, {@multicast1, 0x5}, {@local, 0x200}]}, @timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0x8, [{@broadcast, 0x4b}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x17e}]}, @generic={0x95, 0x2}, @rr={0x7, 0xf, 0xd5, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@initdev, <r12=>0x0}, &(0x7f0000000840)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r13=>0x0, 0x7, 0x10, 0x8, 0xfffffffe, {{0x3d, 0x4, 0x0, 0x22, 0xf4, 0x68, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x6, [{@private=0xa010100, 0x6}, {@private=0xa010102, 0x6}]}, @noop, @noop, @timestamp_addr={0x44, 0x44, 0x17, 0x1, 0x3, [{@loopback, 0x39}, {@empty, 0xf}, {@rand_addr=0x64010102, 0x5}, {@remote, 0xb078}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0x1}]}, @generic={0xb, 0x5, "3a87b6"}, @timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x2, [{@rand_addr=0x64010100, 0xafe3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x31}, {@rand_addr=0x64010100, 0x40000}]}, @generic={0x82, 0x8, "8b42a2a32c17"}, @cipso={0x86, 0x56, 0x1, [{0x1, 0x6, "ed7df32b"}, {0x7, 0x11, "ec41e7e8442fc925da0177da174f38"}, {0x5, 0xe, "8654a80d65034b3bd5c84f51"}, {0x5, 0x9, "a1d268fd9d82ce"}, {0x1, 0xd, "90c9feae67883a4072754c"}, {0x0, 0x6, "7aa5320e"}, {0x2, 0xb, "b7ff5cef2df49936de"}, {0x7, 0x2}, {0x5, 0x2}]}, @lsrr={0x83, 0x7, 0xfc, [@remote]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', <r14=>0x0, 0x710, 0xfc0f6a34a4a4b4f8, 0x6, 0x6, {{0x13, 0x4, 0x2, 0x15, 0x4c, 0x65, 0x0, 0x4, 0x0, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0xc5, 0x0, 0xd, [0x9, 0x2, 0x0]}, @timestamp_addr={0x44, 0x24, 0x7e, 0x1, 0x8, [{@broadcast, 0x1000}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x8f}, {@local, 0x5}]}, @end]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000ac0)={'gretap0\x00', <r15=>0x0, 0x20, 0x8, 0x1, 0x8, {{0xd, 0x4, 0x0, 0x2a, 0x34, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x20, 0xd8, 0x0, 0x8, [0x6, 0x3, 0x80000001, 0x7, 0x9, 0x7fff, 0x1400000]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x220, 0x0, 0x108, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x14}, 0x18)
ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000ec0)={0x0, r0, r16, 0xe, 0x96d1, '\x00', {0x2, 0x3, 0x3, 0x6b, 0x6, 0x200, 0x5, 0x9, {0x2, 0x3}, {0x6, 0x40}, {0x1, 0x8}, 0xffffffffffffffff, 0xfffff801, 0x0, 0x2, 0x0, 0x1, 0x3, 0x8000, 0x3, 0xcbc, '\x00', 0x8, 0x6e85, 0x10, 0x3}})
statx(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x1000, 0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f00000012c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)=@getsadinfo={0x150, 0x23, 0x400, 0x70bd28, 0x25dfdbff, 0x0, [@replay_thresh={0x8, 0xb, 0x9}, @algo_auth_trunc={0x7d, 0x14, {{'rmd256\x00'}, 0x188, 0x80, "7a12dcebffd3b5df595dde56760292f2826635cc648db8e7bfa9635926b58b5360ed66812e3d37132af334ecccd550363d"}}, @proto={0x5, 0x19, 0x2b}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e24, 0x40, 0x4e24, 0x6, 0x2, 0xa0, 0x30, 0x67, 0x0, r17}, {0xd, 0x1, 0x8, 0xa, 0x1, 0x2, 0x9, 0x3}, {0x7fffffffffffffff, 0xb9, 0x80000001, 0x3}, 0xb2c, 0x6e6bc0, 0x2, 0x0, 0x2, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4084800}, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f00000018c0)={&(0x7f0000001300)=0x6, 0x400, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001880)})
r18 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_COUNTERS(r18, 0x0, 0x81, &(0x7f0000001980)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0xb, 0x2, 0x40, 0x2, 0x4], 0x5, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)
r19 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r19, 0x7a4, &(0x7f0000001ac0)={{@any, 0x6}, 0x4, 0x1ba0, 0x2c9a, 0x5})
r20 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r20, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x80)

401.815212ms ago: executing program 3 (id=2388):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="00210600710a5eeb9d0471200000e276000000070000", 0x16}], 0x1, 0xee, 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f0000000040))

291.230606ms ago: executing program 4 (id=2389):
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, <r1=>0x41424344}, 0x9, 0x3)
syz_extract_tcp_res(&(0x7f0000000180)={<r2=>0x41424344}, 0x5b, 0x7ff)
syz_emit_ethernet(0x1b0, &(0x7f0000000400)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0xd, 0x1a2, 0x68, 0x0, 0x6, 0x6, 0x0, @local, @multicast2, {[@rr={0x7, 0xb, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0x13, 0x2b, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e24, 0x4e20, r1, r2, 0x0, 0x0, 0x28, 0x1, 0xc00, 0x0, 0xfffd, {[@window={0x3, 0x3, 0x2}, @nop, @sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x63, 0x5, 0x0, "d5ed5cc8852fd94fee0a5a4b5332338626a9b41dfe662654072735768d070d1b08a123e6375f8b28b161cc3fc4e1fc30a3c8b2eb06079753e61daeb2ad7d1c148813a67b8caf89dd7f243fc33db516bac098482c0430891e37ab16595a4db816"}, @md5sig={0x13, 0x12, "94b13402d07c94bdfa2159d8c78c6b87"}, @timestamp={0x8, 0xa, 0x9, 0xffffffff}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}]}}, {"ec78ea59f7b2ab88df34bcadc16767c0d9ba68d148bb51a4dc27aaa216a9244a96572ebbcca6cf2e4d9d839fd87f2832ae308af5ca49bef4fb46409718f05fd2a5d2524fee539b50e90c3b068ae5e83d76524f55ff781aa7ce712a518a2f41ffff2c638c755380380894474408e661b152a1d91c2c42cc07fd68ba4b6e20c0f4b4a21ee2014a1f5181e6254adf641aabc78d3d25d1f3ba5f3b8908ec7f90c2f257c9b7b8841533ced0b39d35c6d5004492b9097afe832fed4cfc72af3cbd6683a90f249d059ff8c1d221536432f0"}}}}}}, 0x0)
r3 = socket(0x1e, 0x805, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000)
sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r5 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80800)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0xc0642, 0x0)
write$tun(r6, &(0x7f0000000680)={@void, @void, @mpls={[{0x8, 0x0, 0x1}, {0xaa, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}], @ipv4=@dccp={{0x11, 0x4, 0x3, 0x3, 0x151, 0x68, 0x0, 0x3, 0x21, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x2}, @end, @timestamp={0x44, 0x10, 0x35, 0x0, 0x1, [0x0, 0x5, 0x4]}, @lsrr={0x83, 0x17, 0x5d, [@multicast2, @multicast2, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}]}]}}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x3, "d1b8c1", 0x0, "a9107c"}, "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"}}}}, 0x165)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000240)='vcan0\x00')
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)

53.625135ms ago: executing program 5 (id=2390):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0xd)
landlock_restrict_self(r1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0xfffffec7, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x138}}, 0x0)
r6 = getpgrp(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r6})
ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000000540)={&(0x7f0000000400)=[{0x3, 0x0, 0x6, 0x3, 0x100000001, 0x6, 0x40, 0x10}, {0x2, 0x0, 0xa77, 0x2, 0x9, 0x1c3, 0x5, 0x3}, {0x2, 0x0, 0x9, 0x8000000000000000, 0x5, 0xf8b8, 0xe, 0x7}, {0x3, 0x0, 0x9, 0xf, 0x8, 0x8, 0x5, 0x6}, {0x3, 0x0, 0x4, 0x5, 0x0, 0x100000000, 0xace, 0x101}], 0x5, 0x38, 0x1, 0x2})
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ecffffff00000000000000001847000001000000000000000000000095000000000000006e58ff462158b95fee15e74da45af38fa6eb47ca85e8538d63f34d3fed7a99af3b8a902f0a3a9c7c66086252cf23ba587a854ce525bb269088477083ab1384a67c187c71df95ed4bfff6564c125d99b99c6a1940b14cc293cd0529d9f648fe8f44a34431ef47998f1937038874bfede2a5a01a326b9fdab95deaf0a53faea3549810ca636699309a05d7b61a27089dfe57f6a5d53f7722f92722c3c5adb3c4fea7fc85997894f0336592eea59cd4096a15f8fb8ffcc73ed6d13e9d4036284e7618245bba90ae84a4289ccbbe0a9208092f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94)

0s ago: executing program 2 (id=2391):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdfde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000000100bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000feffffff00280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r2}) (async)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) (async)
r5 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x4b0, 0x238, 0x238, 0x4b0, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x0, 0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x2, [{0x0, 0x1}], 0x0, 0x4, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [0x4e22], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68aa, 0x0, 0x0, 0x8, 0x0, 0x40], 0x0, [], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x9, 0x40, 0x8, '\x00', 'syz0\x00', {0x3c4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

kernel console output (not intermixed with test programs):

cess `syz.2.2028'.
[  586.825902][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'.
[  586.840185][   T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  586.869567][   T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  586.880665][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.908970][   T24] usb 2-1: config 0 descriptor??
[  586.932111][   T24] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  587.099337][ T9815] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  587.119925][ T9815] peak_usb 4-1:0.0 can0: sending command failure: -22
[  587.134680][ T9815] peak_usb 4-1:0.0 can0: sending command failure: -22
[  587.144992][ T5724] usb 6-1: reset high-speed USB device number 50 using dummy_hcd
[  587.216198][   T24] usb 2-1: USB disconnect, device number 50
[  587.218778][    C0] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[  587.229357][T13294] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19
[  587.243267][ T9815] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22
[  587.256308][   T24] ldusb 2-1:0.55: LD USB Device #1 now disconnected
[  587.271177][ T8387] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  587.315674][ T9815] usb 4-1: USB disconnect, device number 41
[  587.411822][ T8387] usb 5-1: device descriptor read/64, error -71
[  587.673645][ T8387] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  587.821773][ T8387] usb 5-1: device descriptor read/64, error -71
[  587.917746][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'.
[  587.946268][ T8387] usb usb5-port1: attempt power cycle
[  588.018646][T13340] xt_hashlimit: size too large, truncated to 1048576
[  588.023506][T13331] bond5: entered promiscuous mode
[  588.048233][T13331] 8021q: adding VLAN 0 to HW filter on device bond5
[  588.051982][ T9815] net_ratelimit: 37 callbacks suppressed
[  588.052001][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.211534][ T8394] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  588.244310][T13346] syzkaller0: entered promiscuous mode
[  588.258359][T13346] syzkaller0: entered allmulticast mode
[  588.322728][ T8387] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  588.375678][ T8387] usb 5-1: device descriptor read/8, error -71
[  588.392001][ T8388] usb 6-1: USB disconnect, device number 50
[  588.403628][ T8394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.434117][ T8394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.469347][ T8394] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  588.492835][ T8394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.515935][ T8394] usb 3-1: config 0 descriptor??
[  588.531797][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.567080][T13357] loop8: detected capacity change from 0 to 7
[  588.578820][T13357] Dev loop8: unable to read RDB block 7
[  588.586030][T13357]  loop8: unable to read partition table
[  588.592379][T13357] loop8: partition table beyond EOD, truncated
[  588.600522][T13357] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  588.611664][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.621763][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.651256][ T8387] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  588.671112][ T9815] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  588.682055][ T8387] usb 5-1: device descriptor read/8, error -71
[  588.748346][ T8394] playstation 0003:054C:0BA0.0036: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[  588.821349][ T8387] usb usb5-port1: unable to enumerate USB device
[  588.834668][ T9815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.846218][ T9815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  588.855846][ T9815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.868443][ T9815] usb 2-1: config 0 descriptor??
[  588.938916][ T8394] playstation 0003:054C:0BA0.0036: Invalid byte count transferred, expected 16 got 0
[  588.959212][ T8394] playstation 0003:054C:0BA0.0036: Failed to retrieve DualShock4 pairing info: -22
[  588.974060][ T8394] playstation 0003:054C:0BA0.0036: Failed to get MAC address from DualShock4
[  588.986900][ T8394] playstation 0003:054C:0BA0.0036: Failed to create dualshock4.
[  588.997656][ T8394] playstation 0003:054C:0BA0.0036: probe with driver playstation failed with error -22
[  589.041920][ T8388] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  589.093761][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.139814][ T8403] usb 3-1: USB disconnect, device number 16
[  589.213150][ T8388] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  589.226518][ T8388] usb 4-1: config 0 has no interface number 0
[  589.234294][ T8388] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  589.244780][ T8388] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  589.258906][ T8388] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  589.268506][ T8388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.277075][ T8388] usb 4-1: Product: syz
[  589.281822][ T8388] usb 4-1: Manufacturer: syz
[  589.286475][ T8388] usb 4-1: SerialNumber: syz
[  589.289529][ T9815] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor
[  589.306930][ T8388] usb 4-1: config 0 descriptor??
[  589.313289][T13365] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  589.323761][ T8388] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  589.330126][ T9815] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0037/input/input66
[  589.350404][ T8388] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  589.489766][ T9815] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  589.565651][ T8388] usb 4-1: USB disconnect, device number 42
[  589.605351][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.670662][ T8388] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  589.707029][ T8388] cyberjack 4-1:0.69: device disconnected
[  589.810863][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'.
[  589.865577][T13381] bond7: entered promiscuous mode
[  589.878956][ T5723] usb 2-1: USB disconnect, device number 51
[  589.899033][T13381] 8021q: adding VLAN 0 to HW filter on device bond7
[  590.037631][T13388] syzkaller0: entered promiscuous mode
[  590.047086][T13388] syzkaller0: entered allmulticast mode
[  590.133356][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.173518][ T9815] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  590.180606][T13393] xt_hashlimit: size too large, truncated to 1048576
[  590.200408][T13391] syzkaller0: entered promiscuous mode
[  590.217551][T13391] syzkaller0: entered allmulticast mode
[  590.341145][ T9815] usb 6-1: Using ep0 maxpacket: 32
[  590.369209][ T9815] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  590.385403][ T9815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.420933][ T9815] usb 6-1: config 0 descriptor??
[  590.447243][ T9815] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  590.611797][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.619997][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.651098][ T8394] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  590.722889][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[  590.813000][ T8394] usb 4-1: config 35 has an invalid interface number: 208 but max is 3
[  590.824169][ T8394] usb 4-1: config 35 contains an unexpected descriptor of type 0x1, skipping
[  590.833448][ T8394] usb 4-1: config 35 has an invalid interface number: 76 but max is 3
[  590.842433][ T8394] usb 4-1: config 35 has an invalid interface number: 201 but max is 3
[  590.850759][ T8394] usb 4-1: config 35 contains an unexpected descriptor of type 0x2, skipping
[  590.860080][ T8394] usb 4-1: config 35 has an invalid interface number: 24 but max is 3
[  590.868435][ T8394] usb 4-1: config 35 has no interface number 0
[  590.874778][ T8394] usb 4-1: config 35 has no interface number 1
[  590.881095][ T8394] usb 4-1: config 35 has no interface number 2
[  590.887280][ T8394] usb 4-1: config 35 has no interface number 3
[  590.893648][ T8394] usb 4-1: config 35 interface 208 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  590.904801][ T8394] usb 4-1: config 35 interface 208 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  590.916785][ T8394] usb 4-1: config 35 interface 76 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  590.927800][ T8394] usb 4-1: config 35 interface 76 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64
[  590.939175][ T8394] usb 4-1: config 35 interface 76 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  590.950301][ T8394] usb 4-1: config 35 interface 76 altsetting 4 has a duplicate endpoint with address 0xF, skipping
[  590.981248][ T8388] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  590.988988][ T8394] usb 4-1: config 35 interface 76 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[  591.000210][ T8394] usb 4-1: config 35 interface 76 altsetting 4 bulk endpoint 0xC has invalid maxpacket 8
[  591.010471][ T8394] usb 4-1: config 35 interface 76 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  591.022110][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0x7, skipping
[  591.033573][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0xE, skipping
[  591.044801][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0x4, skipping
[  591.055986][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0xE, skipping
[  591.067149][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0xE, skipping
[  591.078271][ T8394] usb 4-1: config 35 interface 201 altsetting 14 bulk endpoint 0x2 has invalid maxpacket 56
[  591.088588][ T8394] usb 4-1: config 35 interface 201 altsetting 14 has a duplicate endpoint with address 0xB, skipping
[  591.100452][ T8394] usb 4-1: config 35 interface 208 has no altsetting 0
[  591.111083][ T8394] usb 4-1: config 35 interface 76 has no altsetting 0
[  591.127957][ T8394] usb 4-1: config 35 interface 201 has no altsetting 0
[  591.135134][ T8394] usb 4-1: config 35 interface 24 has no altsetting 0
[  591.144459][ T8394] usb 4-1: New USB device found, idVendor=1bbb, idProduct=0052, bcdDevice=ab.36
[  591.153753][ T8388] usb 3-1: device descriptor read/64, error -71
[  591.171575][ T8394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.172384][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.179643][ T8394] usb 4-1: Product: syz
[  591.179662][ T8394] usb 4-1: Manufacturer: syz
[  591.179675][ T8394] usb 4-1: SerialNumber: syz
[  591.226106][T13417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.234010][T13417] syzkaller0: entered promiscuous mode
[  591.239525][T13417] syzkaller0: entered allmulticast mode
[  591.255506][T13417] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  591.301369][T13417] tipc: Resetting bearer <eth:syzkaller0>
[  591.383097][T13419] syzkaller0: entered promiscuous mode
[  591.388673][T13419] syzkaller0: entered allmulticast mode
[  591.399778][ T8394] option 4-1:35.208: GSM modem (1-port) converter detected
[  591.410356][ T8388] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  591.437989][ T8394] option 4-1:35.76: GSM modem (1-port) converter detected
[  591.446801][T13419] tc action pedit offset 65536 out of bounds
[  591.459327][ T8394] option 4-1:35.201: GSM modem (1-port) converter detected
[  591.477403][ T8394] option 4-1:35.24: GSM modem (1-port) converter detected
[  591.513343][ T8394] usb 4-1: USB disconnect, device number 43
[  591.527770][ T8394] option 4-1:35.208: device disconnected
[  591.575331][ T8394] option 4-1:35.76: device disconnected
[  591.579813][T13386] xt_TCPMSS: Only works on TCP SYN packets
[  591.581363][ T8388] usb 3-1: device descriptor read/64, error -71
[  591.593344][ T5724] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  591.600777][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.617263][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.622875][ T8394] option 4-1:35.201: device disconnected
[  591.645186][ T8394] option 4-1:35.24: device disconnected
[  591.722390][ T8388] usb usb3-port1: attempt power cycle
[  591.763119][ T5724] usb 5-1: config 0 has an invalid interface number: 176 but max is 0
[  591.771380][ T5724] usb 5-1: config 0 has no interface number 0
[  591.777643][ T5724] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64
[  591.794304][ T5724] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76
[  591.803573][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.811771][ T5724] usb 5-1: Product: syz
[  591.815944][ T5724] usb 5-1: Manufacturer: syz
[  591.820554][ T5724] usb 5-1: SerialNumber: syz
[  591.828740][ T5724] usb 5-1: config 0 descriptor??
[  591.838214][T13417] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  591.845595][T13417] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  591.857473][ T5724] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  591.931179][ T8403] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  592.063541][ T8388] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  592.071160][ T8403] usb 2-1: device descriptor read/64, error -71
[  592.073473][T13426] syzkaller1: entered promiscuous mode
[  592.083882][ T5724] usb 5-1: USB disconnect, device number 14
[  592.090127][T13426] syzkaller1: entered allmulticast mode
[  592.099553][T13416] tipc: Resetting bearer <eth:syzkaller0>
[  592.111902][ T8388] usb 3-1: device descriptor read/8, error -71
[  592.147061][T13416] tipc: Disabling bearer <eth:syzkaller0>
[  592.321228][ T8403] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  592.362225][ T8388] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  592.381929][ T8388] usb 3-1: device descriptor read/8, error -71
[  592.434607][ T9815] gspca_vc032x: reg_r err -32
[  592.439546][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.446029][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.451662][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.456965][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.462377][ T8403] usb 2-1: device descriptor read/64, error -71
[  592.468716][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.474327][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.479725][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.485107][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.490406][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.495776][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.501318][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.501547][ T8388] usb usb3-port1: unable to enumerate USB device
[  592.506659][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506678][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506687][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506696][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506705][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506713][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.506723][ T9815] gspca_vc032x: I2c Bus Busy Wait 00
[  592.557650][ T9815] gspca_vc032x: Unknown sensor...
[  592.562959][ T9815] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  592.581511][ T8403] usb usb2-port1: attempt power cycle
[  592.691463][ T8388] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  592.739040][T13439] fuse: Bad value for 'fd'
[  592.744941][T13439] hub 8-0:1.0: USB hub found
[  592.758905][T13439] hub 8-0:1.0: 1 port detected
[  592.862051][ T8388] usb 4-1: Using ep0 maxpacket: 32
[  592.921417][ T8403] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  592.940294][T13437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2067'.
[  592.953890][ T8403] usb 2-1: device descriptor read/8, error -71
[  593.079538][ T8388] usb 4-1: unable to get BOS descriptor or descriptor too short
[  593.099844][ T8388] usb 4-1: unable to read config index 0 descriptor/start: -71
[  593.108932][ T8388] usb 4-1: can't read configurations, error -71
[  593.201113][ T8403] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  593.221645][ T8403] usb 2-1: device descriptor read/8, error -71
[  593.251214][ T5723] net_ratelimit: 7 callbacks suppressed
[  593.251233][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.332080][ T8403] usb usb2-port1: unable to enumerate USB device
[  593.411126][ T9815] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  593.463638][ T8403] usb 6-1: USB disconnect, device number 51
[  593.562822][ T9815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  593.573657][ T9815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  593.587183][ T9815] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  593.596954][ T9815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.605799][ T9815] usb 5-1: Product: syz
[  593.610140][ T9815] usb 5-1: Manufacturer: syz
[  593.615185][ T9815] usb 5-1: SerialNumber: syz
[  593.732937][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.867655][ T9815] usb 5-1: 0:1 : does not exist
[  593.872786][ T9815] usb 5-1: unit 6 not found!
[  593.877539][ T9815] usb 5-1: unit 2 not found!
[  593.907545][ T9815] usb 5-1: USB disconnect, device number 15
[  594.151128][ T5724] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  594.161295][ T8388] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  594.291291][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.313686][ T8388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  594.325000][ T8388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  594.334944][ T8388] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  594.344304][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short
[  594.353961][ T8388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.362608][ T5724] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  594.376649][ T8388] usb 4-1: config 0 descriptor??
[  594.387208][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  594.403045][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.422466][ T5724] usb 3-1: Product: syz
[  594.426807][ T5724] usb 3-1: Manufacturer: syz
[  594.452578][ T5724] usb 3-1: SerialNumber: syz
[  594.615483][ T8388] hid-led 0003:27B8:01ED.0038: unbalanced collection at end of report description
[  594.648021][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.648373][ T8388] hid-led 0003:27B8:01ED.0038: probe with driver hid-led failed with error -22
[  594.677034][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.692104][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.700784][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.713206][ T5724] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  594.773076][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.810604][ T5723] usb 4-1: USB disconnect, device number 45
[  595.303670][ T5724] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  595.336745][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.357122][ T5724] usb 3-1: USB disconnect, device number 21
[  595.462621][T12021] udevd[12021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.511382][ T5723] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  595.661688][ T5723] usb 6-1: device descriptor read/64, error -71
[  595.811917][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.911203][ T5723] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  595.918389][T13489] syzkaller0: entered promiscuous mode
[  595.928806][T13489] syzkaller0: entered allmulticast mode
[  595.991098][    T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  596.051899][ T5723] usb 6-1: device descriptor read/64, error -71
[  596.195947][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.204233][ T5723] usb usb6-port1: attempt power cycle
[  596.219424][T13495] syzkaller0: entered promiscuous mode
[  596.228945][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  596.251186][T13495] syzkaller0: entered allmulticast mode
[  596.257317][    T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  596.294797][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.335635][    T9] usb 2-1: config 0 descriptor??
[  596.363145][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  596.372585][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.551268][ T5723] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  596.571827][ T5723] usb 6-1: device descriptor read/8, error -71
[  596.601122][ T8403] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  596.632301][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  596.758836][ T8403] usb 5-1: unable to get BOS descriptor or descriptor too short
[  596.777243][ T8403] usb 5-1: not running at top speed; connect to a high speed hub
[  596.791215][    T9] usb 3-1: Using ep0 maxpacket: 16
[  596.802008][ T8403] usb 5-1: config 2 has an invalid interface number: 99 but max is 0
[  596.805196][T13491] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  596.812496][ T5723] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  596.845710][ T8403] usb 5-1: config 2 has no interface number 0
[  596.854393][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.873302][ T8403] usb 5-1: config 2 interface 99 has no altsetting 0
[  596.898658][ T5723] usb 6-1: device descriptor read/8, error -71
[  596.906965][ T8403] usb 5-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=c5.7c
[  596.918231][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.931718][ T8403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.940375][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.950314][ T8403] usb 5-1: Product: syz
[  596.954686][ T8403] usb 5-1: Manufacturer: syz
[  596.959296][ T8403] usb 5-1: SerialNumber: syz
[  597.031645][ T5723] usb usb6-port1: unable to enumerate USB device
[  597.182147][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'.
[  597.211041][T13495] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  597.295523][ T8403] gspca_main: tv8532-2.14.0 probing 0923:010f
[  597.352518][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  597.374334][    T9] usb 3-1: no configurations
[  597.393048][    T9] usb 3-1: can't read configurations, error -22
[  597.397941][ T8403] usb 5-1: USB disconnect, device number 16
[  597.665832][T13519] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2094'.
[  597.921227][ T5723] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  598.093974][ T5723] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  598.112243][ T5723] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  598.132736][ T5723] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  598.157245][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0
[  598.168056][ T5723] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  598.182922][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.204628][ T5723] usb 4-1: config 0 descriptor??
[  598.213845][T13520] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  598.261688][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  598.351133][ T5724] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  598.411125][    T9] usb 3-1: Using ep0 maxpacket: 16
[  598.424541][    T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  598.449092][    T9] usb 3-1: config 1 has no interface number 0
[  598.456322][    T9] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  598.471730][    T9] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x8B has invalid maxpacket 56941, setting to 64
[  598.484151][ T5724] usb 5-1: device descriptor read/64, error -71
[  598.493134][    T9] usb 3-1: config 1 interface 105 has no altsetting 0
[  598.502670][    T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  598.514326][    T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  598.529349][    T9] usb 3-1: Product: syz
[  598.531610][ T8403] net_ratelimit: 5 callbacks suppressed
[  598.531640][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.541001][    T9] usb 3-1: Manufacturer: syz
[  598.553818][    T9] usb 3-1: SerialNumber: syz
[  598.566180][T13527] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  598.727669][ T8388] usb 2-1: USB disconnect, device number 56
[  598.733943][ T5724] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  598.793922][    T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22
[  598.871423][ T5724] usb 5-1: device descriptor read/64, error -71
[  598.937018][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.992001][ T5724] usb usb5-port1: attempt power cycle
[  599.051415][ T5366] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  599.191195][ T5366] usb 6-1: device descriptor read/64, error -71
[  599.292027][ T8403] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  599.341096][ T5724] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  599.362990][ T5724] usb 5-1: device descriptor read/8, error -71
[  599.441306][ T5366] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  599.451722][ T8403] usb 2-1: Using ep0 maxpacket: 16
[  599.458711][ T8403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  599.471338][ T8403] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  599.480621][ T8403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.488777][ T8403] usb 2-1: Product: syz
[  599.493514][ T8403] usb 2-1: Manufacturer: syz
[  599.498157][ T8403] usb 2-1: SerialNumber: syz
[  599.506580][ T8403] usb 2-1: config 0 descriptor??
[  599.515176][ T8403] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  599.524811][ T8403] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  599.571882][ T5366] usb 6-1: device descriptor read/64, error -71
[  599.572108][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.601227][ T5724] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  599.623174][ T5724] usb 5-1: device descriptor read/8, error -71
[  599.682031][ T5366] usb usb6-port1: attempt power cycle
[  599.701437][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.712003][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.743237][ T5724] usb usb5-port1: unable to enumerate USB device
[  599.971418][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.021123][ T5366] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  600.041827][ T5366] usb 6-1: device descriptor read/8, error -71
[  600.122164][ T8403] em28xx 2-1:0.0: chip ID is em2874
[  600.213742][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.291246][ T5366] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  600.311825][ T5366] usb 6-1: device descriptor read/8, error -71
[  600.422018][ T5366] usb usb6-port1: unable to enumerate USB device
[  600.533379][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.548892][ T5723] usbhid 4-1:0.0: can't add hid device: -71
[  600.563220][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.571335][ T5723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  600.594617][ T5723] usb 4-1: USB disconnect, device number 46
[  600.613592][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.657496][ T8403] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  600.669321][ T8403] em28xx 2-1:0.0: board has no eeprom
[  600.718767][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'.
[  600.742116][ T8403] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  600.756299][ T8403] em28xx 2-1:0.0: dvb set to bulk mode.
[  600.769913][   T24] em28xx 2-1:0.0: Binding DVB extension
[  600.786545][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.795763][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.815293][ T8403] usb 2-1: USB disconnect, device number 57
[  600.855211][ T8403] em28xx 2-1:0.0: Disconnecting em28xx
[  600.866953][   T24] em28xx 2-1:0.0: Registering input extension
[  600.991265][   T24] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  600.998572][   T24] Registered IR keymap rc-empty
[  601.011778][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.027149][   T24] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  601.039595][   T24] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67
[  601.067522][   T24] em28xx 2-1:0.0: Input extension successfully initialized
[  601.079041][ T8403] em28xx 2-1:0.0: Closing input extension
[  601.159779][ T9808] usb 3-1: USB disconnect, device number 23
[  601.184384][ T5723] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  601.302602][ T8403] em28xx 2-1:0.0: Freeing device
[  601.351985][ T5723] usb 4-1: Using ep0 maxpacket: 8
[  601.366488][ T5723] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  601.380616][ T5723] usb 4-1: config 0 has no interface number 0
[  601.393368][ T5723] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  601.416084][ T5723] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  601.452112][ T5723] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  601.472392][ T5723] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  601.486398][ T5723] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  601.497266][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.521629][ T5723] usb 4-1: config 0 descriptor??
[  601.556067][ T5723] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  601.662508][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.001198][ T5723] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  602.326595][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short
[  602.360271][T13591] binder: 13589:13591 ioctl 4b44 200000000200 returned -22
[  602.360581][ T5723] usb 5-1: unable to read config index 0 descriptor/start: -71
[  602.401100][ T9808] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  602.413215][ T5723] usb 5-1: can't read configurations, error -71
[  602.593836][ T9808] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  602.606652][ T9808] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  602.617950][ T9808] usb 2-1: config 0 has no interface number 0
[  602.645342][ T9808] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  602.665151][ T9808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.697539][ T9808] usb 2-1: Product: syz
[  602.705220][ T9808] usb 2-1: Manufacturer: syz
[  602.713338][ T9808] usb 2-1: SerialNumber: syz
[  602.727767][ T9808] usb 2-1: config 0 descriptor??
[  602.849058][T13598] syzkaller0: entered promiscuous mode
[  602.855567][T13598] syzkaller0: entered allmulticast mode
[  602.862369][ T5723] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  602.966694][T13584] netlink: 'syz.1.2117': attribute type 9 has an invalid length.
[  602.974820][T13584] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.2117'.
[  603.018093][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.028134][ T5723] usb 5-1: Using ep0 maxpacket: 16
[  603.046124][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  603.068080][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.084166][ T5723] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  603.127756][ T5723] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  603.140560][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.149248][ T5723] usb 5-1: Product: syz
[  603.174391][ T5723] usb 5-1: Manufacturer: syz
[  603.191939][ T5723] usb 5-1: SerialNumber: syz
[  603.246868][ T5723] usb 5-1: 0:2 : does not exist
[  603.314465][ T9808] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  603.344894][ T9808] uvcvideo 2-1:0.64: No valid video chain found.
[  603.388033][ T9808] usb 2-1: USB disconnect, device number 58
[  603.455097][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.487864][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.641201][ T5723] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  603.732108][ T9808] net_ratelimit: 3 callbacks suppressed
[  603.732129][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.811579][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.814175][T13612] fuse: Unknown parameter 'gRoup_id'
[  603.820752][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.893869][ T5723] usb 5-1: USB disconnect, device number 22
[  603.991715][ T9808] usb 4-1: USB disconnect, device number 47
[  604.017835][ T9808] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  604.052162][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.092683][T12021] udevd[12021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  604.132590][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.394491][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'.
[  604.404228][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2133'.
[  604.414681][ T5366] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  604.436807][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'.
[  604.531825][T13630] bond6: entered promiscuous mode
[  604.550133][T13630] 8021q: adding VLAN 0 to HW filter on device bond6
[  604.567310][T13636] netlink: 'syz.4.2134': attribute type 29 has an invalid length.
[  604.582831][ T5366] usb 3-1: Using ep0 maxpacket: 16
[  604.588116][ T5724] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  604.775379][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.795295][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.825170][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.845901][T13642] syzkaller0: entered promiscuous mode
[  604.852042][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  604.867416][T13642] syzkaller0: entered allmulticast mode
[  604.874254][ T5724] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  604.904726][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.968881][ T5724] usb 2-1: config 0 descriptor??
[  605.172679][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.392241][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.401828][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.414629][T13624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.424293][T13624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.442134][T13624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.465353][ T5724] usbhid 2-1:0.0: can't add hid device: -71
[  605.475710][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  605.489578][ T5724] usb 2-1: USB disconnect, device number 59
[  605.511109][ T8388] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  605.551135][    T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  605.581170][ T8394] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  605.662047][ T8388] usb 5-1: Using ep0 maxpacket: 16
[  605.672885][ T8388] usb 5-1: unable to get BOS descriptor or descriptor too short
[  605.682889][ T8388] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  605.697376][ T8388] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8
[  605.707779][ T8388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.718421][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  605.729417][    T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  605.738764][ T8388] usb 5-1: Product: syz
[  605.744464][ T8388] usb 5-1: Manufacturer: syz
[  605.749342][    T9] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 255, using maximum allowed: 30
[  605.760614][ T8388] usb 5-1: SerialNumber: syz
[  605.767807][ T8394] usb 4-1: unable to get BOS descriptor or descriptor too short
[  605.778331][ T8394] usb 4-1: not running at top speed; connect to a high speed hub
[  605.786885][    T9] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  605.804954][ T8394] usb 4-1: config 1 has too many interfaces: 35, using maximum allowed: 32
[  605.814538][ T8394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  605.815335][    T9] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[  605.835415][ T8394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 35
[  605.844774][ T8394] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  605.858113][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.866967][    T9] usb 6-1: Product: syz
[  605.872239][    T9] usb 6-1: Manufacturer: syz
[  605.878362][    T9] usb 6-1: SerialNumber: syz
[  605.884840][ T8394] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  605.895047][ T8394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.905139][ T8394] usb 4-1: Product: syz
[  605.910092][ T8394] usb 4-1: Manufacturer: syz
[  605.930901][ T8394] usb 4-1: SerialNumber: syz
[  605.958722][ T8394] cdc_ncm 4-1:1.0: skipping garbage
[  605.969474][ T8394] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  605.984491][ T8394] cdc_ncm 4-1:1.0: bind() failure
[  606.003659][ T8388] usb 5-1: USB disconnect, device number 23
[  606.124998][    T9] usb 6-1: 0:2 : does not exist
[  606.171957][T13654] dlm: Unknown command passed to DLM device : 33
[  606.171957][T13654] 
[  606.233968][    T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[  606.260627][T13655] netlink: 'syz.3.2141': attribute type 16 has an invalid length.
[  606.284170][    T9] usb 6-1: USB disconnect, device number 60
[  606.300086][T13655] netlink: 'syz.3.2141': attribute type 17 has an invalid length.
[  606.325736][T12021] udevd[12021]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  606.369653][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.397334][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.569641][T13655] 8021q: adding VLAN 0 to HW filter on device team0
[  606.601337][ T8388] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[  606.636808][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.734708][ T5366] usb 3-1: unable to get BOS descriptor or descriptor too short
[  606.751226][ T8388] usb 2-1: device descriptor read/64, error -71
[  606.760356][ T5366] usb 3-1: unable to read config index 0 descriptor/start: -71
[  606.786963][ T5366] usb 3-1: can't read configurations, error -71
[  606.847637][T13655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  606.864960][T13655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  606.886570][ T5723] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  607.001081][ T8388] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[  607.057398][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  607.095398][ T5723] usb 5-1: Using ep0 maxpacket: 8
[  607.114482][ T5723] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  607.140267][ T5723] usb 5-1: config 0 has no interface number 0
[  607.142006][ T8388] usb 2-1: device descriptor read/64, error -71
[  607.153404][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  607.166038][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  607.179254][ T5723] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  607.190902][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  607.207543][ T5723] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  607.218090][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.230139][ T5723] usb 5-1: config 0 descriptor??
[  607.243529][ T5723] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  607.279567][T13665] bond8: entered promiscuous mode
[  607.301649][ T8388] usb usb2-port1: attempt power cycle
[  607.310914][T13665] 8021q: adding VLAN 0 to HW filter on device bond8
[  607.479324][T13671] bridge_slave_0: left allmulticast mode
[  607.488418][T13671] bridge_slave_0: left promiscuous mode
[  607.497324][T13671] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.510198][ T8396] usb 5-1: USB disconnect, device number 24
[  607.510216][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  607.532030][T13661] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19
[  607.545518][T13671] bridge_slave_1: left allmulticast mode
[  607.554265][ T8396] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  607.581734][T13671] bridge_slave_1: left promiscuous mode
[  607.594888][T13671] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.660067][T13671] bond0: (slave bond_slave_0): Releasing backup interface
[  607.661826][ T8388] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[  607.703206][ T8388] usb 2-1: device descriptor read/8, error -71
[  607.723698][T13671] bond0: (slave bond_slave_1): Releasing backup interface
[  607.764115][T13671] team0: Port device team_slave_0 removed
[  607.787047][T13671] team0: Port device team_slave_1 removed
[  607.803117][T13671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  607.819171][T13671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  607.842460][T13671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  607.857195][T13671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.942585][ T8388] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[  607.972924][ T8388] usb 2-1: device descriptor read/8, error -71
[  608.091776][ T8388] usb usb2-port1: unable to enumerate USB device
[  608.354030][ T5723] usb 4-1: USB disconnect, device number 48
[  608.372393][ T8396] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  608.462046][ T8388] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  608.541789][ T8396] usb 3-1: Using ep0 maxpacket: 8
[  608.550595][ T8396] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.562059][ T8396] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  608.575186][ T8396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.597308][ T8396] usb 3-1: config 0 descriptor??
[  608.621311][ T8388] usb 5-1: Invalid ep0 maxpacket: 64
[  608.627864][ T8396] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  608.680762][T13690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  608.761865][ T8388] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  608.830786][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.842637][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.921024][ T8388] usb 5-1: Invalid ep0 maxpacket: 64
[  608.933363][ T8388] usb usb5-port1: attempt power cycle
[  608.946925][ T5723] net_ratelimit: 39 callbacks suppressed
[  608.946938][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.171532][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.291103][ T8388] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  609.323461][ T8388] usb 5-1: Invalid ep0 maxpacket: 64
[  609.331714][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.481293][ T8388] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  609.516891][ T8388] usb 5-1: Invalid ep0 maxpacket: 64
[  609.525893][ T8388] usb usb5-port1: unable to enumerate USB device
[  609.822979][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.874253][T13706] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2155'.
[  609.891908][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.900505][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.972292][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.241077][ T9808] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  610.371484][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.452090][ T9808] usb 2-1: not running at top speed; connect to a high speed hub
[  610.469421][ T9808] usb 2-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40
[  610.481962][ T9808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.501160][ T9808] usb 2-1: Product: Х
[  610.511699][ T9808] usb 2-1: Manufacturer: ࠧ
[  610.525313][ T9808] usb 2-1: SerialNumber: 㛴꿿膴㯰텑妴ꂞ岋ბ屖䉨兊㍆ꈯ⤋퇡箷暡ᎄ幣଱ᷧ钊嗞坄賉豚૸郍䅊쀅悯뮀帥ꊥ⛤⦊꿄㡦⡬ꑎ处ួ寧ힶ簃䜤헵蓫ﮉᴜ塉뢨䡉᪾猌鯷垜沞鵘ᡮ鼴奐艼垍☺
[  610.699803][ T8403] usb 3-1: USB disconnect, device number 26
[  611.012423][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.093618][T13722] fuse: fd is not a fuse device
[  611.123432][ T9808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  611.188401][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'.
[  611.271950][   T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  611.413651][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.424223][   T24] usb 6-1: device descriptor read/64, error -71
[  611.658434][T13727] libceph: resolve '
[  611.658434][T13727] -&���f�Y�ǝ�a���2i�
[  611.658434][T13727] .���?��&�*��&' (ret=-3): failed
[  611.671164][   T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  611.743707][ T8403] usb 2-1: USB disconnect, device number 64
[  611.832590][   T24] usb 6-1: device descriptor read/64, error -71
[  611.961523][   T24] usb usb6-port1: attempt power cycle
[  612.031235][ T8394] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  612.212319][ T8394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.247250][ T8394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.258490][ T8394] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  612.271918][ T8394] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  612.281626][ T8394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.311362][ T8394] usb 5-1: config 0 descriptor??
[  612.332813][   T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  612.377947][   T24] usb 6-1: device descriptor read/8, error -71
[  612.380006][T13747] loop8: detected capacity change from 0 to 7
[  612.406442][T13747] Dev loop8: unable to read RDB block 7
[  612.418238][T13747]  loop8: unable to read partition table
[  612.425507][T13747] loop8: partition table beyond EOD, truncated
[  612.437963][T13747] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  612.535176][T13736] Invalid logical block size (32767)
[  612.631039][   T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  612.662393][   T24] usb 6-1: device descriptor read/8, error -71
[  612.701254][ T9808] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  612.755280][ T8394] hid_parser_main: 6 callbacks suppressed
[  612.755311][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.773335][   T24] usb usb6-port1: unable to enumerate USB device
[  612.788656][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.805024][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.815915][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.826547][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.834788][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.842802][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.850881][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.860208][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.868695][ T8394] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0
[  612.872949][ T9808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.886726][ T8394] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  612.909501][ T9808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.939933][ T9808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  612.963735][ T9808] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  612.991920][ T9808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.015853][ T9808] usb 3-1: config 0 descriptor??
[  613.044030][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.072137][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.403222][T13768] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  613.427819][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.443374][T13749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.443879][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.464949][T13749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.487217][ T9808] usbhid 3-1:0.0: can't add hid device: -71
[  613.501285][ T9808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  613.503932][ T8394] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  613.524337][ T9808] usb 3-1: USB disconnect, device number 27
[  613.671071][ T8403] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  613.681569][ T8394] usb 2-1: Using ep0 maxpacket: 32
[  613.689660][ T8394] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  613.700196][ T8394] usb 2-1: config 0 has no interface number 0
[  613.706978][ T8394] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  613.721468][ T8394] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  613.735618][ T8394] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  613.746560][ T8394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.766356][ T8394] usb 2-1: Product: syz
[  613.776488][ T8394] usb 2-1: Manufacturer: syz
[  613.786345][ T8394] usb 2-1: SerialNumber: syz
[  613.806389][ T8394] usb 2-1: config 0 descriptor??
[  613.873463][ T8403] usb 4-1: unable to get BOS descriptor or descriptor too short
[  613.887300][ T8403] usb 4-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  613.902636][ T8403] usb 4-1: config 66 interface 0 has no altsetting 0
[  613.924205][ T8403] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  613.941781][ T8403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.953180][ T8403] usb 4-1: Product: syz
[  613.971547][ T8403] usb 4-1: Manufacturer: syz
[  613.976343][ T8403] usb 4-1: SerialNumber: syz
[  613.998345][T13767] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  614.036707][ T8394] radio-si470x 2-1:0.35: this is not a si470x device.
[  614.121596][ T5366] usb 5-1: reset high-speed USB device number 29 using dummy_hcd
[  614.131907][ T9808] net_ratelimit: 6 callbacks suppressed
[  614.131924][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.238008][ T8403] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  614.238469][ T8394] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  614.320235][ T8403] usb 4-1: USB disconnect, device number 49
[  614.354959][ T8394] usb 2-1: USB disconnect, device number 65
[  614.533185][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.831563][ T8403] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  614.941866][T13791] loop5: detected capacity change from 0 to 7
[  614.978469][T13791] Dev loop5: unable to read RDB block 7
[  615.001070][ T8403] usb 3-1: Using ep0 maxpacket: 16
[  615.001397][T13791]  loop5: unable to read partition table
[  615.036143][T13796] netlink: 'syz.4.2182': attribute type 5 has an invalid length.
[  615.045083][T13791] loop5: partition table beyond EOD, truncated
[  615.060565][T13796] misc userio: Invalid payload size
[  615.074880][T13791] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  615.076184][ T8403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.117660][ T8403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.128197][ T8403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  615.145620][ T8403] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  615.156894][ T8403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.177933][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.197374][ T8403] usb 3-1: config 0 descriptor??
[  615.516863][ T8388] usb 5-1: USB disconnect, device number 29
[  615.572702][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.626961][ T8403] hid-multitouch 0003:0457:07DA.003A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  615.723564][ T8388] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  615.848275][   T24] usb 3-1: USB disconnect, device number 28
[  615.945560][T13819] could not allocate digest TFM handle ghash-ce-sync
[  615.962139][ T8388] usb 5-1: unable to get BOS descriptor or descriptor too short
[  615.974291][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.976457][T13820] could not allocate digest TFM handle ghash-ce-sync
[  615.982819][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.022933][ T8388] usb 5-1: not running at top speed; connect to a high speed hub
[  616.047268][ T8388] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.079053][ T8388] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  616.133862][ T8388] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  616.152082][ T8388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.173117][ T8388] usb 5-1: Product: syz
[  616.181157][ T8388] usb 5-1: Manufacturer: syz
[  616.192561][T13808] block device autoloading is deprecated and will be removed.
[  616.203563][ T8388] usb 5-1: SerialNumber: syz
[  616.213045][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.223819][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.390117][T13831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2189'.
[  616.402601][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'.
[  616.477103][T13836] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2182'.
[  616.611635][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.625215][ T8388] usb 5-1: 0:2 : does not exist
[  616.639054][ T8388] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  616.659370][ T8388] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  616.668121][ T8388] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  616.678759][ T8388] usb 5-1: [5] FU [PCM Capture Volume] ch = 1, val = 0/1/1
[  616.691487][ T8388] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  616.702110][ T8396] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  616.712947][ T8388] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  616.749136][ T8388] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  616.767490][ T8388] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  616.814100][ T8388] usb 5-1: USB disconnect, device number 30
[  616.833940][ T5366] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  616.865033][T13841] syzkaller1: entered promiscuous mode
[  616.870899][T12021] udevd[12021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  616.882653][T13841] syzkaller1: entered allmulticast mode
[  616.892821][ T8396] usb 6-1: Using ep0 maxpacket: 32
[  616.908952][ T8396] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  616.919929][ T8396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.939802][ T8396] usb 6-1: config 0 descriptor??
[  617.001311][ T5366] usb 3-1: Using ep0 maxpacket: 8
[  617.009644][ T5366] usb 3-1: config index 0 descriptor too short (expected 26, got 18)
[  617.059871][ T5366] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  617.069648][ T5366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.080071][ T5366] usb 3-1: Product: syz
[  617.092085][ T5366] usb 3-1: Manufacturer: syz
[  617.096960][ T5366] usb 3-1: SerialNumber: syz
[  617.119583][ T5366] usb 3-1: config 0 descriptor??
[  617.146629][ T5366] gspca_main: sq930x-2.14.0 probing 2770:930c
[  617.156108][ T8396] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  617.179748][ T8396] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  617.212914][ T8396] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  617.233525][ T8396] usb 6-1: media controller created
[  617.254174][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.288329][ T8396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  617.812669][ T8388] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  617.835520][T13854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  617.962404][ T5366] gspca_sq930x: reg_w 0305 fd00 failed -71
[  617.981283][ T8388] usb 5-1: Using ep0 maxpacket: 32
[  617.988907][ T8388] usb 5-1: config 8 has an invalid interface number: 246 but max is 2
[  617.997820][ T8388] usb 5-1: config 8 has an invalid interface number: 129 but max is 2
[  618.013137][ T8388] usb 5-1: config 8 has an invalid interface association descriptor of length 2, skipping
[  618.024321][ T8388] usb 5-1: config 8 has an invalid interface number: 69 but max is 2
[  618.032588][ T8388] usb 5-1: config 8 has no interface number 0
[  618.038825][ T8388] usb 5-1: config 8 has no interface number 1
[  618.045194][ T8388] usb 5-1: config 8 has no interface number 2
[  618.058054][ T8388] usb 5-1: config 8 interface 246 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  618.082876][ T8396] az6027: usb out operation failed. (-71)
[  618.093123][ T8388] usb 5-1: config 8 interface 246 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  618.107513][ T8396] stb0899_attach: Driver disabled by Kconfig
[  618.124391][ T8396] az6027: no front-end attached
[  618.124391][ T8396] 
[  618.135727][ T8388] usb 5-1: config 8 interface 129 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  618.152946][ T8396] az6027: usb out operation failed. (-71)
[  618.165354][ T8396] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  618.173647][ T8388] usb 5-1: config 8 interface 129 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  618.193946][ T8396] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69
[  618.210999][ T5366] gspca_sq930x: Sensor ov9630 not yet treated
[  618.217304][ T8388] usb 5-1: config 8 interface 129 altsetting 7 endpoint 0xD has invalid wMaxPacketSize 0
[  618.231142][ T5366] sq930x 3-1:0.0: probe with driver sq930x failed with error -22
[  618.252789][ T8388] usb 5-1: config 8 interface 129 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  618.264085][ T8396] dvb-usb: schedule remote query interval to 400 msecs.
[  618.277166][ T5366] usb 3-1: USB disconnect, device number 29
[  618.286295][ T8396] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  618.300707][ T8388] usb 5-1: config 8 interface 129 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  618.321549][ T8396] usb 6-1: USB disconnect, device number 65
[  618.333400][ T8388] usb 5-1: config 8 interface 69 altsetting 248 has a duplicate endpoint with address 0x8, skipping
[  618.345738][ T8388] usb 5-1: config 8 interface 69 altsetting 248 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  618.358760][ T8388] usb 5-1: config 8 interface 69 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  618.389633][ T8388] usb 5-1: config 8 interface 246 has no altsetting 0
[  618.419642][ T8388] usb 5-1: config 8 interface 129 has no altsetting 0
[  618.436524][ T8388] usb 5-1: config 8 interface 69 has no altsetting 0
[  618.462539][ T8388] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice=d7.fb
[  618.473693][ T8388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.489742][ T8396] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  618.503219][ T8388] usb 5-1: Product: syz
[  618.511365][ T8388] usb 5-1: Manufacturer: syz
[  618.547064][ T8388] usb 5-1: SerialNumber: syz
[  618.671396][   T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  618.772066][ T5366] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  618.804813][ T8388] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  618.815587][   T24] usb 4-1: device descriptor read/64, error -71
[  618.852390][ T8388] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  618.903283][ T8388] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  618.937738][ T8388] usb 5-1: USB disconnect, device number 31
[  618.961185][ T5366] usb 2-1: Using ep0 maxpacket: 32
[  618.981877][ T5366] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  619.023064][ T5366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.059831][ T5366] usb 2-1: config 0 descriptor??
[  619.121093][   T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  619.256482][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2201'.
[  619.271374][   T24] usb 4-1: device descriptor read/64, error -71
[  619.309105][ T5366] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  619.329226][ T5366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  619.341167][ T9808] net_ratelimit: 5 callbacks suppressed
[  619.341185][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.351698][ T5366] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  619.363927][ T5366] usb 2-1: media controller created
[  619.393313][   T24] usb usb4-port1: attempt power cycle
[  619.428720][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.441577][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.514401][ T5366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  619.578310][ T5366] az6027: usb out operation failed. (-71)
[  619.598878][ T5366] az6027: usb out operation failed. (-71)
[  619.607760][ T5366] stb0899_attach: Driver disabled by Kconfig
[  619.620619][ T5366] az6027: no front-end attached
[  619.620619][ T5366] 
[  619.637456][ T5366] az6027: usb out operation failed. (-71)
[  619.644422][ T5366] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  619.674671][T13882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.685792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.731841][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.752206][ T5366] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70
[  619.761088][   T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  619.801949][   T24] usb 4-1: device descriptor read/8, error -71
[  619.809448][ T5366] dvb-usb: schedule remote query interval to 400 msecs.
[  619.817787][ T8396] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  619.847557][ T5366] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  619.866513][T13884] netlink: 'syz.4.2203': attribute type 28 has an invalid length.
[  619.892094][ T5366] usb 2-1: USB disconnect, device number 66
[  619.913265][T13882] bridge2: entered promiscuous mode
[  619.946817][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'.
[  619.991130][ T8396] usb 6-1: Using ep0 maxpacket: 16
[  619.999933][T13882] bridge2: entered allmulticast mode
[  620.015922][ T5366] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  620.056762][T13882] team0: Port device bridge2 added
[  620.076515][   T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  620.109815][T13885] bridge0: port 1(team0) entered blocking state
[  620.121802][   T24] usb 4-1: device descriptor read/8, error -71
[  620.131433][T13885] bridge0: port 1(team0) entered disabled state
[  620.198113][T13885] team0: entered allmulticast mode
[  620.215964][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.253767][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.261473][   T24] usb usb4-port1: unable to enumerate USB device
[  620.280868][T13885] team0: entered promiscuous mode
[  620.305160][ T8396] usb 6-1: unable to get BOS descriptor or descriptor too short
[  620.325120][ T8396] usb 6-1: unable to read config index 0 descriptor/start: -71
[  620.340237][ T8396] usb 6-1: can't read configurations, error -71
[  620.371258][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.609554][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.628269][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.771957][T12589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.785650][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.806545][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.842942][ T9808] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  621.021839][ T9808] usb 3-1: Using ep0 maxpacket: 32
[  621.081057][T13912] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  621.087633][T13912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  621.123562][T13912] vhci_hcd vhci_hcd.0: Device attached
[  621.131071][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  621.143102][ T9808] usb 3-1: unable to get BOS descriptor or descriptor too short
[  621.173838][ T9808] usb 3-1: unable to read config index 0 descriptor/start: -71
[  621.193992][ T9808] usb 3-1: can't read configurations, error -71
[  621.289886][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.303569][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.314001][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  621.321319][ T5366] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  621.335856][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  621.359670][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.375937][   T24] usb 5-1: config 0 descriptor??
[  621.391471][ T5366] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  621.421908][ T8394] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  621.501250][ T8396] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[  621.627234][ T8394] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  621.661047][ T8394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  621.672246][ T8396] usb 6-1: Invalid ep0 maxpacket: 64
[  621.690128][ T8394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  621.720485][ T8394] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  621.758214][ T8394] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  621.794971][ T8394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.828171][ T8396] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[  621.849561][ T8394] usb 2-1: config 0 descriptor??
[  621.853465][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  621.892376][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  621.942794][   T24] usb 5-1: USB disconnect, device number 32
[  622.041142][ T8396] usb 6-1: Invalid ep0 maxpacket: 64
[  622.060447][ T8396] usb usb6-port1: attempt power cycle
[  622.259972][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2213'.
[  622.321121][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2213'.
[  622.420342][T13942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.441249][ T8396] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[  622.453477][T13942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.482168][ T8396] usb 6-1: Invalid ep0 maxpacket: 64
[  622.641229][ T8396] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[  622.663911][T13918] binder: 13916:13918 ioctl c018620c 200000000000 returned -22
[  622.712196][ T8396] usb 6-1: Invalid ep0 maxpacket: 64
[  622.718130][ T8396] usb usb6-port1: unable to enumerate USB device
[  622.751063][ T9808] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  622.831479][ T8394] usbhid 2-1:0.0: can't add hid device: -71
[  622.866906][ T8394] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  622.919956][ T8394] usb 2-1: USB disconnect, device number 67
[  622.933493][ T9808] usb 3-1: Using ep0 maxpacket: 16
[  622.981763][ T9808] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  623.012710][ T9808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.023097][ T9808] usb 3-1: Product: syz
[  623.032741][ T9808] usb 3-1: Manufacturer: syz
[  623.046992][ T9808] usb 3-1: SerialNumber: syz
[  623.068138][ T9808] usb 3-1: config 0 descriptor??
[  623.125173][ T9808] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  623.405695][T13962] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  623.568116][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'.
[  623.958065][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'.
[  624.052232][ T8394] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  624.158159][T13913] vhci_hcd: connection reset by peer
[  624.193902][T10395] vhci_hcd vhci_hcd.5: stop threads
[  624.218350][T10395] vhci_hcd vhci_hcd.5: release socket
[  624.226830][ T8394] usb 2-1: device descriptor read/64, error -71
[  624.245465][T10395] vhci_hcd vhci_hcd.5: disconnect device
[  624.461476][ T8396] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  624.501194][ T8394] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  624.537960][   T24] net_ratelimit: 14 callbacks suppressed
[  624.537985][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.552460][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  624.558854][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  624.611803][ T8396] usb 4-1: device descriptor read/64, error -71
[  624.651110][ T8394] usb 2-1: device descriptor read/64, error -71
[  624.771837][ T8394] usb usb2-port1: attempt power cycle
[  624.871191][ T8396] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  624.931761][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.001236][ T8396] usb 4-1: device descriptor read/64, error -71
[  625.091865][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.111441][ T8396] usb usb4-port1: attempt power cycle
[  625.131134][ T8394] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  625.172106][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.182986][ T8394] usb 2-1: device descriptor read/8, error -71
[  625.221123][ T5723] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  625.371184][ T5723] usb 5-1: Using ep0 maxpacket: 8
[  625.378981][ T5723] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  625.387542][ T5723] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  625.397408][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  625.407702][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  625.417956][ T5723] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.431299][ T5723] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  625.440391][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.441442][ T8388] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  625.456695][ T8396] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  625.465400][ T8394] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  625.492065][ T8396] usb 4-1: device descriptor read/8, error -71
[  625.500037][ T8394] usb 2-1: device descriptor read/8, error -71
[  625.571991][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.601211][ T8388] usb 6-1: device descriptor read/64, error -71
[  625.612580][ T8394] usb usb2-port1: unable to enumerate USB device
[  625.660322][ T5723] usb 5-1: usb_control_msg returned -32
[  625.666473][ T5723] usbtmc 5-1:16.0: can't read capabilities
[  625.741112][ T8396] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  625.762038][ T8396] usb 4-1: device descriptor read/8, error -71
[  625.841144][ T8388] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  625.853264][ T9808] usb 3-1: clie_3_5_startup: get config number failed: -71
[  625.861937][ T9808] visor 3-1:0.0: probe with driver visor failed with error -71
[  625.874311][ T8396] usb usb4-port1: unable to enumerate USB device
[  625.887899][ T9808] usb 3-1: USB disconnect, device number 32
[  625.960613][T14000] netlink: 'syz.2.2236': attribute type 3 has an invalid length.
[  625.971463][ T8388] usb 6-1: device descriptor read/64, error -71
[  625.971611][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.990482][T14001] netlink: 'syz.2.2236': attribute type 3 has an invalid length.
[  626.081617][ T8388] usb usb6-port1: attempt power cycle
[  626.421413][ T8388] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  626.441544][ T8388] usb 6-1: device descriptor read/8, error -71
[  626.542094][ T5366] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  626.611276][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.711164][ T8388] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  626.731651][ T8388] usb 6-1: device descriptor read/8, error -71
[  626.841676][ T8388] usb usb6-port1: unable to enumerate USB device
[  627.014890][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.059261][T14013] m>e5
: entered promiscuous mode
[  627.091835][T12589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.104258][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.371473][ T8388] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  627.553157][ T8388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.577033][ T8388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.588768][ T8388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  627.611488][ T8388] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  627.624405][ T8388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.645277][ T8388] usb 2-1: config 0 descriptor??
[  627.915485][ T8388] plantronics 0003:047F:FFFF.003B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  627.937973][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2246'.
[  628.033126][ T8388] usb 5-1: USB disconnect, device number 33
[  628.065837][   T24] usb 2-1: USB disconnect, device number 72
[  628.104619][ T9808] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  628.120047][T14044] fido_id[14044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  628.280448][ T9808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  628.310539][ T9808] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  628.347684][ T9808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  628.385009][ T9808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  628.441186][ T9808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  628.495057][ T9808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  628.532937][ T9808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  628.559005][T14049] kvm: kvm [14048]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000
[  628.572859][ T9808] usb 4-1: Product: syz
[  628.596087][ T9808] usb 4-1: Manufacturer: syz
[  628.641528][ T9808] cdc_wdm 4-1:1.0: skipping garbage
[  628.651738][T14049] kvm: kvm [14048]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[  628.653484][ T5366] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  628.665364][ T9808] cdc_wdm 4-1:1.0: skipping garbage
[  628.717628][T14049] kvm: kvm [14048]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  628.727262][ T9808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  628.743793][ T9808] cdc_wdm 4-1:1.0: Unknown control protocol
[  628.841077][ T5366] usb 6-1: Using ep0 maxpacket: 16
[  628.873297][ T5366] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.887287][ T5366] usb 6-1: config 0 interface 0 has no altsetting 0
[  628.901379][ T5366] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  628.918422][ T5366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.952827][ T5366] usb 6-1: config 0 descriptor??
[  629.461734][ T5366] nzxt-smart2 0003:1E71:2009.003C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  629.643162][T14062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.666642][T14053] syzkaller0: entered promiscuous mode
[  629.691210][T14053] syzkaller0: entered allmulticast mode
[  629.754235][ T9808] usb 4-1: USB disconnect, device number 58
[  629.921463][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  630.066135][ T9808] usb 6-1: USB disconnect, device number 76
[  630.111250][   T24] usb 2-1: Using ep0 maxpacket: 16
[  630.121901][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  630.131942][ T9815] net_ratelimit: 13 callbacks suppressed
[  630.131959][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.147476][   T24] usb 2-1: config 12 has an invalid interface number: 45 but max is 0
[  630.155824][   T24] usb 2-1: config 12 has no interface number 0
[  630.162418][   T24] usb 2-1: config 12 interface 45 has no altsetting 0
[  630.173019][   T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  630.183311][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.191472][   T24] usb 2-1: Product: syz
[  630.195933][   T24] usb 2-1: Manufacturer: syz
[  630.200658][   T24] usb 2-1: SerialNumber: syz
[  630.211236][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.422276][   T24] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  630.439021][   T24] gspca_vc032x: reg_w err -71
[  630.449662][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.463260][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.476089][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.495548][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.514425][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.535820][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.549852][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.557333][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.563848][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.569424][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.575124][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.580671][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.586790][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.608819][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.633102][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.654597][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.677354][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.716433][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.731943][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  630.751275][   T24] gspca_vc032x: Unknown sensor...
[  630.759096][T14077] netlink: 'syz.3.2256': attribute type 1 has an invalid length.
[  630.769421][   T24] vc032x 2-1:12.45: probe with driver vc032x failed with error -22
[  630.800089][   T24] usb 2-1: USB disconnect, device number 73
[  630.864970][T14077] 8021q: adding VLAN 0 to HW filter on device bond4
[  630.889367][T14086] bond4: (slave veth0_to_bond): making interface the new active one
[  630.912363][T14086] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  630.943033][T14087] bridge0: port 1(vlan2) entered blocking state
[  630.962944][T14087] bridge0: port 1(vlan2) entered disabled state
[  630.989639][T14087] vlan2: entered allmulticast mode
[  631.004493][T14087] geneve0: entered allmulticast mode
[  631.033203][T14077] bond4: entered promiscuous mode
[  631.038773][T14077] veth0_to_bond: entered promiscuous mode
[  631.047702][ T9815] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  631.055979][T14077] bond4: entered allmulticast mode
[  631.061562][T14077] veth0_to_bond: entered allmulticast mode
[  631.089532][T14086] macvlan0: entered promiscuous mode
[  631.096886][T14086] macvlan0: entered allmulticast mode
[  631.105460][T14086] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  631.119035][T14086] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  631.172278][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.172372][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.193005][ T9815] usb 6-1: device descriptor read/64, error -71
[  631.256133][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.256161][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.301074][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  631.441048][ T9815] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  631.461046][   T24] usb 2-1: Using ep0 maxpacket: 32
[  631.468604][   T24] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  631.481035][   T24] usb 2-1: config 2 has no interface number 0
[  631.493344][   T24] usb 2-1: config 2 interface 88 has no altsetting 0
[  631.504026][   T24] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  631.513360][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.522392][   T24] usb 2-1: Product: syz
[  631.527601][   T24] usb 2-1: Manufacturer: syz
[  631.532623][   T24] usb 2-1: SerialNumber: syz
[  631.581066][ T9815] usb 6-1: device descriptor read/64, error -71
[  631.702793][ T9815] usb usb6-port1: attempt power cycle
[  631.762852][   T24] asix 2-1:2.88: probe with driver asix failed with error -71
[  631.795623][   T24] usb 2-1: USB disconnect, device number 74
[  632.053177][ T9815] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  632.082209][ T9815] usb 6-1: device descriptor read/8, error -71
[  632.166243][T14103] xt_time: invalid argument - start or stop time greater than 23:59:59
[  632.179903][T14103] xt_time: invalid argument - start or stop time greater than 23:59:59
[  632.211934][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.291432][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.321094][ T9815] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  632.362815][ T9815] usb 6-1: device descriptor read/8, error -71
[  632.460874][T14113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2265'.
[  632.483177][ T9815] usb usb6-port1: unable to enumerate USB device
[  632.811154][T14117] loop8: detected capacity change from 0 to 7
[  632.827673][T14117] Dev loop8: unable to read RDB block 7
[  632.836000][T14117]  loop8: unable to read partition table
[  632.842321][T14117] loop8: partition table beyond EOD, truncated
[  632.850863][T14117] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  633.153314][   T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  633.227962][T14132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.252425][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.352002][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.360558][   T24] usb 2-1: Using ep0 maxpacket: 16
[  633.365314][T14131] fuse: Bad value for 'fd'
[  633.411165][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  633.429761][   T24] usb 2-1: config 191 has 0 interfaces, different from the descriptor's value: 11
[  633.444795][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=3e.2a
[  633.454278][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.462401][   T24] usb 2-1: Product: syz
[  633.466590][   T24] usb 2-1: Manufacturer: syz
[  633.471293][   T24] usb 2-1: SerialNumber: syz
[  633.577335][T14085] syz.2.2259 (14085): drop_caches: 1
[  633.746920][T14118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  633.753477][T14118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  633.798097][T14118] vhci_hcd vhci_hcd.0: Device attached
[  633.949219][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'.
[  634.068260][T14154] loop8: detected capacity change from 0 to 7
[  634.076818][T14154] Dev loop8: unable to read RDB block 7
[  634.081215][ T9815] usb 36-1: SetAddress Request (2) to port 0
[  634.083765][T14154]  loop8: unable to read partition table
[  634.094552][ T8394] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  634.106165][T14154] loop8: partition table beyond EOD, truncated
[  634.107942][ T9815] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  634.120522][T14154] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  634.253245][ T8394] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  634.268735][ T8394] usb 4-1: config 0 has no interface number 0
[  634.282418][ T8394] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82
[  634.296841][ T8394] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x82 has invalid maxpacket 24019, setting to 64
[  634.308954][ T8394] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  634.319399][ T8394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.359331][ T8394] usb 4-1: config 0 descriptor??
[  634.389326][T14145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  634.418802][ T8394] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input71
[  634.466670][T14161] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  634.483108][T14161] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  634.557614][T14164] xt_bpf: check failed: parse error
[  634.571240][ T8396] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  634.625466][ T8394] usb 4-1: USB disconnect, device number 59
[  634.741656][ T8396] usb 3-1: Using ep0 maxpacket: 16
[  634.749117][ T8396] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.760632][ T8396] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  634.770757][ T8396] usb 3-1: config 0 interface 0 has no altsetting 0
[  634.801655][ T8396] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[  634.831055][ T8396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.856257][ T8396] usb 3-1: config 0 descriptor??
[  635.094770][ T5366] usb 3-1: USB disconnect, device number 33
[  635.264897][ T9808] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  635.331698][ T8403] net_ratelimit: 8 callbacks suppressed
[  635.331713][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.422358][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.461200][ T9808] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  635.510230][T14140] vhci_hcd: connection reset by peer
[  635.517708][T10396] vhci_hcd vhci_hcd.1: stop threads
[  635.525689][T10396] vhci_hcd vhci_hcd.1: release socket
[  635.538178][ T9808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  635.545477][T10396] vhci_hcd vhci_hcd.1: disconnect device
[  635.578953][   T24] usb 2-1: USB disconnect, device number 75
[  635.589090][ T9808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  635.634480][ T9808] usb 5-1: Product: syz
[  635.656539][ T9808] usb 5-1: Manufacturer: syz
[  635.678960][ T9808] usb 5-1: SerialNumber: syz
[  635.793126][T14176] geneve2: entered promiscuous mode
[  635.835551][  T154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  635.865737][  T154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  635.904340][  T154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  635.934269][  T154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.056822][ T9808] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  636.128889][ T9808] usb 5-1: USB disconnect, device number 34
[  636.168463][ T9808] usblp0: removed
[  636.382083][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.409768][T14198] loop8: detected capacity change from 0 to 7
[  636.429655][T14198] Dev loop8: unable to read RDB block 7
[  636.443949][T14198]  loop8: unable to read partition table
[  636.466097][T14198] loop8: partition table beyond EOD, truncated
[  636.476398][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.502942][T14198] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  636.815753][T14215] Cannot find add_set index 3 as target
[  637.081121][ T8396] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  637.245055][ T8396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  637.260657][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.292177][ T8396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  637.331908][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.346684][ T8396] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  637.362184][ T8396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.371564][ T8394] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  637.393581][ T8396] usb 6-1: Product: syz
[  637.393647][T14225] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  637.411613][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.424250][ T8396] usb 6-1: Manufacturer: syz
[  637.430502][T14225] openvswitch: netlink: IP tunnel TTL not specified.
[  637.443626][ T8396] usb 6-1: SerialNumber: syz
[  637.492229][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.541192][ T8394] usb 4-1: Using ep0 maxpacket: 32
[  637.565023][ T8394] usb 4-1: unable to get BOS descriptor or descriptor too short
[  637.578566][ T8394] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  637.594064][ T8394] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  637.605626][ T8394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.620811][ T8394] usb 4-1: Product: syz
[  637.626770][ T8394] usb 4-1: Manufacturer: syz
[  637.636326][ T8394] usb 4-1: SerialNumber: syz
[  637.855777][T14222] tap0: tun_chr_ioctl cmd 1074025677
[  637.873753][T14222] tap0: linktype set to 804
[  637.899169][T14221] tap0: tun_chr_ioctl cmd 1074025677
[  637.922969][T14221] tap0: linktype set to 804
[  637.982700][ T8396] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  638.006644][ T8396] usb 6-1: USB disconnect, device number 81
[  638.071178][ T8394] usb 4-1: Cannot retrieve CPort count: -71
[  638.090409][ T8394] usb 4-1: Cannot retrieve CPort count: -71
[  638.107365][ T8394] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71
[  638.123230][ T8394] usb 4-1: USB disconnect, device number 60
[  638.191170][ T9808] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  638.365025][ T9808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.391327][ T9808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  638.404380][ T9808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  638.418080][ T9808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  638.428644][ T9808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.452011][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.463491][ T9808] usb 3-1: config 0 descriptor??
[  638.743218][T14269] fuse: Unknown parameter 'dont_hash'
[  638.775788][T14271] fuse: Unknown parameter 'dont_hash'
[  638.938218][ T9808] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  639.091431][ T9808] usb 3-1: USB disconnect, device number 34
[  639.162706][T14281] syzkaller0: entered promiscuous mode
[  639.171344][ T9815] usb 36-1: device descriptor read/8, error -110
[  639.189513][T14281] syzkaller0: entered allmulticast mode
[  639.296318][T14278] fido_id[14278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  639.609274][ T9815] usb usb36-port1: attempt power cycle
[  640.223147][ T9815] usb usb36-port1: unable to enumerate USB device
[  640.376251][ T8396] net_ratelimit: 5 callbacks suppressed
[  640.376271][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.532766][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.719104][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.905658][T14304] loop9: detected capacity change from 0 to 4096
[  641.572556][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.732954][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.645367][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.805575][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.346631][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.424821][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.672223][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.767414][ T9808] net_ratelimit: 4 callbacks suppressed
[  645.767435][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.938765][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.151568][T14309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2323'.
[  646.371836][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.455560][ T8396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.739170][T14333] bridge_slave_1: default FDB implementation only supports local addresses
[  646.776967][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.021763][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.030343][ T8396] hsr0: entered promiscuous mode
[  647.075048][T14330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  647.077770][ T9815] usb 6-1: new full-speed USB device number 82 using dummy_hcd
[  647.159105][T14344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.207755][T14344] xt_CT: You must specify a L4 protocol and not use inversions on it
[  647.275794][ T9815] usb 6-1: config 2 has an invalid interface number: 12 but max is 0
[  647.294713][ T9815] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  647.317601][ T9815] usb 6-1: config 2 has no interface number 0
[  647.335124][ T9815] usb 6-1: config 2 interface 12 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  647.376805][ T9815] usb 6-1: config 2 interface 12 has no altsetting 0
[  647.395639][ T9815] usb 6-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  647.428588][ T9815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.450804][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880563e9800: rx timeout, send abort
[  647.501531][ T9815] usb 6-1: Product: syz
[  647.530882][ T9815] usb 6-1: Manufacturer: syz
[  647.545503][ T9815] usb 6-1: SerialNumber: syz
[  647.724810][ T5366] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  647.812066][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.837179][T14360] EXT4-fs: Conflicting test_dummy_encryption options
[  647.898919][ T5366] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  647.933127][ T5366] usb 3-1: config 2 has no interface number 0
[  647.933353][T14360] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  647.949027][T14360] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  647.963650][ T5366] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  647.964409][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880563e9800: abort rx timeout. Force session deactivation
[  648.016832][ T5366] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  648.051369][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.072278][T14332] 8021q: adding VLAN 0 to HW filter on device bond7
[  648.084006][ T5366] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103
[  648.100876][T14360] hsr0: entered promiscuous mode
[  648.111087][ T9808] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  648.129667][ T5366] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  648.141858][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'.
[  648.159396][ T9815] usb 6-1: USB disconnect, device number 82
[  648.171897][ T5366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.207905][ T5366] usb 3-1: Product: syz
[  648.232262][ T5366] usb 3-1: Manufacturer: syz
[  648.245980][ T5366] usb 3-1: SerialNumber: syz
[  648.264247][ T9808] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  648.298182][ T9808] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x6 has invalid maxpacket 40960, setting to 1024
[  648.330325][ T9808] usb 5-1: config 0 interface 0 has no altsetting 0
[  648.352392][ T9808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  648.372634][T14355] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  648.384024][T14355] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  648.396916][ T9808] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  648.409219][ T9808] usb 5-1: Product: syz
[  648.413843][ T9808] usb 5-1: Manufacturer: syz
[  648.418794][ T9808] usb 5-1: SerialNumber: syz
[  648.429847][T14360] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2337'.
[  648.444768][ T9808] usb 5-1: config 0 descriptor??
[  648.462365][ T9808] usb 5-1: selecting invalid altsetting 0
[  648.619623][ T5366] usb 3-1: probing VID:PID(0424:012C)   
[  648.648539][ T5366] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E
[  648.686809][ T5366] usb 3-1: vub300 testing BULK IN EndPoint(1) 82
[  648.707842][ T5366] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  648.739975][ T5366] vub300 3-1:2.174: probe with driver vub300 failed with error -22
[  648.776518][ T9808] usb 5-1: USB disconnect, device number 35
[  648.824746][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2342'.
[  648.867431][ T5366] usb 3-1: USB disconnect, device number 35
[  648.961389][ T8394] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  649.121608][ T8394] usb 4-1: Using ep0 maxpacket: 32
[  649.138032][ T8394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.165008][ T8394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  649.193461][ T8394] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  649.205178][ T8394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.215520][ T8394] usb 4-1: Product: syz
[  649.219907][ T8394] usb 4-1: Manufacturer: syz
[  649.234821][ T8394] usb 4-1: SerialNumber: syz
[  649.256444][T14386] loop8: detected capacity change from 0 to 7
[  649.276873][T14386] Dev loop8: unable to read RDB block 7
[  649.281842][ T8396] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  649.284298][T14386]  loop8: unable to read partition table
[  649.296834][T14386] loop8: partition table beyond EOD, truncated
[  649.312318][T14386] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  649.451162][ T8396] usb 6-1: Using ep0 maxpacket: 16
[  649.474873][ T8394] usb 4-1: 0:1 : does not exist
[  649.483845][ T8396] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023
[  649.515744][ T8396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  649.549140][ T8396] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  649.578993][ T8396] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  649.622635][ T8394] usb 4-1: USB disconnect, device number 61
[  649.705566][T14371] udevd[14371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  650.132119][ T9808] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  650.151214][   T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  650.292773][ T9808] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  650.303211][ T9808] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[  650.312477][   T24] usb 2-1: Using ep0 maxpacket: 16
[  650.317780][ T9808] usb 3-1: config 220 interface 0 has no altsetting 0
[  650.325044][ T9815] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  650.335705][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  650.344771][ T9808] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  650.354288][ T9808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.362641][ T9808] usb 3-1: Product: syz
[  650.367074][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  650.378302][ T9808] usb 3-1: Manufacturer: syz
[  650.383121][ T9808] usb 3-1: SerialNumber: syz
[  650.389943][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0159, bcdDevice= 0.40
[  650.399834][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.408918][   T24] usb 2-1: Product: syz
[  650.414945][   T24] usb 2-1: Manufacturer: syz
[  650.419639][   T24] usb 2-1: SerialNumber: syz
[  650.493449][ T9815] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  650.505317][ T9815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 16537, setting to 1024
[  650.516573][ T9815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  650.526691][ T9815] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  650.536496][ T9815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.548412][ T9815] usb 4-1: config 0 descriptor??
[  650.554875][T14405] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  650.627631][ T9808] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  650.635311][ T9808] uvcvideo 3-1:220.0: No valid video chain found.
[  650.649197][ T9808] usb 3-1: USB disconnect, device number 36
[  650.660112][   T24] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  650.679112][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  650.696948][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  650.719305][   T24] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  650.728407][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  650.736403][   T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  650.753183][   T24] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  650.760701][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  650.899931][T14411] gtp0: entered promiscuous mode
[  650.917331][   T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  650.927027][T14411] gtp0: entered allmulticast mode
[  650.933788][ T8403] net_ratelimit: 8 callbacks suppressed
[  650.933820][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.958819][   T24] usb 2-1: USB disconnect, device number 76
[  650.970504][T14411] team0: Device gtp0 is of different type
[  650.997786][T14371] udevd[14371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.120423][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.132195][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.143083][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.157618][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.171508][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.188319][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.213568][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.243751][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.270561][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.282294][ T9815] ath6kl: Failed to submit usb control message: -71
[  651.304383][T14421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'.
[  651.304420][ T9815] ath6kl: unable to send the bmi data to the device: -71
[  651.326056][T14423] sctp: [Deprecated]: syz.2.2355 (pid 14423) Use of struct sctp_assoc_value in delayed_ack socket option.
[  651.326056][T14423] Use struct sctp_sack_info instead
[  651.343620][ T9815] ath6kl: Unable to send get target info: -71
[  651.382876][ T9815] ath6kl: Failed to init ath6kl core: -71
[  651.422589][ T9815] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  651.479946][ T9815] usb 4-1: USB disconnect, device number 62
[  651.604682][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'.
[  651.871154][ T9815] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  652.031340][ T9815] usb 4-1: Using ep0 maxpacket: 8
[  652.040004][ T9815] usb 4-1: config 255 has an invalid interface number: 233 but max is 2
[  652.048877][ T9815] usb 4-1: config 255 contains an unexpected descriptor of type 0x1, skipping
[  652.069829][ T9815] usb 4-1: config 255 has an invalid interface number: 199 but max is 2
[  652.086319][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  652.107607][ T8396] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  652.113458][ T9815] usb 4-1: config 255 has an invalid interface number: 211 but max is 2
[  652.133863][ T8396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.166901][ T8396] usb 6-1: Product: 귢缙芮崕膒뗵ꢣ劀倱꯱鰽ର෕覯籀脱㊻隆㸉ɵٳ댿ﯩ墼䁇鼌댞憵红⼔偂쮶㇀ᵦ绠퇴䌞閺穒ᅳᓍ⟮裏᫏쁱
[  652.171677][ T9815] usb 4-1: config 255 has no interface number 0
[  652.240599][ T9815] usb 4-1: config 255 has no interface number 1
[  652.248057][ T8396] usb 6-1: can't set config #1, error -71
[  652.261353][ T9815] usb 4-1: config 255 has no interface number 2
[  652.283820][   T24] usb 3-1: Using ep0 maxpacket: 32
[  652.298765][ T8396] usb 6-1: USB disconnect, device number 83
[  652.318170][ T9815] usb 4-1: config 255 interface 233 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  652.343972][ T9815] usb 4-1: config 255 interface 233 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64
[  652.359377][ T9815] usb 4-1: config 255 interface 233 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  652.403403][ T9815] usb 4-1: config 255 interface 233 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 16
[  652.430862][ T9815] usb 4-1: config 255 interface 199 altsetting 181 bulk endpoint 0x3 has invalid maxpacket 8
[  652.471401][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0x9, skipping
[  652.504669][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0xE, skipping
[  652.537225][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0x5, skipping
[  652.582214][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0xA, skipping
[  652.606318][T14464] netlink: 'syz.1.2368': attribute type 10 has an invalid length.
[  652.620415][T14461] xt_CONNSECMARK: invalid mode: 0
[  652.620879][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0xE, skipping
[  652.641524][ T9815] usb 4-1: config 255 interface 199 altsetting 181 has a duplicate endpoint with address 0xF, skipping
[  652.667849][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has an endpoint descriptor with address 0x1C, changing to 0xC
[  652.705693][T14462] netlink: 'syz.2.2362': attribute type 32 has an invalid length.
[  652.711353][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has an invalid descriptor for endpoint zero, skipping
[  652.735508][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0x6, skipping
[  652.776806][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has an invalid descriptor for endpoint zero, skipping
[  652.809167][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0x9, skipping
[  652.820542][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0xA, skipping
[  652.832077][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0x5, skipping
[  652.843357][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0x3, skipping
[  652.854805][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0xE, skipping
[  652.869017][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has an invalid descriptor for endpoint zero, skipping
[  652.880473][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0xA, skipping
[  652.891752][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0x2, skipping
[  652.902996][ T9815] usb 4-1: config 255 interface 211 altsetting 115 has a duplicate endpoint with address 0xC, skipping
[  652.917547][ T9815] usb 4-1: config 255 interface 233 has no altsetting 0
[  652.936996][ T9815] usb 4-1: config 255 interface 199 has no altsetting 0
[  652.959354][ T9815] usb 4-1: config 255 interface 211 has no altsetting 0
[  652.985200][ T9815] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=a4.ef
[  653.004718][ T9815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.036076][ T9815] usb 4-1: Product: ь
[  653.048609][ T9815] usb 4-1: Manufacturer: 莫毃ល唨愂理챙ẻ潅辆㶾帊뾌崷獲䇞뚈㯓Ⲩ㭡秕௩㑾龏Ⱳ֣湐켧퉦낍ꇀ⣆壶锈鳀थ貾ﳧ䴜캿Ꝛ萸碰幖Ŵ஢퐻휕Ἄ趹삚ᑧ쀭㣲볻닍샊旉¥䑬⊗狀༟鲜화匱꿰砄⥬呗棎ꪍ尕嵣ଙ▰ʌ愔唞떻綀ᴥ긒ಯቧ㩾囐鴬າ귂씟舺鮚ﶗ䅤豺좏㇦寣蘭肵裮
[  653.162856][ T9815] usb 4-1: SerialNumber: syz
[  653.187844][T14428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  653.485924][ T9815] usb 4-1: USB disconnect, device number 63
[  653.561237][ T9808] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  653.742947][ T9808] usb 6-1: Using ep0 maxpacket: 32
[  653.803355][ T9808] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  653.833995][ T9808] usb 6-1: config 0 has no interface number 0
[  653.863087][ T9808] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  653.895213][ T9808] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  653.914070][ T9808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.935274][ T9808] usb 6-1: Product: syz
[  653.948380][ T9808] usb 6-1: Manufacturer: syz
[  653.958981][ T9808] usb 6-1: SerialNumber: syz
[  653.981318][ T9808] usb 6-1: config 0 descriptor??
[  653.994846][T14479] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  654.131163][ T5366] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  654.242198][T14479] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  654.302321][ T5366] usb 2-1: Using ep0 maxpacket: 16
[  655.845565][T14505] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  655.852143][T14505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  655.871152][ T8394] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  655.902362][T14505] vhci_hcd vhci_hcd.0: Device attached
[  656.016764][T14506] vhci_hcd: connection closed
[  656.017265][T12589] vhci_hcd vhci_hcd.4: stop threads
[  656.033438][ T8394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.069396][ T8394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.104281][ T8394] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  656.117328][T12589] vhci_hcd vhci_hcd.4: release socket
[  656.117422][T12589] vhci_hcd vhci_hcd.4: disconnect device
[  656.135839][ T8403] net_ratelimit: 62 callbacks suppressed
[  656.135860][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.159765][ T8388] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  656.175732][ T8388] usb 41-1: enqueue for inactive port 0
[  656.192871][ T8394] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  656.236637][ T8394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.274847][ T8394] usb 4-1: config 0 descriptor??
[  656.291105][ T8388] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  656.381297][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.457116][ T9808] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  656.491624][ T9808] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  656.522239][ T9808] asix 6-1:0.188: probe with driver asix failed with error -71
[  656.531243][ T8403] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  656.574364][ T9808] usb 6-1: USB disconnect, device number 84
[  656.692217][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.707432][ T8403] usb 5-1: not running at top speed; connect to a high speed hub
[  656.727426][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.763295][ T8403] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  656.766622][ T8394] hid_parser_main: 5 callbacks suppressed
[  656.766645][ T8394] steelseries 0003:1038:1410.003E: unknown main item tag 0x1
[  656.827160][ T8394] steelseries 0003:1038:1410.003E: not enough values in HID_OUTPUT_REPORT 0 field 0
[  656.836994][ T8403] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  656.879901][ T8403] usb 5-1: config 1 interface 0 has no altsetting 0
[  656.906969][ T8403] usb 5-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.40
[  656.950556][ T8403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.988692][ T8403] usb 5-1: Product: syz
[  657.012002][ T8403] usb 5-1: Manufacturer: ퟟ굨鲏枺ﰙ鷸泭㐬ꡨ姾穁䔰൝⒘᱾賟싦鋩檊媺铂륦흗怈暹⮂ꊰ닜咖ᚖ䱕曼淥뱜Ģ
[  657.086573][ T8403] usb 5-1: SerialNumber: syz
[  657.124958][T14512] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  657.171969][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.242311][ T5366] usb 2-1: unable to get BOS descriptor or descriptor too short
[  657.280784][ T5366] usb 2-1: unable to read config index 0 descriptor/start: -71
[  657.307090][ T5366] usb 2-1: can't read configurations, error -71
[  657.331368][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  657.351653][   T24] usb 3-1: unable to read config index 0 descriptor/start: -32
[  657.371094][   T24] usb 3-1: chopping to 0 config(s)
[  657.381056][   T24] usb 3-1: can't read configurations, error -32
[  657.411215][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.521066][   T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  657.568023][ T8403] usbhid 5-1:1.0: can't add hid device: -71
[  657.581238][ T8403] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  657.616198][ T8403] usb 5-1: USB disconnect, device number 36
[  657.636677][ T8388] usb 4-1: USB disconnect, device number 64
[  657.663855][   T24] usb 3-1: device descriptor read/64, error -32
[  657.782864][   T24] usb usb3-port1: attempt power cycle
[  657.819933][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.132143][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  658.161026][ T5366] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  658.171346][   T24] usb 3-1: device descriptor read/8, error -32
[  658.211429][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.241137][ T8403] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  658.304800][ T5366] usb 2-1: device descriptor read/64, error -71
[  658.401642][ T8403] usb 4-1: Using ep0 maxpacket: 32
[  658.426911][ T8403] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  658.442832][ T5366] usb usb2-port1: attempt power cycle
[  658.454776][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.467356][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  658.486948][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  658.498173][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  658.509878][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  658.536499][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.546845][ T8403] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  658.559630][ T8403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.607739][ T8403] usb 4-1: Product: syz
[  658.621752][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.626064][ T8403] usb 4-1: Manufacturer: syz
[  658.650876][ T8403] usb 4-1: SerialNumber: syz
[  658.651380][T14536] 
[  658.658073][T14536] =====================================================
[  658.665003][T14536] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  658.672478][T14536] syzkaller #0 Tainted: G             L     
[  658.678472][T14536] -----------------------------------------------------
[  658.685392][T14536] syz.5.2390/14536 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  658.693107][T14536] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  658.701829][T14536] 
[  658.701829][T14536] and this task is already holding:
[  658.709188][T14536] ffff88807f4a9da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  658.717896][T14536] which would create a new lock dependency:
[  658.723803][T14536]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  658.731386][T14536] 
[  658.731386][T14536] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  658.740827][T14536]  (&client->buffer_lock){..-.}-{3:3}
[  658.740852][T14536] 
[  658.740852][T14536] ... which became SOFTIRQ-irq-safe at:
[  658.753902][T14536]   lock_acquire+0x106/0x350
[  658.758498][T14536]   _raw_spin_lock+0x2e/0x40
[  658.763103][T14536]   evdev_pass_values+0xb9/0xbd0
[  658.768180][T14536]   evdev_events+0x1e6/0x340
[  658.772765][T14536]   input_pass_values+0x288/0x890
[  658.777848][T14536]   input_event_dispose+0x3e5/0x6b0
[  658.783058][T14536]   input_event+0x84/0xc0
[  658.787385][T14536]   hidinput_hid_event+0x143a/0x1ec0
[  658.792728][T14536]   hid_process_event+0x4be/0x620
[  658.797747][T14536]   hid_input_array_field+0x41c/0x5f0
[  658.803122][T14536]   hid_report_raw_event+0xe1f/0x1850
[  658.808497][T14536]   __hid_input_report+0x45c/0x590
[  658.813608][T14536]   hid_irq_in+0x495/0x710
[  658.818141][T14536]   __usb_hcd_giveback_urb+0x376/0x540
[  658.823658][T14536]   dummy_timer+0xbc0/0x4650
[  658.828351][T14536]   __hrtimer_run_queues+0x3c0/0xa20
[  658.833631][T14536]   hrtimer_run_softirq+0x17a/0x240
[  658.838826][T14536]   handle_softirqs+0x22a/0x840
[  658.843672][T14536]   __irq_exit_rcu+0xca/0x220
[  658.848352][T14536]   irq_exit_rcu+0x9/0x30
[  658.852673][T14536]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  658.858478][T14536]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  658.864542][T14536]   page_table_check_clear+0x2f2/0x4f0
[  658.870015][T14536]   __zap_vma_range+0x3688/0x4b70
[  658.875032][T14536]   unmap_vmas+0x3ac/0x570
[  658.879440][T14536]   exit_mmap+0x280/0x9e0
[  658.883768][T14536]   __mmput+0x118/0x430
[  658.887925][T14536]   exec_mmap+0x3b4/0x440
[  658.892251][T14536]   begin_new_exec+0x134a/0x2480
[  658.897184][T14536]   load_elf_binary+0xa47/0x2980
[  658.902174][T14536]   bprm_execve+0x94a/0x1510
[  658.906767][T14536]   do_execveat_common+0x50d/0x690
[  658.911878][T14536]   __x64_sys_execve+0x97/0xc0
[  658.916637][T14536]   do_syscall_64+0x174/0x580
[  658.921310][T14536]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.927281][T14536] 
[  658.927281][T14536] to a SOFTIRQ-irq-unsafe lock:
[  658.934285][T14536]  (tasklist_lock){.+.+}-{3:3}
[  658.934311][T14536] 
[  658.934311][T14536] ... which became SOFTIRQ-irq-unsafe at:
[  658.946924][T14536] ...
[  658.946933][T14536]   lock_acquire+0x106/0x350
[  658.954090][T14536]   _raw_read_lock+0x36/0x50
[  658.958777][T14536]   __do_wait+0xde/0x740
[  658.963017][T14536]   do_wait+0x1e7/0x510
[  658.967166][T14536]   kernel_wait+0xd6/0x1c0
[  658.971576][T14536]   call_usermodehelper_exec_work+0xbe/0x230
[  658.977585][T14536]   process_scheduled_works+0xb5d/0x1860
[  658.983204][T14536]   worker_thread+0xa53/0xfc0
[  658.987875][T14536]   kthread+0x389/0x470
[  658.992034][T14536]   ret_from_fork+0x514/0xb70
[  658.996753][T14536]   ret_from_fork_asm+0x1a/0x30
[  659.001605][T14536] 
[  659.001605][T14536] other info that might help us debug this:
[  659.001605][T14536] 
[  659.011834][T14536] Chain exists of:
[  659.011834][T14536]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[  659.011834][T14536] 
[  659.025094][T14536]  Possible interrupt unsafe locking scenario:
[  659.025094][T14536] 
[  659.033409][T14536]        CPU0                    CPU1
[  659.038780][T14536]        ----                    ----
[  659.044135][T14536]   lock(tasklist_lock);
[  659.048371][T14536]                                local_irq_disable();
[  659.055113][T14536]                                lock(&client->buffer_lock);
[  659.062472][T14536]                                lock(&f_owner->lock);
[  659.069312][T14536]   <Interrupt>
[  659.072752][T14536]     lock(&client->buffer_lock);
[  659.077778][T14536] 
[  659.077778][T14536]  *** DEADLOCK ***
[  659.077778][T14536] 
[  659.085907][T14536] 2 locks held by syz.5.2390/14536:
[  659.091090][T14536]  #0: ffff888031947dd0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0
[  659.099707][T14536]  #1: ffff88807f4a9da0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  659.108848][T14536] 
[  659.108848][T14536] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  659.119251][T14536]   -> (&client->buffer_lock){..-.}-{3:3} {
[  659.125173][T14536]      IN-SOFTIRQ-W at:
[  659.129532][T14536]                         lock_acquire+0x106/0x350
[  659.136037][T14536]                         _raw_spin_lock+0x2e/0x40
[  659.142532][T14536]                         evdev_pass_values+0xb9/0xbd0
[  659.149372][T14536]                         evdev_events+0x1e6/0x340
[  659.155865][T14536]                         input_pass_values+0x288/0x890
[  659.162796][T14536]                         input_event_dispose+0x3e5/0x6b0
[  659.169905][T14536]                         input_event+0x84/0xc0
[  659.176143][T14536]                         hidinput_hid_event+0x143a/0x1ec0
[  659.183352][T14536]                         hid_process_event+0x4be/0x620
[  659.190301][T14536]                         hid_input_array_field+0x41c/0x5f0
[  659.197584][T14536]                         hid_report_raw_event+0xe1f/0x1850
[  659.204867][T14536]                         __hid_input_report+0x45c/0x590
[  659.211888][T14536]                         hid_irq_in+0x495/0x710
[  659.218211][T14536]                         __usb_hcd_giveback_urb+0x376/0x540
[  659.225581][T14536]                         dummy_timer+0xbc0/0x4650
[  659.232078][T14536]                         __hrtimer_run_queues+0x3c0/0xa20
[  659.239267][T14536]                         hrtimer_run_softirq+0x17a/0x240
[  659.246389][T14536]                         handle_softirqs+0x22a/0x840
[  659.253179][T14536]                         __irq_exit_rcu+0xca/0x220
[  659.259781][T14536]                         irq_exit_rcu+0x9/0x30
[  659.266023][T14536]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[  659.273646][T14536]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  659.281625][T14536]                         page_table_check_clear+0x2f2/0x4f0
[  659.289017][T14536]                         __zap_vma_range+0x3688/0x4b70
[  659.295941][T14536]                         unmap_vmas+0x3ac/0x570
[  659.302261][T14536]                         exit_mmap+0x280/0x9e0
[  659.308499][T14536]                         __mmput+0x118/0x430
[  659.314594][T14536]                         exec_mmap+0x3b4/0x440
[  659.320827][T14536]                         begin_new_exec+0x134a/0x2480
[  659.327677][T14536]                         load_elf_binary+0xa47/0x2980
[  659.334520][T14536]                         bprm_execve+0x94a/0x1510
[  659.341018][T14536]                         do_execveat_common+0x50d/0x690
[  659.348040][T14536]                         __x64_sys_execve+0x97/0xc0
[  659.354711][T14536]                         do_syscall_64+0x174/0x580
[  659.361297][T14536]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.369205][T14536]      INITIAL USE at:
[  659.373275][T14536]                        lock_acquire+0x106/0x350
[  659.379708][T14536]                        _raw_spin_lock+0x2e/0x40
[  659.386141][T14536]                        evdev_pass_values+0xb9/0xbd0
[  659.392900][T14536]                        evdev_events+0x1e6/0x340
[  659.399314][T14536]                        input_pass_values+0x288/0x890
[  659.406163][T14536]                        input_event_dispose+0x330/0x6b0
[  659.413541][T14536]                        input_inject_event+0x1dc/0x330
[  659.420490][T14536]                        evdev_write+0x325/0x4c0
[  659.426822][T14536]                        vfs_write+0x29a/0xb90
[  659.432989][T14536]                        ksys_write+0x150/0x270
[  659.439234][T14536]                        do_syscall_64+0x174/0x580
[  659.445816][T14536]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.453632][T14536]    }
[  659.456305][T14536]    ... key      at: [<ffffffff9a7ca840>] evdev_open.__key.27+0x0/0x20
[  659.464796][T14536]  -> (&new->fa_lock){....}-{3:3} {
[  659.470009][T14536]     INITIAL USE at:
[  659.473979][T14536]                      lock_acquire+0x106/0x350
[  659.480227][T14536]                      _raw_write_lock_irq+0x3d/0x50
[  659.486900][T14536]                      fasync_remove_entry+0xf1/0x1c0
[  659.493662][T14536]                      sock_fasync+0x85/0xf0
[  659.499641][T14536]                      __fput+0x890/0xa60
[  659.505357][T14536]                      task_work_run+0x1d9/0x270
[  659.511685][T14536]                      exit_to_user_mode_loop+0x193/0x680
[  659.518790][T14536]                      do_syscall_64+0x353/0x580
[  659.525113][T14536]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.532741][T14536]     INITIAL READ USE at:
[  659.537148][T14536]                           lock_acquire+0x106/0x350
[  659.543835][T14536]                           _raw_read_lock_irqsave+0x48/0x60
[  659.551205][T14536]                           kill_fasync+0x199/0x4d0
[  659.557806][T14536]                           sock_wake_async+0x137/0x160
[  659.564823][T14536]                           sk_wake_async+0x184/0x280
[  659.571585][T14536]                           unix_release_sock+0x74f/0xc80
[  659.578691][T14536]                           unix_release+0x92/0xd0
[  659.585275][T14536]                           sock_close+0xc3/0x240
[  659.591686][T14536]                           __fput+0x44f/0xa60
[  659.597837][T14536]                           task_work_run+0x1d9/0x270
[  659.604596][T14536]                           exit_to_user_mode_loop+0x193/0x680
[  659.612140][T14536]                           do_syscall_64+0x353/0x580
[  659.618900][T14536]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.626962][T14536]   }
[  659.629538][T14536]   ... key      at: [<ffffffff9a4ac8a0>] fasync_insert_entry.__key+0x0/0x20
[  659.638436][T14536]   ... acquired at:
[  659.642319][T14536]    _raw_read_lock_irqsave+0x48/0x60
[  659.647692][T14536]    kill_fasync+0x199/0x4d0
[  659.652287][T14536]    evdev_pass_values+0x627/0xbd0
[  659.657394][T14536]    evdev_events+0x1e6/0x340
[  659.662071][T14536]    input_pass_values+0x288/0x890
[  659.667180][T14536]    input_event_dispose+0x330/0x6b0
[  659.672471][T14536]    input_inject_event+0x1dc/0x330
[  659.677664][T14536]    evdev_write+0x325/0x4c0
[  659.682411][T14536]    vfs_write+0x29a/0xb90
[  659.687106][T14536]    ksys_write+0x150/0x270
[  659.691900][T14536]    do_syscall_64+0x174/0x580
[  659.697112][T14536]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.703173][T14536] 
[  659.705493][T14536] -> (&f_owner->lock){....}-{3:3} {
[  659.710703][T14536]    INITIAL USE at:
[  659.714589][T14536]                    lock_acquire+0x106/0x350
[  659.720653][T14536]                    _raw_write_lock_irq+0x3d/0x50
[  659.727170][T14536]                    __f_setown+0x67/0x370
[  659.732973][T14536]                    f_setown+0x23a/0x300
[  659.738692][T14536]                    sock_ioctl+0x615/0x7f0
[  659.744669][T14536]                    __se_sys_ioctl+0xfc/0x170
[  659.751434][T14536]                    do_syscall_64+0x174/0x580
[  659.757954][T14536]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.765502][T14536]    INITIAL READ USE at:
[  659.769825][T14536]                         lock_acquire+0x106/0x350
[  659.776843][T14536]                         _raw_read_lock_irqsave+0x48/0x60
[  659.784043][T14536]                         send_sigio+0x38/0x370
[  659.790284][T14536]                         kill_fasync+0x24d/0x4d0
[  659.796705][T14536]                         tty_wakeup+0xbe/0x100
[  659.803078][T14536]                         pty_unthrottle+0x3c/0x60
[  659.809685][T14536]                         tty_unthrottle+0xb1/0x110
[  659.816292][T14536]                         n_tty_open+0x11c/0x150
[  659.822619][T14536]                         tty_ldisc_failto+0x1e1/0x330
[  659.829485][T14536]                         tty_ldisc_restore+0x57/0x110
[  659.836356][T14536]                         tty_set_ldisc+0x3a1/0x560
[  659.842966][T14536]                         tty_ioctl+0xc37/0xde0
[  659.849243][T14536]                         __se_sys_ioctl+0xfc/0x170
[  659.855844][T14536]                         do_syscall_64+0x174/0x580
[  659.862428][T14536]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.870339][T14536]  }
[  659.872843][T14536]  ... key      at: [<ffffffff9a4ac880>] file_f_owner_allocate.__key+0x0/0x20
[  659.881797][T14536]  ... acquired at:
[  659.885605][T14536]    _raw_read_lock_irqsave+0x48/0x60
[  659.890982][T14536]    send_sigio+0x38/0x370
[  659.895496][T14536]    kill_fasync+0x24d/0x4d0
[  659.900138][T14536]    tty_wakeup+0xbe/0x100
[  659.904557][T14536]    pty_unthrottle+0x3c/0x60
[  659.909411][T14536]    tty_unthrottle+0xb1/0x110
[  659.914173][T14536]    n_tty_open+0x11c/0x150
[  659.918669][T14536]    tty_ldisc_failto+0x1e1/0x330
[  659.923689][T14536]    tty_ldisc_restore+0x57/0x110
[  659.928705][T14536]    tty_set_ldisc+0x3a1/0x560
[  659.933464][T14536]    tty_ioctl+0xc37/0xde0
[  659.937875][T14536]    __se_sys_ioctl+0xfc/0x170
[  659.942765][T14536]    do_syscall_64+0x174/0x580
[  659.947525][T14536]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.953584][T14536] 
[  659.955896][T14536] 
[  659.955896][T14536] the dependencies between the lock to be acquired
[  659.955905][T14536]  and SOFTIRQ-irq-unsafe lock:
[  659.969402][T14536] -> (tasklist_lock){.+.+}-{3:3} {
[  659.974531][T14536]    HARDIRQ-ON-R at:
[  659.978518][T14536]                     lock_acquire+0x106/0x350
[  659.984669][T14536]                     _raw_read_lock+0x36/0x50
[  659.990825][T14536]                     __do_wait+0xde/0x740
[  659.996646][T14536]                     do_wait+0x1e7/0x510
[  660.002363][T14536]                     kernel_wait+0xd6/0x1c0
[  660.008339][T14536]                     call_usermodehelper_exec_work+0xbe/0x230
[  660.015879][T14536]                     process_scheduled_works+0xb5d/0x1860
[  660.023069][T14536]                     worker_thread+0xa53/0xfc0
[  660.029325][T14536]                     kthread+0x389/0x470
[  660.035043][T14536]                     ret_from_fork+0x514/0xb70
[  660.041374][T14536]                     ret_from_fork_asm+0x1a/0x30
[  660.047796][T14536]    SOFTIRQ-ON-R at:
[  660.051763][T14536]                     lock_acquire+0x106/0x350
[  660.057916][T14536]                     _raw_read_lock+0x36/0x50
[  660.064069][T14536]                     __do_wait+0xde/0x740
[  660.069874][T14536]                     do_wait+0x1e7/0x510
[  660.075601][T14536]                     kernel_wait+0xd6/0x1c0
[  660.081581][T14536]                     call_usermodehelper_exec_work+0xbe/0x230
[  660.089126][T14536]                     process_scheduled_works+0xb5d/0x1860
[  660.096323][T14536]                     worker_thread+0xa53/0xfc0
[  660.102568][T14536]                     kthread+0x389/0x470
[  660.108296][T14536]                     ret_from_fork+0x514/0xb70
[  660.114529][T14536]                     ret_from_fork_asm+0x1a/0x30
[  660.120939][T14536]    INITIAL USE at:
[  660.124830][T14536]                    lock_acquire+0x106/0x350
[  660.130902][T14536]                    _raw_write_lock_irq+0x3d/0x50
[  660.137403][T14536]                    copy_process+0x2b4c/0x4440
[  660.143639][T14536]                    kernel_clone+0x2d7/0x940
[  660.149709][T14536]                    user_mode_thread+0x110/0x180
[  660.156119][T14536]                    rest_init+0x23/0x300
[  660.161834][T14536]                    start_kernel+0x38a/0x3e0
[  660.168024][T14536]                    x86_64_start_reservations+0x24/0x30
[  660.175096][T14536]                    x86_64_start_kernel+0x143/0x1c0
[  660.181776][T14536]                    common_startup_64+0x13e/0x147
[  660.188280][T14536]    INITIAL READ USE at:
[  660.192603][T14536]                         lock_acquire+0x106/0x350
[  660.199360][T14536]                         _raw_read_lock+0x36/0x50
[  660.205870][T14536]                         __do_wait+0xde/0x740
[  660.212042][T14536]                         do_wait+0x1e7/0x510
[  660.218100][T14536]                         kernel_wait+0xd6/0x1c0
[  660.224422][T14536]                         call_usermodehelper_exec_work+0xbe/0x230
[  660.232313][T14536]                         process_scheduled_works+0xb5d/0x1860
[  660.239851][T14536]                         worker_thread+0xa53/0xfc0
[  660.246435][T14536]                         kthread+0x389/0x470
[  660.252493][T14536]                         ret_from_fork+0x514/0xb70
[  660.259071][T14536]                         ret_from_fork_asm+0x1a/0x30
[  660.265828][T14536]  }
[  660.268317][T14536]  ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[  660.276148][T14536]  ... acquired at:
[  660.279946][T14536]    _raw_read_lock+0x36/0x50
[  660.284677][T14536]    send_sigurg+0x12b/0x420
[  660.289264][T14536]    sk_send_sigurg+0x6c/0x2e0
[  660.294018][T14536]    queue_oob+0x42c/0x4f0
[  660.298428][T14536]    unix_stream_sendmsg+0xcb1/0xe80
[  660.303706][T14536]    ____sys_sendmsg+0x972/0x9f0
[  660.308647][T14536]    ___sys_sendmsg+0x2a5/0x360
[  660.313487][T14536]    __x64_sys_sendmsg+0x1bd/0x2a0
[  660.318586][T14536]    do_syscall_64+0x174/0x580
[  660.323342][T14536]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.329412][T14536] 
[  660.331742][T14536] 
[  660.331742][T14536] stack backtrace:
[  660.337639][T14536] CPU: 0 UID: 0 PID: 14536 Comm: syz.5.2390 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.337664][T14536] Tainted: [L]=SOFTLOCKUP
[  660.337670][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  660.337679][T14536] Call Trace:
[  660.337690][T14536]  <TASK>
[  660.337699][T14536]  dump_stack_lvl+0xe8/0x150
[  660.337721][T14536]  __lock_acquire+0x2a94/0x2cf0
[  660.337746][T14536]  ? send_sigurg+0x12b/0x420
[  660.337764][T14536]  lock_acquire+0x106/0x350
[  660.337778][T14536]  ? send_sigurg+0x12b/0x420
[  660.337799][T14536]  _raw_read_lock+0x36/0x50
[  660.337819][T14536]  ? send_sigurg+0x12b/0x420
[  660.337836][T14536]  send_sigurg+0x12b/0x420
[  660.337854][T14536]  sk_send_sigurg+0x6c/0x2e0
[  660.337877][T14536]  queue_oob+0x42c/0x4f0
[  660.337896][T14536]  ? __pfx_queue_oob+0x10/0x10
[  660.337912][T14536]  ? __schedule+0x1837/0x5740
[  660.337933][T14536]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  660.337954][T14536]  unix_stream_sendmsg+0xcb1/0xe80
[  660.337974][T14536]  ? __lock_acquire+0x6b5/0x2cf0
[  660.337989][T14536]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  660.338007][T14536]  ? aa_sock_msg_perm+0xda/0x1b0
[  660.338030][T14536]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  660.338047][T14536]  ____sys_sendmsg+0x972/0x9f0
[  660.338061][T14536]  ? __might_fault+0xaf/0x130
[  660.338080][T14536]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.338096][T14536]  ? import_iovec+0x73/0xa0
[  660.338115][T14536]  ___sys_sendmsg+0x2a5/0x360
[  660.338128][T14536]  ? __lock_acquire+0x6b5/0x2cf0
[  660.338143][T14536]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.338159][T14536]  ? futex_wait+0x2a2/0x390
[  660.338186][T14536]  ? __fget_files+0x2a/0x420
[  660.338202][T14536]  ? __fget_files+0x3a0/0x420
[  660.338220][T14536]  __x64_sys_sendmsg+0x1bd/0x2a0
[  660.338234][T14536]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.338250][T14536]  ? rcu_is_watching+0x15/0xb0
[  660.338270][T14536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.338284][T14536]  do_syscall_64+0x174/0x580
[  660.338299][T14536]  ? clear_bhb_loop+0x40/0x90
[  660.338315][T14536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.338329][T14536] RIP: 0033:0x7f53e439ce59
[  660.338344][T14536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.338356][T14536] RSP: 002b:00007f53e527b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.338373][T14536] RAX: ffffffffffffffda RBX: 00007f53e4615fa0 RCX: 00007f53e439ce59
[  660.338384][T14536] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000005
[  660.338394][T14536] RBP: 00007f53e4432d6f R08: 0000000000000000 R09: 0000000000000000
[  660.338402][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.338411][T14536] R13: 00007f53e4616038 R14: 00007f53e4615fa0 R15: 00007f53e473fa48
[  660.338426][T14536]  </TASK>
[  660.621661][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.643695][ T8403] usb 4-1: config 0 descriptor??
[  660.691253][ T5366] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  660.879130][ T5366] usb 2-1: device descriptor read/8, error -71
[  661.057189][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -32
[  661.064756][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -32
[  661.071687][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -32
[  661.078142][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -32
[  661.290479][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.297808][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.306414][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.312968][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.319215][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.325569][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.332122][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.338358][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.344782][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.352773][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.359324][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.365824][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.372600][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.378874][ T8403] iforce 4-1:0.0: usb_submit_urb failed: -71
[  661.385100][ T8403] input input72: Timeout waiting for response from device.
[  661.395056][ T8403] usb 4-1: USB disconnect, device number 65
[  661.571728][ T8388] net_ratelimit: 3 callbacks suppressed
[  661.571747][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.651716][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.660218][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.668410][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.701601][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.709887][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.732564][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.741089][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.611408][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.691622][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.852345][ T9815] net_ratelimit: 4 callbacks suppressed
[  666.852366][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.866400][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.411300][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.652140][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.731146][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.892773][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.901232][ T8403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog